Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: T7V1CFj4lLybpmDZLp6VuRzFgvvoY+2m9nBMRos/HbY=
Subject key identifier: 1C:76:EA:92:DB:2C:68:50:64:69:3F:3E:85:06:AF:B0:BF:35:C7:A9
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0196556EE1B12C4BAEFD15EA0384BB0EA47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0700
Signing time: Sun 20 Apr 2025 23:00:52 +0000
Manifest this update: Sun 20 Apr 2025 23:00:52 +0000
Manifest next update: Mon 21 Apr 2025 23:00:52 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: 5ckGf2hTSarDQZVjGVgSvPe4ysAR0zWh+XSUm9vKLx0=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:e1:b1:2c:4b:ae:fd:15:ea:03:84:bb:0e:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Apr 20 23:00:52 2025 GMT
Not After : Apr 21 23:00:52 2025 GMT
Subject: CN=1c76ea92db2c685064693f3e8506afb0bf35c7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:5c:fb:07:03:71:bb:9d:21:dd:53:4e:ca:
b8:13:2c:8b:b7:f1:ce:b9:e0:3a:c4:27:22:51:f2:
aa:3d:6a:19:0d:31:93:94:37:b6:12:7b:1d:2a:64:
51:b0:a5:35:31:4c:fe:a5:fb:0b:1f:95:f7:bd:9d:
ad:73:3c:5d:28:f3:fe:ba:01:2b:ec:75:ec:5e:6f:
30:7e:b9:7b:ab:e2:75:21:4c:16:f8:fa:ce:f1:59:
08:a7:63:ac:7a:ac:46:71:b5:bb:f9:63:90:8e:dc:
85:4b:b5:56:6d:37:39:49:5b:eb:9f:62:32:fb:78:
58:14:9a:1a:cf:8d:4f:66:5f:3a:dc:47:30:f6:8a:
c8:51:12:dd:1f:c8:b1:4d:e9:2e:97:65:92:0c:af:
97:f7:10:93:94:fe:60:0b:dd:14:89:4b:7c:11:73:
64:86:6b:e5:fc:0c:55:58:da:66:82:30:d7:5c:c7:
cf:d7:7e:c0:42:68:bc:eb:2d:e6:0f:93:cc:f5:6f:
66:57:64:b0:ce:33:5b:89:b0:fd:10:22:33:ff:81:
74:80:06:98:68:80:fe:2b:08:3f:07:89:4e:4d:45:
53:77:95:20:5d:b9:b3:c0:6c:60:a2:20:97:0b:26:
f6:26:c4:a4:ae:ad:a2:1a:4d:21:4f:0c:ff:b6:84:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:EA:92:DB:2C:68:50:64:69:3F:3E:85:06:AF:B0:BF:35:C7:A9
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7a:19:93:0e:8d:0c:3b:a6:23:d0:8b:87:01:72:be:fc:c6:
06:9b:90:f1:28:46:2b:b2:4b:e2:b4:9d:3a:bc:6e:3d:98:aa:
e1:f4:a6:a4:ca:87:1b:d0:b5:8f:a2:b5:f0:ad:41:c1:48:3b:
a8:eb:96:75:7b:db:28:a9:e0:93:98:dd:3f:34:53:9a:24:e2:
8f:65:65:0a:8a:21:4a:8f:4f:b3:72:0a:95:82:ba:81:2b:2a:
95:8a:6a:31:75:38:c9:96:cb:e3:24:13:29:dc:8f:fc:fd:68:
d5:50:4a:f3:e2:b7:f7:12:08:e5:cf:18:a9:36:93:db:f0:fa:
ea:86:87:f0:7b:8f:06:2a:52:4e:74:46:24:f4:69:f4:34:09:
50:b7:cb:3b:27:47:dc:81:2b:67:fd:49:ca:41:62:28:4d:f5:
d0:fa:56:79:31:78:1f:42:1c:bb:97:61:f9:5c:75:e5:de:28:
58:5a:86:cf:a9:72:f8:9b:49:05:10:b2:25:44:d7:c9:2a:f0:
e3:2a:fd:10:e6:8b:da:eb:69:10:1a:98:c5:2a:5e:6b:36:4f:
ad:46:b2:96:19:09:db:6c:26:72:82:92:7d:39:7e:fd:33:bb:
a5:80:82:df:3e:32:77:fb:14:52:41:9b:40:7a:f2:06:99:5a:
b1:90:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:37:28 2025 by rpki-client