Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: lYzbDbq6VYIvIbq3c/cHdBAj+nnsyUI9HumdvJU5e7A=
Subject key identifier: AB:27:1F:3F:2D:F0:6E:EA:C9:B7:AF:E1:46:8B:04:9B:D0:A8:EE:BE
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019656B7D9CC16DA34CD1AEBBB2C0F1F13EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0789
Signing time: Mon 21 Apr 2025 05:00:11 +0000
Manifest this update: Mon 21 Apr 2025 05:00:11 +0000
Manifest next update: Tue 22 Apr 2025 05:00:11 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: HcXZKNQGImcd+u/Qhx4chxhZA7IOx7bywtoo3xknDZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:d9:cc:16:da:34:cd:1a:eb:bb:2c:0f:1f:13:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Apr 21 05:00:11 2025 GMT
Not After : Apr 22 05:00:11 2025 GMT
Subject: CN=ab271f3f2df06eeac9b7afe1468b049bd0a8eebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:ca:24:3d:d8:35:11:36:b2:80:b7:69:87:
a7:e4:da:3f:8a:92:b9:60:b0:2a:4e:63:4b:68:29:
71:2b:24:36:b1:92:74:bc:96:5e:e1:d3:b0:79:14:
37:9b:da:b1:d2:67:58:b9:2a:92:e1:b4:6f:d7:c7:
3c:76:9d:31:47:cf:e1:60:f0:49:30:17:3f:b6:bb:
d6:99:4c:80:92:07:02:ac:c1:d0:82:34:ab:27:a5:
97:a7:a3:5a:21:4c:ae:5c:4f:40:dc:11:fa:51:07:
7b:ef:39:55:c0:f5:2a:c7:d2:be:3c:8b:12:a6:1c:
87:61:54:73:33:6b:c8:08:eb:b9:32:a8:72:b2:7f:
3e:f6:e8:b5:8f:ec:f9:fc:17:de:28:55:07:60:bd:
c5:eb:b6:cc:ab:32:be:e5:23:e0:b8:a4:92:44:ab:
40:ca:b3:c9:1b:0d:b8:29:61:91:6f:8c:c1:d5:ad:
e0:ab:15:35:94:61:fd:bd:52:fe:a5:07:83:66:df:
d6:17:89:6d:69:bc:2a:c7:fb:a1:88:dd:7c:8d:f9:
17:42:5d:3e:c8:f1:f2:e1:4a:ad:73:6d:28:cd:09:
21:11:1f:8a:33:81:e4:16:3d:5f:93:c3:61:ad:6b:
32:30:08:1e:24:62:d4:81:6b:fc:1a:8a:88:2f:27:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:1F:3F:2D:F0:6E:EA:C9:B7:AF:E1:46:8B:04:9B:D0:A8:EE:BE
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:65:95:27:fe:93:7e:58:29:bc:05:7b:0c:65:e2:0b:c8:7b:
13:5f:36:df:cc:21:ea:48:69:18:f0:71:bf:79:72:8e:94:82:
da:a4:d5:f1:8a:29:88:b2:a2:3f:3c:92:e2:f9:41:61:59:b7:
46:58:ef:4d:51:79:98:b8:5b:09:8a:09:a1:ea:af:4e:39:8c:
00:77:f2:30:d4:de:d5:b3:4e:cf:2a:d8:b7:91:36:e7:3d:bc:
b0:2e:d3:f4:b4:2f:eb:0f:3f:ca:54:09:64:bb:38:de:45:87:
ac:da:ea:98:9d:76:32:65:e7:6e:d7:c8:8c:30:ed:29:35:88:
f9:8d:7b:62:6f:46:ea:2a:5c:1e:35:03:c6:69:d4:8e:ea:98:
ec:72:7c:d8:b6:6c:42:9e:5f:15:24:16:ae:5f:0b:80:a9:e4:
77:c2:01:84:15:2f:d1:46:f4:78:c7:24:22:59:38:6e:85:e4:
9c:36:00:fe:a4:33:48:ed:1e:21:9e:d6:68:9f:c4:00:64:a6:
cf:63:d4:34:5b:d0:c6:cb:c3:61:01:14:82:2f:6a:c5:84:72:
64:0e:33:81:7e:58:4d:bb:79:3f:77:41:da:06:31:02:53:cb:
3f:77:d1:11:0e:05:2a:c6:f2:a2:35:c2:26:43:91:7b:35:2f:
6b:c1:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:23:15 2025 by rpki-client