Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: QlNY7KeUJMk10S22K5/X6uDKayrPzGuUouAsZJaUvHM=
Subject key identifier: 04:87:2B:85:AF:2B:E8:99:16:24:4C:A3:82:83:9F:DD:BF:D9:F0:E8
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 01960D8CD29AE9C03B294A9589E5B0ABD335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 067F
Signing time: Mon 07 Apr 2025 00:00:54 +0000
Manifest this update: Mon 07 Apr 2025 00:00:54 +0000
Manifest next update: Tue 08 Apr 2025 00:00:54 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: 5FI7/mK3JtK8UWJxLLRMhmU1L91gJjPuB7Q6T/HAaDU=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:8c:d2:9a:e9:c0:3b:29:4a:95:89:e5:b0:ab:d3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Apr 7 00:00:54 2025 GMT
Not After : Apr 8 00:00:54 2025 GMT
Subject: CN=04872b85af2be89916244ca382839fddbfd9f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:b0:58:19:1a:58:07:d8:b4:9f:9e:9d:52:
8e:cc:dd:9f:8d:b4:0c:1d:85:67:f7:52:da:f0:06:
1e:40:e0:e7:45:3c:77:08:1a:bb:f4:02:18:2b:51:
4b:c7:83:d1:bc:b8:ef:b0:21:21:74:b1:71:01:f7:
fe:af:3d:9c:8e:3f:6b:d0:18:b7:c1:5a:58:0d:db:
14:df:5b:84:58:1f:73:50:53:bc:16:c9:e0:ac:28:
b8:04:d2:f2:9d:49:68:0b:ed:57:79:02:65:b0:8f:
da:d4:22:37:3a:2c:52:82:af:dc:68:a0:68:58:bd:
ee:81:c5:56:24:63:cd:87:84:7d:78:45:29:b4:ee:
5e:53:51:43:a9:7d:61:bd:19:2d:c8:34:d0:1d:a8:
e4:fc:3a:b2:25:08:b3:15:fc:9e:1c:bf:5c:78:10:
d6:fd:c9:f7:34:b7:cc:9b:5e:62:d0:87:dd:24:76:
72:d8:67:52:f1:44:b8:dd:88:a5:03:b1:0c:75:52:
6d:32:b7:33:d0:02:e2:03:90:bc:bd:b5:2e:b5:55:
fd:fd:f0:a1:c3:fd:7c:ac:42:17:98:45:75:5e:e5:
ae:05:7b:c5:44:1b:03:64:2b:50:e0:86:13:81:f4:
e4:57:39:bf:5a:1c:b7:54:ce:8d:5f:f7:d8:34:36:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:2B:85:AF:2B:E8:99:16:24:4C:A3:82:83:9F:DD:BF:D9:F0:E8
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:11:58:b9:75:c3:7b:26:15:33:31:80:4a:2b:8a:60:24:ba:
8c:81:c9:04:8f:6f:79:1f:0a:ca:20:bc:ed:8a:db:d7:17:7a:
d3:f9:ab:4a:2a:a3:7a:75:f5:83:2d:ae:84:79:ef:33:cc:ed:
cd:ae:95:e0:b0:8b:26:1f:86:af:e3:96:51:50:39:de:b6:ad:
d0:0d:55:fe:e2:f3:5d:f0:ff:b2:f7:94:dc:14:20:58:0f:da:
bd:86:8e:7f:ee:6d:bf:af:42:5b:fa:3b:24:69:30:d7:96:a6:
21:c9:d3:53:7f:be:33:9b:98:04:63:d7:e5:9e:87:01:8d:9b:
35:11:41:ca:1d:35:42:85:84:e2:28:46:d5:27:e0:51:7d:1e:
b3:00:b4:5a:57:39:0a:72:f3:7c:a8:1c:4a:06:04:3a:7f:10:
e0:3f:3e:84:9d:01:13:3a:71:2e:ea:b8:d0:8b:8d:10:c1:fd:
d3:73:2d:2f:9d:53:6a:87:51:ae:47:64:5a:6c:5e:bf:c6:b1:
5d:80:ff:0c:05:3c:6f:b7:f0:50:36:5a:e8:6b:f7:4e:b4:6d:
3a:c3:df:0a:8c:7a:69:50:b3:7a:79:d3:74:73:b9:b5:92:2c:
81:b4:09:db:e9:b5:e2:a9:a8:f3:ae:af:e4:8d:00:a0:61:33:
f5:e9:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:01:55 2025 by rpki-client