Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: 6rejZGA9cX1f9FaflZuMMu7RVYawsVaUq1YFCYeJLAc=
Subject key identifier: 01:2C:CF:A9:27:C2:40:57:5E:9B:21:4E:CB:28:F1:62:D9:48:EE:EF
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 0196477BC4D1DDFB76466E1F1F1364EE3A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0A1D
Signing time: Fri 18 Apr 2025 06:00:15 +0000
Manifest this update: Fri 18 Apr 2025 06:00:15 +0000
Manifest next update: Sat 19 Apr 2025 06:00:15 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: IAW/37OM0dsj3If6OMhBQnSJTJEk6vWNaBANRRROJf4=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7b:c4:d1:dd:fb:76:46:6e:1f:1f:13:64:ee:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Apr 18 06:00:15 2025 GMT
Not After : Apr 19 06:00:15 2025 GMT
Subject: CN=012ccfa927c240575e9b214ecb28f162d948eeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:b8:cb:10:ed:3a:7d:fb:6c:b7:f5:a2:0b:
2e:23:04:4c:83:5e:ca:77:31:9d:28:7f:e8:43:9f:
10:3c:b5:fc:c5:de:f1:b1:c8:74:15:27:f3:28:ee:
83:56:64:8b:a8:34:cc:14:2e:3a:8c:e7:1b:5c:82:
27:fe:cd:8c:c4:79:c5:2d:09:2d:4c:ef:b0:37:cf:
8f:72:63:b4:7c:a6:b8:c2:1b:97:ee:b8:14:70:ef:
1a:09:f3:59:2f:77:7a:6b:88:cf:c3:95:55:46:df:
7e:45:7f:18:df:d9:3e:35:cc:e6:a0:f0:82:98:1b:
85:bc:2b:c6:04:1f:4e:91:e4:cb:ab:27:42:08:2f:
f3:27:19:cb:56:d7:2c:55:ab:2d:9d:66:04:d6:52:
ec:88:d0:e4:cc:84:24:a1:b0:84:05:11:ec:47:60:
a9:0d:53:1b:89:1e:f2:8f:69:23:79:54:e0:b7:d5:
d8:1f:36:83:7f:64:6a:bf:cd:a7:e8:f0:7e:60:39:
8c:72:82:e6:83:a8:f3:fd:b4:86:8d:5b:d8:5e:f2:
bd:b5:0b:b3:db:44:7a:5d:ac:e5:2b:4a:d6:30:4a:
60:d6:a1:aa:66:9f:5b:e1:57:75:c5:2e:ab:31:b4:
bb:95:12:29:d4:e4:d6:8c:07:19:2d:57:64:d2:46:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:CF:A9:27:C2:40:57:5E:9B:21:4E:CB:28:F1:62:D9:48:EE:EF
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:89:af:a0:7e:0e:88:1e:4a:a0:30:d3:18:e5:38:23:1b:e1:
41:7d:5a:2c:bf:7d:25:7f:86:20:a4:5b:c1:3b:0f:3f:af:1c:
63:c3:2b:e9:b9:ff:0c:6f:79:9f:36:f1:db:ec:67:54:49:6d:
19:37:55:6b:27:43:8c:95:30:d8:55:ec:a1:8c:e5:55:92:d7:
e3:5b:71:22:4a:2d:4a:b6:7c:7e:77:37:8f:43:86:fe:1d:18:
82:35:f3:6e:5d:9c:0d:d6:9c:43:ff:91:15:d1:7e:8d:3e:34:
49:1f:f8:ea:52:e7:f4:16:a1:1d:29:9b:cf:82:96:27:80:e9:
75:d1:21:92:3a:36:e9:fd:d5:f9:b7:c7:2e:b3:bf:c0:44:08:
58:12:67:96:cc:a9:29:e4:55:5f:9b:3a:25:cf:24:b8:e1:5a:
39:84:b4:ea:11:68:20:4e:15:fa:fd:0a:be:99:d4:71:95:63:
04:3a:5c:92:58:49:bb:50:48:49:7e:a4:d5:bf:cf:5f:9c:52:
56:d9:a3:67:25:b7:9d:ad:6a:53:c7:f8:a6:f4:58:34:ae:b3:
7e:42:b9:f4:ff:33:14:9f:b6:b5:51:8e:b1:cc:dd:51:bf:14:
64:c1:6b:7d:aa:42:d6:22:b3:0c:9a:10:bb:a4:b6:b2:8b:89:
e6:ba:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:22:41 2025 by rpki-client