Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: GLSW23VXuid/TVfrg/ZgI8F5OKogLaC+CJXNcVjPjOQ=
Subject key identifier: 9B:7E:82:98:ED:9E:4E:A2:D6:50:D8:E6:FF:BB:B3:9A:A2:72:FD:1C
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 019659EFE8AA4D7C46C9B643837432E2FB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 0E03
Signing time: Mon 21 Apr 2025 20:00:16 +0000
Manifest this update: Mon 21 Apr 2025 20:00:16 +0000
Manifest next update: Tue 22 Apr 2025 20:00:16 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: Yuk/j10TlwLiQU2f6e245xyoy5Ry4RhQx30mc/Fh/EI=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:e8:aa:4d:7c:46:c9:b6:43:83:74:32:e2:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Apr 21 20:00:16 2025 GMT
Not After : Apr 22 20:00:16 2025 GMT
Subject: CN=9b7e8298ed9e4ea2d650d8e6ffbbb39aa272fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:1a:f2:ee:f4:a7:29:1c:85:ff:25:ac:8e:
f8:84:8c:68:3f:ed:db:4a:bc:3f:8a:13:58:cc:40:
17:88:71:cb:db:d5:75:ff:ab:00:b4:3a:87:11:c5:
bf:fe:ac:b8:12:bf:a6:e6:00:15:74:06:85:b4:11:
65:ed:20:9c:af:15:44:d7:15:27:7c:74:2e:77:c6:
ce:e3:d0:20:84:70:36:e5:08:e8:2d:94:bf:a4:3d:
ae:3f:2c:fa:56:75:42:70:52:0f:e2:8a:53:77:c6:
af:5a:06:cf:44:fb:82:9e:ce:1b:8b:89:ba:59:95:
39:75:18:89:db:c2:71:ef:72:f9:1a:32:66:e4:b9:
00:cf:18:e0:8e:ff:11:c5:ea:c5:2b:26:5d:b2:7c:
0b:9a:43:db:a1:f5:0a:fb:e3:bb:f6:ee:a4:8f:81:
8f:d5:72:42:24:33:09:76:01:e1:a5:4e:eb:c1:5d:
a5:b4:60:fd:61:a2:33:58:33:37:11:3f:ba:b8:50:
89:45:f3:13:5e:75:49:9a:33:69:35:31:fb:43:16:
bf:d0:17:8e:e0:50:5a:75:7b:c9:5f:03:3c:3b:47:
8a:65:b8:df:47:e6:60:70:9c:bc:e4:3f:0a:d3:e8:
53:13:55:f1:50:93:8c:ea:33:88:a5:8b:49:d4:3e:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:82:98:ED:9E:4E:A2:D6:50:D8:E6:FF:BB:B3:9A:A2:72:FD:1C
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fc:4f:35:7b:c4:14:56:62:63:42:f4:03:80:cb:8e:4c:05:
54:b1:99:aa:a6:b4:82:de:43:e0:4a:9c:e4:b3:e0:ea:35:38:
c1:48:29:b2:4f:5f:88:8b:17:f8:94:b5:3f:38:4d:7b:7a:3d:
79:1a:b8:fe:bc:93:7d:ac:57:f2:c2:68:be:e4:ae:ac:ff:84:
01:05:63:e2:c9:c7:fe:71:da:f8:69:e0:6e:ce:b4:82:74:fb:
73:b6:57:17:4d:16:67:61:b5:89:35:c4:ba:d5:21:23:8d:55:
68:6c:70:02:b9:a3:bd:1c:76:13:c2:36:62:48:30:e7:50:20:
d3:b8:eb:e2:2f:c2:db:fd:99:66:5f:ba:bd:32:74:9f:87:da:
f1:d3:7f:dd:08:aa:40:01:a9:1a:6a:e2:ab:83:b8:e7:42:9a:
6f:fd:0b:ab:a4:91:7c:ea:15:dc:4f:37:65:9e:e8:91:3b:1f:
7a:69:71:0e:b8:35:76:37:95:71:84:11:88:06:8c:6a:57:97:
7c:72:ab:a1:57:5b:67:77:42:c8:a4:47:9e:68:8e:33:3c:72:
02:7b:2d:c2:04:66:9f:b7:aa:18:93:85:64:d2:4a:e7:7c:0f:
e7:fa:88:3c:19:5b:7c:4b:1d:3a:4a:02:0c:7a:d0:c1:a3:34:
69:5b:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:53:01 2025 by rpki-client