Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File: GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier: nicsE2RCRzyFZNnINjdis2Bgtc8LZ5afXXdxQeyYUNQ=
Subject key identifier: 17:AA:ED:25:EA:23:70:15:09:B6:28:7C:F5:60:1F:63:BE:42:22:8A
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0196222658FB26FDEA1AA469C0FAD498401D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number: 15ED
Signing time: Fri 11 Apr 2025 00:01:00 +0000
Manifest this update: Fri 11 Apr 2025 00:01:00 +0000
Manifest next update: Sat 12 Apr 2025 00:01:00 +0000
Files and hashes: 1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
2: Ebl0qY5v88j67joXZ8coCcKcW68.roa (hash: qtT3ZLUYHCKaey0Aqb5AF9xeEHb/p2mq/wV4wpmT2xk=)
3: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: zHkbdQ3/8V2czrT+frxrFTGDvhbTVPSlRXwCr+bk5ZQ=)
4: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
5: yqhpAot3xi6epn6ENDWr8uOqyio.roa (hash: kICDDy+hxEl81swZp9LVJwlGqZNulN1S7VyaDfHwQvg=)
6: znLjuZU6WpEe1QGkBQ0SoMfeRiY.roa (hash: ekCbGxN69x7n2ObmHPqmahZOZDHrZ5nwpqDY3ITziLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:26:58:fb:26:fd:ea:1a:a4:69:c0:fa:d4:98:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Apr 11 00:01:00 2025 GMT
Not After : Apr 12 00:01:00 2025 GMT
Subject: CN=17aaed25ea23701509b6287cf5601f63be42228a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:74:ce:80:c2:b8:29:36:17:80:f2:0e:ed:
7c:a0:43:ce:4b:89:7a:d0:44:8a:22:34:31:13:21:
eb:08:dc:1f:78:c8:91:fe:fd:92:18:7a:07:71:d7:
08:05:c7:82:81:17:fa:d2:f2:6c:ae:dc:67:92:ad:
c7:5f:c6:0c:0a:63:a6:cb:18:9a:42:87:65:79:bb:
41:8f:df:88:4a:a5:06:bd:28:17:a0:a6:fc:cc:02:
54:d6:ae:2e:7e:c5:d1:3b:fb:43:cb:1b:f5:1c:cb:
90:35:43:c0:82:c8:db:bd:eb:51:fc:db:35:d5:d4:
5a:a7:c9:4e:e6:c5:94:90:c9:07:0a:69:1e:20:d6:
d3:a4:e9:62:33:79:86:0c:fd:5e:5e:88:45:d5:9e:
7e:f5:f4:ee:52:4d:41:fa:e5:b7:0b:f3:33:47:5a:
ee:45:d0:9d:0e:a4:75:10:8c:d3:d8:22:44:2c:23:
44:f1:8b:05:f9:2f:7a:d6:67:0a:1a:4c:d6:2f:a8:
d1:04:04:88:c5:3c:3f:84:8f:35:7e:33:14:dd:3f:
17:d6:47:ad:77:d7:b0:02:52:63:ab:9d:ae:03:cf:
d3:df:45:e5:3a:e5:c4:b1:c7:84:75:ba:c9:0a:53:
de:d0:d4:c5:5d:56:2a:68:09:91:ed:37:9c:ca:3d:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:ED:25:EA:23:70:15:09:B6:28:7C:F5:60:1F:63:BE:42:22:8A
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:34:83:6e:9c:a9:b8:e0:f8:70:50:a1:1f:5b:0a:5b:cd:3d:
fb:6f:32:8e:2c:d6:39:66:86:b5:3b:ea:81:9a:af:80:d4:3e:
65:86:d6:19:18:fe:64:d4:85:9a:a4:98:15:46:09:66:47:f5:
29:1e:7d:12:6f:69:08:24:0b:07:0c:fb:d6:f1:5c:6e:0f:74:
f7:29:cc:41:1f:c1:60:28:95:22:70:25:1f:bc:2d:dc:0f:4b:
68:38:b5:05:e1:b2:4c:99:05:9c:84:e5:8b:e6:48:5a:be:ef:
7f:84:76:f2:fa:42:84:c7:29:5c:d6:e9:88:1f:92:7c:82:61:
d7:a7:9c:d7:e9:90:1c:e1:a4:d7:72:46:a0:38:79:cb:2d:82:
44:67:5a:f6:10:ac:22:13:1f:16:73:bd:45:08:c4:f3:8d:e3:
8a:e2:e2:f1:59:42:59:33:77:a0:d2:ed:3e:06:2e:41:9e:3b:
19:a5:5c:d0:28:c8:1e:93:cf:fd:e7:51:ef:ec:19:ef:50:5e:
c5:80:93:d8:3a:4d:f3:66:d6:4c:66:b3:f0:b5:f5:e6:f7:82:
ec:9e:64:70:10:1b:a2:4e:b5:d2:f4:f3:67:1c:92:39:f0:a6:
fe:80:d5:46:ea:8e:95:b5:b5:36:18:05:02:9f:74:c8:87:31:
99:b6:f3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:36:59 2025 by rpki-client