Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File: g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier: Iw6QNqFXqwOjniHG6IqSUEC2A989bD6YyxAcfpjce7c=
Subject key identifier: ED:49:EE:5B:66:C2:D1:BF:40:3D:AD:1E:B3:43:7A:08:22:03:B7:FE
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer: /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial: 0196DA79046E857D4441768C8DBBCAF05746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number: 1541
Signing time: Fri 16 May 2025 19:01:26 +0000
Manifest this update: Fri 16 May 2025 19:01:26 +0000
Manifest next update: Sat 17 May 2025 19:01:26 +0000
Files and hashes: 1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: AmBSci9pQ/7a4DSC0UZQWxK2aR3ZOq4ksoj6BmNMlZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:79:04:6e:85:7d:44:41:76:8c:8d:bb:ca:f0:57:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
Validity
Not Before: May 16 19:01:26 2025 GMT
Not After : May 17 19:01:26 2025 GMT
Subject: CN=ed49ee5b66c2d1bf403dad1eb3437a082203b7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:1b:5e:ec:ff:9c:bf:0f:6c:09:94:2b:3a:
2d:43:9d:18:1f:5f:ed:57:da:6b:76:2d:fa:2e:cb:
e9:f9:ff:ab:10:6c:1a:4a:63:f8:46:ac:88:83:50:
60:db:9a:ec:ba:f4:c3:3a:86:e6:6e:25:c4:09:71:
56:be:fa:5b:8d:0e:a8:a7:08:ad:d2:8a:85:00:b1:
e6:7b:88:87:4d:32:1f:88:8c:77:6c:63:1b:d9:a6:
35:55:af:ff:1f:ca:79:2c:02:e8:db:bd:97:af:a2:
a4:7f:25:b2:33:b5:98:46:09:c4:05:14:60:c2:4b:
f1:18:24:04:16:d9:44:1c:bb:ce:96:56:b0:68:26:
4b:75:ed:29:e0:c3:52:be:01:ee:a9:30:41:8d:de:
bc:61:68:43:b2:cd:34:9d:7a:01:5c:5a:d4:82:3d:
9f:8c:17:c0:0e:9b:d4:bc:c0:d5:91:01:28:86:f5:
23:42:66:b2:08:85:d3:e3:ca:65:a9:80:c6:1d:05:
df:f1:aa:9d:87:82:91:23:51:4f:00:2d:eb:cd:c2:
a4:cf:e0:34:25:21:7b:3b:3e:8a:ec:87:9d:da:fb:
72:d9:86:06:28:71:55:0d:a3:2f:4a:10:44:03:e1:
08:e0:ac:09:95:b4:c2:c5:b6:bc:bd:b1:6b:7b:51:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:EE:5B:66:C2:D1:BF:40:3D:AD:1E:B3:43:7A:08:22:03:B7:FE
X509v3 Authority Key Identifier:
keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:4a:3a:43:79:c8:4b:5d:dd:7d:a1:1a:bc:09:25:69:8a:
4a:0f:f8:05:25:e3:22:09:d3:13:95:24:ad:b8:6b:b0:72:3a:
d4:46:4c:8a:8c:91:fa:d4:2c:15:d6:ca:9c:32:51:b3:cb:35:
a5:0a:43:d0:2e:69:36:35:e7:ce:fc:da:b5:d0:c2:14:68:91:
4e:20:de:72:8f:7c:0e:ea:2e:69:5c:15:28:ef:b1:14:5e:ff:
26:e1:58:db:4e:a1:22:28:52:2b:9e:8e:27:f2:b0:5d:ea:2c:
8a:76:aa:a3:bd:d4:56:9f:de:12:fb:51:44:7c:4f:0b:d9:e2:
7e:41:6c:b3:66:5e:c5:84:25:19:2a:63:eb:6a:0e:ea:f1:d3:
5e:43:f1:14:5b:47:94:eb:74:80:74:f8:a8:18:0a:0b:0f:25:
3d:7e:80:cd:07:15:d0:31:52:51:d6:da:a7:f8:2b:ad:57:58:
9f:98:19:b7:f1:46:3e:2a:3b:4a:08:3f:11:22:78:2f:d4:2a:
43:43:aa:b2:66:82:91:16:20:7b:03:e8:d6:64:d2:d0:9f:ed:
c8:68:c2:9d:6d:f3:a9:df:cc:0e:8a:59:0a:bd:fe:95:3e:84:
c7:c6:03:c9:91:76:3c:e9:9e:d7:2b:8f:ee:ef:2f:da:29:f2:
85:95:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:22:39 2025 by rpki-client