Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: ey+A/Qk7JOtB1RYvUgKCiPxCg3K5NEgSCnvM2pcxnAo=
Subject key identifier: C6:57:6A:41:4F:93:11:52:DA:1D:58:AA:92:D0:F4:7F:49:59:5E:AB
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 01964A7CD632C86A5621D06B63B64693ECB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 123E
Signing time: Fri 18 Apr 2025 20:00:17 +0000
Manifest this update: Fri 18 Apr 2025 20:00:17 +0000
Manifest next update: Sat 19 Apr 2025 20:00:17 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: bixj7D/5BzfW+Fn9zWJbFFFadPHCqxHJ4X86+EZ5k0w=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:d6:32:c8:6a:56:21:d0:6b:63:b6:46:93:ec:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Apr 18 20:00:17 2025 GMT
Not After : Apr 19 20:00:17 2025 GMT
Subject: CN=c6576a414f931152da1d58aa92d0f47f49595eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:fc:c4:9b:d3:b0:8b:17:cf:ef:07:20:ab:
d1:cd:35:bc:d6:47:88:f6:65:f3:d9:95:99:13:da:
f2:83:c1:05:ba:7a:7c:84:d0:d9:0f:a2:88:43:de:
10:f0:3e:9a:bd:67:24:5b:ec:ce:fe:14:02:f1:1e:
0d:e2:f0:46:24:a1:d4:b5:06:40:5d:a4:30:30:59:
b7:62:1c:ab:47:86:83:0c:c5:79:10:4a:b9:92:d0:
a7:54:32:10:0a:4a:76:2b:eb:f4:29:e4:eb:6f:89:
05:37:51:33:8f:a9:0f:6b:64:55:28:00:75:49:d0:
3e:08:44:31:36:c8:4e:e2:7c:ac:18:d7:6b:79:1d:
a8:12:92:72:b7:1a:00:32:83:c8:3e:b8:71:e5:d2:
07:ab:cb:af:68:7f:25:85:ef:9d:eb:02:a0:71:c7:
7c:d8:17:e4:6c:0e:32:8d:64:c6:a4:09:22:9d:01:
10:67:20:78:14:3e:0e:71:a0:06:b4:29:c8:ba:ac:
4e:4b:7c:a7:45:03:67:88:b1:5e:51:74:7f:27:22:
84:33:90:86:85:e0:d1:7e:44:ff:ae:09:48:fe:66:
00:d7:11:e4:ea:a1:d1:b1:97:ff:f3:88:17:ef:9a:
a6:5e:c5:64:5c:82:84:5d:a3:bb:7c:5a:3e:12:9c:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:57:6A:41:4F:93:11:52:DA:1D:58:AA:92:D0:F4:7F:49:59:5E:AB
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8f:6c:b4:76:f2:f5:35:7d:09:a4:1f:35:27:a4:eb:41:c6:
e9:dd:4b:59:80:32:bb:50:63:ed:07:19:4f:ad:6d:fa:92:9f:
14:c6:67:25:26:3e:ad:ee:f1:7e:f1:14:3a:11:42:ee:f3:c0:
9c:06:e5:bb:f0:c6:25:59:9b:df:37:08:b2:2c:a6:b4:ff:3f:
63:58:96:7c:38:59:b0:8d:2f:4b:e7:3c:cd:b1:5e:1b:82:d4:
4d:16:94:5d:9d:df:8e:2f:13:36:b0:87:b9:a2:88:a7:cf:e8:
52:2c:aa:21:a4:c3:18:aa:78:58:a4:98:09:c0:70:0f:1c:b9:
f0:cb:c8:5b:02:33:48:cd:c1:53:fe:92:30:a1:7f:d6:03:9e:
84:d4:de:9f:24:43:a9:48:00:d7:af:29:29:a9:f2:07:7c:aa:
60:78:61:69:74:c3:77:40:c0:fa:3e:c3:f5:6f:15:6f:7d:1d:
ba:cb:46:3c:47:c5:1c:4a:a1:27:a5:87:28:2e:27:65:97:dd:
47:7d:22:49:13:59:94:a3:dc:44:f8:b8:dd:ae:c9:ae:40:8f:
b7:ec:2d:d3:8a:6f:05:7d:91:7d:01:78:cb:25:b5:00:11:d9:
48:82:ea:d3:d2:a2:67:bb:ed:d3:61:97:7d:e0:f5:3d:0e:ef:
e7:17:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:25 2025 by rpki-client