Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: ZThqP5ygkRtMwnof8S/T/HEIogXWcG4OKloRZHo7kWw=
Subject key identifier: 45:62:21:B0:67:2A:79:01:8D:7D:15:37:ED:9D:91:0B:32:D7:27:E2
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 01965D95F0D09209FD9AECB3287361F294BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 13A2
Signing time: Tue 22 Apr 2025 13:00:29 +0000
Manifest this update: Tue 22 Apr 2025 13:00:29 +0000
Manifest next update: Wed 23 Apr 2025 13:00:29 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: dW+8Z/RojEjyiqAZzjHeE9cERCcUD/LQUal7uYqSwSw=)
2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:95:f0:d0:92:09:fd:9a:ec:b3:28:73:61:f2:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Apr 22 13:00:29 2025 GMT
Not After : Apr 23 13:00:29 2025 GMT
Subject: CN=456221b0672a79018d7d1537ed9d910b32d727e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:ac:4d:6e:95:78:11:27:27:8e:cd:f2:7f:
0d:05:ac:ca:b0:6d:e3:8e:f3:58:3a:3d:c1:14:08:
7d:ed:b2:41:14:af:6d:40:2f:01:b3:2e:46:91:81:
b3:4c:7f:d2:3c:10:d4:83:e3:8e:cb:0d:87:fb:cc:
40:94:c6:5a:5e:a7:05:18:a8:75:a2:45:46:46:6e:
db:9f:bf:82:79:65:19:9f:e8:3e:35:03:17:1f:39:
e4:08:7c:5e:d0:9d:93:3d:b2:ae:16:19:4c:2e:bf:
f7:aa:12:41:93:c4:43:b2:69:49:bd:d9:19:35:81:
8c:ce:e0:5c:da:84:af:a9:ea:0d:fc:cd:9f:55:7b:
c5:bf:82:94:23:4c:25:ea:9b:57:3a:b4:1a:e9:66:
e9:51:73:10:ce:5d:c5:19:2c:b6:11:e5:2f:ca:dc:
05:03:46:fb:30:89:51:f3:e3:c8:4f:8d:60:69:31:
d2:a0:51:90:47:da:34:6f:c1:96:89:1f:df:32:7e:
fb:2a:6d:18:d2:f4:2c:8b:9c:5f:c9:63:b3:70:cc:
a7:71:87:f3:9b:5c:83:f8:c8:97:6a:9d:ee:22:a2:
0a:e0:42:8a:bf:4a:f1:51:1f:80:58:c6:7c:97:92:
fc:df:9d:e5:a7:ce:f9:09:26:cd:ac:fe:61:93:44:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:21:B0:67:2A:79:01:8D:7D:15:37:ED:9D:91:0B:32:D7:27:E2
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e1:6b:e0:68:4d:d4:58:c6:12:75:9c:eb:48:6f:9d:06:b7:
6a:09:09:b6:41:fb:d7:18:7b:f4:a7:68:b4:d6:d0:a1:c8:9f:
85:83:c2:d9:f4:5d:33:9c:70:28:b4:1f:fa:be:43:b6:70:9c:
32:e1:3a:3a:83:38:c7:8e:a4:2c:93:95:69:16:41:f9:55:8f:
b4:b4:4e:d9:8a:81:58:f4:9d:72:38:51:6d:31:60:81:ba:33:
50:91:af:87:4e:56:e6:8e:e1:1f:4e:86:4e:76:03:1b:49:4c:
dc:cd:8d:b4:6f:67:e0:c9:a1:7e:f1:0c:59:83:b5:35:80:56:
c8:4a:f8:c6:f0:da:d1:3c:7c:c5:27:49:9e:7e:a8:03:7d:90:
f1:3c:6d:0d:db:4d:53:6d:80:61:bb:be:86:0c:3a:d9:75:d2:
bf:14:ce:72:27:5e:3a:38:f8:73:3b:c5:31:a1:5b:61:86:49:
17:0f:de:84:9b:c3:53:3a:eb:a4:ac:e8:ac:17:62:7c:f4:96:
fc:d8:58:fe:a2:61:8d:82:52:c9:8a:f3:d8:c1:74:a6:4b:86:
c7:ed:bc:53:6d:68:93:6c:a1:40:4c:29:62:0d:86:64:bc:ef:
da:f1:43:a1:0a:bd:95:dd:d7:1e:cc:13:e3:4c:8a:54:0c:db:
98:2d:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:58:24 2025 by rpki-client