Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: wH9P11vsVN8i9m4SVnHqu/7pEHXqZ+/tjxTO+A39Ye0=
Subject key identifier: F5:45:34:5A:38:35:0A:58:8B:9D:AA:3A:EC:D0:67:37:BB:35:86:9E
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 01964FA36D6CA78DA53D7300BB80678401DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 20:00:32 +0000
Manifest this update: Sat 19 Apr 2025 20:00:32 +0000
Manifest next update: Sun 20 Apr 2025 20:00:32 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: h5+vLMamj+cXyMhferrlJVddYV9hqozI7V7dOYejYfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:6d:6c:a7:8d:a5:3d:73:00:bb:80:67:84:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Apr 19 20:00:32 2025 GMT
Not After : Apr 20 20:00:32 2025 GMT
Subject: CN=f545345a38350a588b9daa3aecd06737bb35869e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:04:c7:d5:cc:8c:ad:5d:c7:2e:de:c5:4a:
31:c9:a5:16:0d:fc:9f:8b:d1:e0:dd:87:2d:e7:7a:
e5:bf:a4:f4:9d:96:a0:1f:c9:f2:c8:e3:22:d0:6c:
b4:0d:66:81:6d:27:2e:9d:48:b1:34:a8:14:89:37:
59:50:d7:48:57:54:97:bf:18:c4:f4:f6:86:5c:d9:
31:c5:5f:2d:55:2c:6e:d3:e1:a2:ed:ca:75:82:2a:
d6:21:3f:76:a9:7b:81:ea:83:a5:bb:9d:7c:5d:0b:
8f:2b:0a:ad:2a:62:a4:73:03:00:ab:21:a2:f1:da:
a3:de:3c:5e:1d:f9:07:ef:dd:27:a6:38:6c:0e:bc:
6a:ef:13:45:82:c6:4f:f6:39:52:ad:22:15:4a:83:
21:03:4c:68:6f:90:95:21:f4:d7:bf:5f:37:fc:cb:
41:bd:3c:48:4e:25:e4:d4:f0:84:dd:9c:c8:1f:1e:
b6:9f:a4:09:49:ee:88:a0:d1:45:ab:4f:e0:b7:ef:
60:86:5d:60:aa:3b:b9:59:cc:62:8a:e6:81:57:5e:
12:08:5f:61:f9:dd:fc:c9:0a:50:20:fd:2f:7c:4e:
f2:3a:68:a4:ff:6c:a9:25:f1:c2:01:9e:08:05:af:
29:d3:15:3c:b9:14:48:db:c5:ae:9a:72:68:fd:d2:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:34:5A:38:35:0A:58:8B:9D:AA:3A:EC:D0:67:37:BB:35:86:9E
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bb:07:d2:a3:6b:bf:3b:8c:5f:b7:90:dd:df:8b:d8:ee:3f:
2f:f0:a2:d0:bb:3f:2e:38:8e:d3:c0:73:65:11:ac:fb:40:cc:
66:21:1d:14:c8:26:c3:70:6b:fc:ab:e8:7b:7c:d9:62:c9:d5:
ce:cb:65:cb:9d:a9:97:bd:80:57:29:b4:f4:8a:d9:a5:18:47:
96:a9:08:90:61:fe:8b:4e:25:11:e8:78:35:63:01:4b:5a:36:
5d:cb:87:c8:a1:cb:10:1a:f8:1b:42:da:bd:b0:5f:a7:b7:4d:
c8:dd:d3:f7:28:45:9e:bb:17:07:5d:5e:b8:45:85:b4:fe:e6:
64:3f:2b:a3:86:65:19:f6:3d:f9:17:49:24:a8:4e:e2:22:1a:
58:03:c4:c1:37:ab:6d:7d:8f:73:96:62:f7:3d:d3:53:51:ea:
ba:e9:fd:e8:1d:63:0e:eb:e5:20:6f:23:68:b6:89:b9:d4:69:
e7:f1:09:4f:1d:77:8f:1f:0d:9e:c3:23:4d:f5:5a:7f:a9:0d:
b7:f9:69:8c:9f:5d:6f:f7:0c:0a:df:ab:1f:78:3d:9d:55:bf:
73:48:60:f3:55:6b:78:45:68:01:e1:ce:65:cd:f8:2d:0d:43:
c8:e2:ef:28:47:c6:73:30:e8:68:86:d0:08:97:e2:ce:ef:c0:
3f:aa:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:01:03 2025 by rpki-client