
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: m7cbweH4qFbOZDiaXHwaAxRvMpAKwcfqcMCXFCOJgz4=
Subject key identifier: C1:02:E6:C6:E3:B4:50:06:FD:0B:7D:DE:DF:85:E4:51:5A:FB:EF:92
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019657CB24720B8C472384C6BC468FA0C248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 0218
Signing time: Mon 21 Apr 2025 10:00:52 +0000
Manifest this update: Mon 21 Apr 2025 10:00:52 +0000
Manifest next update: Tue 22 Apr 2025 10:00:52 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: /CLWw3kUOWqgjuG43g5xWHzHxq7LUixlAqMOPwjWvnc=)
2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:24:72:0b:8c:47:23:84:c6:bc:46:8f:a0:c2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Apr 21 10:00:52 2025 GMT
Not After : Apr 22 10:00:52 2025 GMT
Subject: CN=c102e6c6e3b45006fd0b7ddedf85e4515afbef92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:f0:56:8a:7d:dc:0b:ef:21:12:5c:f3:c7:
e3:f3:ee:d3:a0:5d:f6:90:40:ed:86:3b:cd:c0:39:
1d:9d:ac:9e:a9:40:9d:f8:7b:7b:48:ed:c2:40:f0:
85:c8:b4:13:24:d6:99:01:d9:8f:be:20:9a:f2:c8:
b0:96:3e:77:7e:91:3d:34:55:09:e5:d3:f6:fb:85:
ef:16:e5:01:65:10:27:b9:9c:18:18:f1:af:af:a2:
ca:e4:94:dc:22:f9:50:c8:85:3b:45:57:a5:ae:11:
e5:4d:df:07:50:bd:7a:53:2a:5c:c5:2f:5d:27:23:
8d:ee:2b:b4:40:22:43:5c:e2:c3:8b:2d:12:71:43:
b6:06:22:94:27:09:6d:22:0a:1d:dd:01:b4:4b:63:
03:0c:dd:57:8f:24:2c:e3:ea:90:84:6b:4b:52:2b:
74:59:66:b4:77:fc:4d:5f:96:1c:9a:c2:1b:48:ee:
46:67:de:1a:29:8e:d7:19:0d:e7:87:49:65:25:7a:
9c:d4:27:07:be:65:00:26:66:9f:12:96:b4:4f:25:
26:21:83:cc:0f:e2:e6:aa:fe:12:f0:7e:60:b6:80:
f6:69:c4:40:08:95:ae:e4:e6:14:28:28:7e:6b:cd:
c1:57:c0:a5:5c:b8:00:82:8e:c7:fb:0c:10:b1:a7:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:02:E6:C6:E3:B4:50:06:FD:0B:7D:DE:DF:85:E4:51:5A:FB:EF:92
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:48:b3:82:31:33:2a:00:99:79:d6:9c:85:6a:99:16:0b:7e:
65:3f:83:9c:06:ed:0d:bd:93:cb:97:cc:e8:c4:ff:47:73:46:
83:3b:e1:e1:f7:08:5f:a5:90:3b:87:be:ef:90:d4:bf:fa:73:
c2:bc:5f:06:d0:53:5b:d0:21:21:8e:59:26:e4:c8:e8:70:63:
f8:b4:cd:d4:1e:34:3d:45:07:83:0d:39:16:2f:2f:7e:76:51:
bd:f0:e3:26:77:b4:72:9a:6d:82:bd:43:2e:89:53:fe:0f:5f:
21:e2:ff:a5:e0:19:4a:97:ad:24:ae:e8:68:93:be:45:a3:f5:
ce:03:f8:b7:6b:7c:2d:0d:22:63:26:da:50:44:f2:37:11:81:
38:4c:99:81:5e:a2:58:23:b2:54:99:06:f0:94:b4:6c:28:4c:
bf:b6:21:c6:75:cf:da:86:40:ea:7f:b0:cd:7d:61:34:1c:3d:
ab:d3:b7:25:85:5a:a5:f7:48:f0:5e:38:c5:07:a8:fc:e6:47:
7a:bc:21:1c:ee:4a:bf:66:5f:f1:f2:da:90:bf:af:90:20:ba:
1c:72:40:14:5c:96:bd:85:5d:78:44:29:5e:27:4b:a0:b5:7b:
36:a3:3f:5b:50:da:4d:b4:8b:cc:4e:05:89:79:dd:fc:80:e2:
cd:a0:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:12 2025 by rpki-client