Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: R+9KXqyu9BNthyR4Dm0imG9c/XIW3NQRpkyKJNKjdew=
Subject key identifier: 89:7B:E7:BE:20:4E:95:0A:3F:0E:58:49:28:6A:F3:00:DB:A7:02:5E
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 01965538849D575EBD8F5FD1C4716B4A01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0976
Signing time: Sun 20 Apr 2025 22:01:29 +0000
Manifest this update: Sun 20 Apr 2025 22:01:29 +0000
Manifest next update: Mon 21 Apr 2025 22:01:29 +0000
Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: mYMiRaCi2EHXPgXJcUIixfvDOiXcmfhLmke9Ts53f7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:84:9d:57:5e:bd:8f:5f:d1:c4:71:6b:4a:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Apr 20 22:01:29 2025 GMT
Not After : Apr 21 22:01:29 2025 GMT
Subject: CN=897be7be204e950a3f0e5849286af300dba7025e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:07:50:6b:fe:32:54:b1:a8:c0:79:60:04:
05:50:86:de:fb:4e:35:a0:02:80:63:37:4e:b5:73:
10:c0:7b:49:af:d6:90:ff:68:c4:8d:93:95:cd:84:
2f:d1:88:b6:01:d2:5f:12:27:e1:aa:a0:59:ce:6d:
84:73:fa:7d:1b:5f:50:d9:9a:e2:34:90:6c:ec:8f:
64:3b:6a:e6:73:9b:1e:0e:a0:93:72:86:5c:44:a5:
da:42:6f:dd:16:8e:83:90:9c:78:b7:2c:48:c0:b1:
e6:32:b5:12:52:f0:7f:7f:2b:8c:3d:74:df:76:6d:
fd:04:57:fb:de:f0:81:b3:b0:39:ef:aa:81:f9:8f:
d3:05:e3:3e:3c:71:de:df:4a:4b:5f:92:59:29:79:
99:98:a2:71:ea:80:53:48:e4:18:b2:2e:7f:f0:76:
9e:d2:41:81:e5:6b:17:a8:73:77:0f:34:bb:bf:91:
53:fa:cc:cd:5c:74:2e:f5:37:55:9b:88:b8:44:28:
65:54:5f:ed:ef:37:67:4b:f9:e9:05:8f:8e:a7:88:
39:d9:16:18:69:97:73:87:ca:c8:54:df:c1:83:15:
ab:0b:c3:db:17:31:6d:5d:f5:5e:fc:35:f2:ab:a1:
24:ac:3a:e2:de:eb:60:bc:94:54:27:ba:c8:9b:fd:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:E7:BE:20:4E:95:0A:3F:0E:58:49:28:6A:F3:00:DB:A7:02:5E
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:13:10:9c:d5:9c:1c:d5:04:b8:87:80:b9:cc:66:cf:2d:
fd:5f:2c:e2:fb:aa:f6:bf:31:6f:48:8b:ff:b0:7a:f7:c0:91:
de:a4:25:a0:97:75:af:42:fb:70:4b:a2:df:4b:c5:04:9d:2f:
10:a9:1d:cc:ef:d1:20:4c:c2:cb:f3:2c:5b:4e:2a:7f:70:06:
58:15:79:92:ed:06:7d:3d:a0:3e:0f:c4:73:ed:8e:08:6a:e0:
f9:69:a8:6f:af:b8:76:97:90:3b:13:c2:87:9d:48:49:82:0f:
03:c1:90:f7:0e:75:62:96:ed:ca:30:3b:68:60:22:8d:00:8e:
f2:0e:f5:f4:d6:ef:6c:14:26:39:07:06:0c:ed:34:db:07:3a:
a5:0e:a6:1b:2a:2b:4f:96:d8:8c:f1:c6:91:66:cc:5e:05:66:
d6:7c:b7:7f:9d:d6:ad:4d:80:57:86:df:67:2b:98:a5:56:8a:
90:eb:04:0d:4a:f7:75:2e:0e:12:ac:7d:c5:85:a5:7e:28:0b:
3b:26:08:c0:e3:9a:1a:e5:a5:d1:15:f0:e8:80:80:26:cf:f9:
e1:de:6c:4c:b2:87:a8:eb:17:bd:ee:48:c9:c8:da:47:cb:c0:
11:b9:2b:c1:c1:5a:b7:d3:84:a8:f1:07:bb:4c:e9:1a:99:87:
28:21:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:34:54 2025 by rpki-client