Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier: 03DxduzjAqbRnMEWMm8HN/3gmGUHhwxUNQ7tanLLUlM=
Subject key identifier: 79:D2:EB:73:E6:9A:36:D1:55:95:89:3C:BE:24:0D:56:C0:09:FC:45
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial: 01965EA853A226AEFEC2A3331F02C52AD096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number: 03E2
Signing time: Tue 22 Apr 2025 18:00:11 +0000
Manifest this update: Tue 22 Apr 2025 18:00:11 +0000
Manifest next update: Wed 23 Apr 2025 18:00:11 +0000
Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=)
2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: vjn0DEnecORmRcNLzOjXOPmuJip7qjYyT68C47PQaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:53:a2:26:ae:fe:c2:a3:33:1f:02:c5:2a:d0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Validity
Not Before: Apr 22 18:00:11 2025 GMT
Not After : Apr 23 18:00:11 2025 GMT
Subject: CN=79d2eb73e69a36d15595893cbe240d56c009fc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:ca:55:35:45:13:a6:dc:c6:48:09:ba:9b:
ca:27:89:c9:86:13:b1:2d:62:f9:d7:d5:00:a6:09:
17:48:bb:86:da:98:3a:cb:4a:1e:28:2d:ac:76:a0:
02:35:05:ef:4e:ae:1d:61:c9:6c:16:b4:a4:c5:c2:
1a:fb:2c:e0:08:d5:bd:a0:9c:26:d4:ff:69:a3:b8:
42:6a:0c:58:87:fe:eb:3b:ac:56:26:a4:40:2d:8b:
b7:84:69:1d:af:ae:40:c8:3d:11:f0:ec:53:5f:ab:
c2:78:9c:60:d3:a4:03:01:5c:bb:5c:6a:6a:c5:e2:
f3:39:ec:76:1c:70:2f:20:4c:58:9c:a9:2c:ff:48:
93:93:14:ae:31:08:d4:47:a8:37:36:a3:c3:c4:5c:
ed:3e:01:1b:ae:5e:e7:61:4f:88:20:f5:b0:0e:45:
e8:74:4f:4e:67:3d:d8:02:03:f0:8d:a1:42:bb:6c:
87:5c:1e:37:99:c0:02:a5:49:be:99:67:11:a1:aa:
bd:95:31:9c:d6:b4:8b:11:99:69:57:63:c0:30:b2:
d7:cf:2d:06:1e:61:c8:f3:24:8a:01:c9:37:13:ca:
d2:be:58:ae:e5:0e:fb:8a:b0:75:6a:ec:7d:ce:d2:
32:51:d1:6d:72:bf:60:04:1c:ea:a4:df:8a:c7:46:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:EB:73:E6:9A:36:D1:55:95:89:3C:BE:24:0D:56:C0:09:FC:45
X509v3 Authority Key Identifier:
keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:18:bf:8e:57:44:5c:10:37:06:56:11:ee:86:c6:2e:10:7f:
ea:22:e2:f3:61:bd:f7:b3:4d:6b:a0:65:e1:d9:40:3d:01:f1:
3f:c9:a2:81:b4:6f:a5:1e:22:7f:45:b8:d0:a0:ef:84:76:9a:
fd:2b:eb:5c:fd:91:ac:ad:42:dc:57:16:45:07:05:12:96:1f:
ff:1a:d1:72:4f:16:26:86:2b:bf:5a:42:e9:6f:82:3d:c0:6e:
31:40:5b:28:20:a0:c5:0a:6b:c1:d2:38:2f:54:e9:f2:bd:c6:
51:6a:70:d4:24:59:53:3c:e4:10:2d:64:c1:e6:8e:fe:d2:53:
74:8b:10:83:8a:c6:88:00:9f:77:47:9b:77:d9:07:47:73:ae:
6d:4b:2f:f3:06:4d:ad:50:5c:0e:08:3d:74:08:56:0a:8f:73:
d0:27:67:25:19:91:c1:de:2c:e4:4f:66:e8:79:10:d5:b3:d4:
86:77:c6:b8:9f:97:db:99:35:ef:44:17:06:b6:39:ad:14:38:
6d:be:83:68:72:03:91:1e:8a:a7:91:ce:ca:95:ef:34:77:c7:
82:6c:28:fa:67:bf:20:29:1b:02:13:aa:a2:4b:ab:8d:11:f5:
09:a8:95:22:bb:43:58:40:ad:22:e6:fb:e3:57:4a:a1:0d:3a:
af:cd:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:03 2025 by rpki-client