Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier: QKE3iWaA6lQuKm6whKBQVClEDKGEW/ZsyqX19OIHf24=
Subject key identifier: 7B:D1:FC:B6:67:83:CE:CC:77:8D:A0:9B:72:45:AD:24:61:1E:8D:09
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 01965914BBB727E87018ECDB4A864B72BA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number: 059A
Signing time: Mon 21 Apr 2025 16:00:52 +0000
Manifest this update: Mon 21 Apr 2025 16:00:52 +0000
Manifest next update: Tue 22 Apr 2025 16:00:52 +0000
Files and hashes: 1: 4kR89sLAqkPwhn_ralqMLx5vnmw.roa (hash: aW/S/miakzFOlENse9MXKWvU/sKShiO+PJNe9e/OxYg=)
2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: CAiuCOYYF6fhEp1BfI7M1Gensqe8+bFvNpaI6dUv1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:bb:b7:27:e8:70:18:ec:db:4a:86:4b:72:ba:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Apr 21 16:00:52 2025 GMT
Not After : Apr 22 16:00:52 2025 GMT
Subject: CN=7bd1fcb66783cecc778da09b7245ad24611e8d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:8e:fe:3c:10:ba:0e:0c:4d:4a:d4:b9:d1:
1c:ed:e1:82:6d:b8:93:62:c4:cc:4a:de:b3:50:00:
53:96:15:d0:eb:8e:a5:59:6f:d1:af:68:1e:4b:d8:
67:2f:fc:94:63:9f:37:e0:6c:04:39:0b:a0:1c:f9:
37:4e:d1:16:f1:3e:cb:f1:c0:76:4c:71:80:fa:9f:
2f:ab:70:7e:63:5f:59:82:d9:2f:05:1b:cd:48:f6:
99:fc:71:58:25:79:f6:89:ea:80:aa:e6:7f:33:49:
31:84:da:65:d1:90:08:3f:af:44:d5:d9:f7:2e:cc:
a2:07:b1:25:0d:d2:46:e4:b5:c6:97:b3:b2:fd:b4:
92:89:24:4f:5e:24:20:30:8c:d1:13:2a:ae:95:fd:
a9:ec:f3:b4:60:04:37:f7:37:95:f7:3e:ff:f6:75:
77:55:a6:8a:11:da:f4:45:d4:11:07:50:bf:f5:33:
69:71:be:50:d1:9f:09:58:ee:f3:d1:34:e1:7c:c1:
e3:26:d2:7b:46:cb:28:fd:7e:29:21:43:66:5d:f4:
20:1c:d2:e8:27:12:41:84:8e:ea:2d:93:75:63:8f:
ec:fa:a7:7c:21:d9:eb:90:a3:ed:69:4b:21:c5:a9:
23:29:3d:6f:e7:ea:a0:d4:a7:a9:c1:69:18:14:aa:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:FC:B6:67:83:CE:CC:77:8D:A0:9B:72:45:AD:24:61:1E:8D:09
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:10:6f:17:f5:f8:f9:7c:10:8d:89:1a:90:ae:c9:f5:c6:7d:
08:d8:96:4d:16:98:f9:48:01:c8:0c:12:8a:5d:74:c1:8f:20:
bf:c5:ea:6b:c9:f9:c2:46:4e:cc:da:5e:29:83:4e:c2:01:cd:
24:65:06:f5:03:28:83:88:fd:22:09:8b:cc:2f:16:67:b2:78:
81:8f:60:74:a2:c8:b0:54:31:30:30:30:c4:92:d0:34:bf:2f:
e9:39:e3:0c:7d:e9:99:5b:a2:9f:41:56:2d:1c:ce:d4:ea:1f:
43:a7:9c:92:bb:42:f7:30:b5:29:2b:0c:5c:de:39:3d:74:df:
75:49:77:ce:dd:85:5d:ca:f4:d1:e8:a1:b1:22:7e:b5:c8:06:
6c:b6:35:db:06:23:f8:92:e8:51:98:70:77:f5:29:f4:a1:f8:
f4:bb:01:90:d5:2b:90:ee:87:5f:61:33:88:64:c2:73:39:34:
f1:97:3e:ad:c7:e0:30:45:c6:e7:64:5c:f2:82:54:f2:29:0e:
70:f0:14:bd:03:da:18:38:78:88:cf:cb:f8:bd:7c:bb:38:10:
89:75:68:a5:a1:6e:3a:16:ff:f0:27:31:73:2d:b2:e6:41:67:
f1:19:68:ae:d3:47:b1:76:a6:12:a8:aa:22:45:b9:12:fe:d0:
f8:92:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:37 2025 by rpki-client