Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: KOvWpKedfrc/0D+SKHUoOoci3hdjw+QfgfsOv2Y56x4=
Subject key identifier: 1A:B6:06:C5:6A:A3:D1:6A:BF:BD:A3:24:68:89:AF:26:A6:30:6F:BC
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 0196C15D4CF688B5E40CFFB46FA44A015129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0C79
Signing time: Sun 11 May 2025 22:00:39 +0000
Manifest this update: Sun 11 May 2025 22:00:39 +0000
Manifest next update: Mon 12 May 2025 22:00:39 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: JyPDFB4z1Un0eEZKidOTq14uIBPb5/D6dwpe6tJltLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:4c:f6:88:b5:e4:0c:ff:b4:6f:a4:4a:01:51:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: May 11 22:00:39 2025 GMT
Not After : May 12 22:00:39 2025 GMT
Subject: CN=1ab606c56aa3d16abfbda3246889af26a6306fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:d4:78:ff:4e:cd:a1:f8:cd:e0:a7:36:20:
74:e3:a9:fa:79:e1:3d:65:ab:6f:c9:7e:cf:b8:fd:
7e:f8:54:c2:77:7c:9a:8f:2e:9b:ae:39:a6:ca:f5:
16:ed:f1:ca:78:dd:0d:f2:4a:88:52:97:b7:27:a9:
6c:51:58:4d:b6:50:2d:8b:59:01:4e:9b:81:43:a8:
d2:7c:92:4d:03:1b:8d:bd:ad:a2:7e:e9:30:c5:1b:
46:fe:31:6f:24:b8:59:ac:11:bc:e1:07:b6:c0:52:
49:06:35:ed:62:4c:fa:f0:59:f7:53:b0:36:8b:de:
34:15:f3:c0:ba:98:a2:42:3c:7d:c7:7e:5d:69:d7:
75:3f:13:28:e8:20:f2:b4:61:db:63:6c:aa:53:61:
fd:4d:7f:f9:51:79:18:8a:dc:27:b0:b2:2e:f7:34:
6e:36:28:88:bb:66:a9:60:70:10:ef:7b:12:57:57:
ef:02:01:f9:6e:e1:09:25:f2:b0:e9:03:53:7d:5a:
7b:bb:44:fc:f3:93:51:1b:a0:85:af:d5:b7:55:61:
9a:c8:94:e2:aa:b8:39:e6:c1:5a:ca:7e:73:79:f6:
91:62:79:0a:53:b5:74:38:da:c2:2b:e9:d9:03:59:
be:d5:7f:29:82:d6:dd:9e:a9:7d:83:25:80:df:73:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:06:C5:6A:A3:D1:6A:BF:BD:A3:24:68:89:AF:26:A6:30:6F:BC
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3f:24:8b:86:cd:eb:fa:18:49:c4:8a:98:11:1b:9d:b5:fc:
97:65:01:46:31:dc:54:a4:be:dc:c3:f7:63:37:0b:1a:63:c6:
e5:68:33:fd:f8:2c:08:c8:66:da:fc:85:f9:f2:e8:8a:47:99:
66:ad:4e:d8:d4:6a:72:3d:84:44:75:3b:7d:26:04:d1:18:f6:
fd:dd:2c:fc:9c:c2:27:a6:8c:04:ab:83:3f:cd:56:51:af:39:
4d:ec:b6:79:96:3b:9a:e3:aa:59:ca:68:8b:bf:26:ac:50:19:
28:e3:4a:5a:b5:8e:d2:f7:7c:a5:dd:83:26:5b:16:ad:45:aa:
20:55:54:cc:13:9a:3e:30:46:86:10:d2:09:73:eb:05:56:11:
db:83:95:01:57:9f:74:6c:f2:53:64:a4:12:b6:0a:31:2c:02:
02:a6:ed:01:94:11:12:de:ee:09:af:62:59:1f:6b:4c:52:e3:
a1:d9:32:b3:49:aa:f0:c7:cd:25:6e:df:90:b9:2b:be:3b:b8:
cf:0b:51:52:74:3b:7e:7e:7b:43:1c:f5:0a:03:e0:84:bc:bd:
92:8b:f5:74:4d:94:ee:5b:52:25:3b:d4:17:20:89:40:dc:69:
c8:0f:e5:96:66:8c:33:62:9f:67:ee:eb:a1:e6:eb:bc:78:31:
c2:27:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:11:50 2025 by rpki-client