Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: 4s6UpylbpqqWT8sRLqhTnChY01CuxB6rpE/d8q1HN2U=
Subject key identifier: 2A:CC:9A:9A:BF:1F:D8:5A:50:3D:F2:B7:11:48:92:95:54:8C:8A:8E
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 01965492DD37AB07B9F1DEA4134A577D8796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1216
Signing time: Sun 20 Apr 2025 19:00:33 +0000
Manifest this update: Sun 20 Apr 2025 19:00:33 +0000
Manifest next update: Mon 21 Apr 2025 19:00:33 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: VlFnTj8JzKk7dJnUraLReRNjuq+LrPZsB9HcfSWAPZQ=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:dd:37:ab:07:b9:f1:de:a4:13:4a:57:7d:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Apr 20 19:00:33 2025 GMT
Not After : Apr 21 19:00:33 2025 GMT
Subject: CN=2acc9a9abf1fd85a503df2b711489295548c8a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dc:dc:15:18:d3:44:cb:77:78:17:57:08:c6:
23:e3:17:cf:2d:8b:86:a3:c5:29:aa:1e:8b:fe:56:
4e:b7:db:c5:80:a7:1d:f6:d2:c7:91:f1:b2:94:fe:
09:04:2a:60:e6:aa:df:6a:3a:6a:96:c7:c2:66:4f:
e4:cf:5b:58:d4:4c:52:fe:f0:67:1e:e8:8a:39:6f:
be:87:96:78:29:1c:77:5b:c0:c5:44:3c:2e:d8:65:
9a:c6:65:6a:02:1e:ed:96:54:de:1b:c3:12:c9:87:
da:58:84:01:55:ef:03:c9:3e:cd:06:d4:03:5c:26:
93:93:c9:2f:9a:26:5e:40:eb:e6:bf:a7:c9:6e:a1:
ce:4a:de:52:64:26:c7:f6:29:97:9f:c7:66:e4:68:
af:f1:62:fd:a8:51:5f:3b:e2:39:eb:b9:08:39:3b:
3f:10:94:03:d8:07:b8:4d:bb:e6:40:d9:92:d4:2c:
13:a9:53:5f:6a:1e:8b:1d:c1:1c:c1:ac:bb:e0:2c:
a1:01:76:df:f4:8d:e5:05:4a:95:2a:9b:b7:2a:a8:
17:83:a1:8d:1e:c5:b7:e8:e5:e6:1c:84:8d:43:9c:
6a:a8:d8:b4:d8:d4:c7:0d:d2:64:0a:29:f6:1a:26:
29:a7:49:80:c8:8d:5c:dd:5d:09:2c:c7:52:38:81:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:9A:9A:BF:1F:D8:5A:50:3D:F2:B7:11:48:92:95:54:8C:8A:8E
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9c:ec:12:4b:c4:8c:5c:68:bb:f9:26:0b:da:2e:64:f8:cc:
aa:57:03:70:7b:3b:42:fc:92:2b:33:14:54:80:97:19:28:3c:
48:3c:90:bf:65:8f:dc:38:84:c1:f7:bd:36:2e:3b:e6:b5:30:
eb:2f:25:5c:59:65:02:8d:fe:a4:d0:61:2f:58:ac:ce:5c:23:
52:91:c6:6f:74:94:7a:50:75:11:e8:a8:05:9b:db:85:b7:36:
5a:03:9e:93:11:e2:29:d1:82:e1:44:a7:e2:2c:b6:18:42:33:
ea:d8:b1:90:e1:f5:bd:53:40:f6:01:a0:2a:4c:ae:c1:9c:1c:
26:03:15:f4:dc:5c:b3:f1:2a:c6:9a:0a:9d:2f:60:5f:2a:27:
fa:97:ca:35:ab:53:79:1b:dd:05:19:9c:ae:85:00:41:ce:4a:
19:ce:72:ac:f1:6a:40:bf:87:1d:63:56:6d:d1:13:e7:83:2f:
8e:c7:35:1a:0e:0c:ae:59:9a:42:73:57:f2:8c:1b:a3:50:5f:
87:34:a4:21:38:e7:08:cb:2d:e4:e9:c3:e1:f0:45:3e:03:5d:
f2:44:a0:35:60:c7:f5:df:65:19:e9:c1:3a:42:f4:49:ec:37:
0a:22:84:99:a5:75:6b:b7:80:0b:da:a3:c1:5a:4c:d8:3d:db:
4b:89:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:23 2025 by rpki-client