Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: ml5/t0wmXhFaLwcytCrzSmaI8sIKLbg3nVaGGTGx8Mk=
Subject key identifier: 6A:6F:60:F0:2C:88:E6:40:53:9E:8F:CB:F4:90:B1:65:69:7C:2F:C4
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019654CA05620CF5B5C8FB4C8DA61C06D378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: D5
Signing time: Sun 20 Apr 2025 20:00:47 +0000
Manifest this update: Sun 20 Apr 2025 20:00:47 +0000
Manifest next update: Mon 21 Apr 2025 20:00:47 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: lgRKGpPR4nE6AJ9T1kfDrS8c87YF4lFN50KfkuJZTJE=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:05:62:0c:f5:b5:c8:fb:4c:8d:a6:1c:06:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Apr 20 20:00:47 2025 GMT
Not After : Apr 21 20:00:47 2025 GMT
Subject: CN=6a6f60f02c88e640539e8fcbf490b165697c2fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:7f:85:ba:c1:ee:39:c7:02:3e:6d:3e:14:
21:28:ba:7b:76:61:eb:f8:3f:35:26:45:3f:dc:c5:
42:a7:8a:f4:dd:08:ad:4b:80:32:68:12:33:06:44:
ba:27:28:a2:af:e0:94:af:d5:1e:87:eb:ec:44:5c:
ae:79:d9:f4:fb:aa:5f:43:36:66:78:72:54:b0:5a:
9e:94:85:93:78:9d:e8:2b:78:a6:ec:13:73:6a:87:
ad:49:6c:b5:8a:d0:f1:89:77:d0:29:4d:03:e1:5f:
7f:6d:0c:9d:89:ca:18:af:26:79:b8:da:93:fc:e7:
fe:ae:99:2f:88:ed:c2:60:32:f0:f2:ec:99:88:b9:
9f:a0:f2:e4:3b:20:21:fc:9a:c5:61:35:03:f3:68:
f8:7e:fc:4e:f4:3f:e4:d8:d0:ab:6b:0e:79:76:10:
41:d7:ec:da:0f:fb:b5:b3:01:cb:c8:39:ae:09:d1:
c3:e9:88:3b:4b:41:12:24:7d:d6:22:24:f5:78:ba:
22:93:ee:3d:be:05:2b:5e:41:52:3c:79:8e:16:d0:
b1:6f:b0:78:d7:8b:62:b8:e5:37:00:6c:fd:5c:18:
0c:45:79:bb:0a:7f:50:b6:89:ad:ca:c5:22:6f:6a:
f1:52:ac:6d:34:56:00:e8:32:a5:f4:ec:78:15:50:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:60:F0:2C:88:E6:40:53:9E:8F:CB:F4:90:B1:65:69:7C:2F:C4
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:b5:4e:c9:fe:6f:d1:f4:27:1c:08:5e:3e:cc:ce:72:49:
9d:33:a1:a6:1f:b4:90:d9:91:26:97:0a:83:32:23:f7:76:4f:
06:5a:30:3a:40:ca:e9:30:e5:75:dd:32:16:d4:0c:1e:4d:e8:
d0:68:71:6b:73:6d:08:42:22:af:9c:1e:a1:2c:4f:72:2d:71:
a7:10:66:1f:d0:33:7f:53:f0:71:f3:ab:61:24:ca:56:ad:cb:
cb:a7:00:fc:8c:e2:4a:2d:5f:64:45:63:5a:48:ca:eb:9c:c4:
17:01:f8:71:fd:c7:d8:92:ae:1d:86:2f:1d:60:8a:88:6b:01:
78:35:96:11:ed:22:13:94:ee:ea:14:96:9b:0f:5c:21:14:c0:
a6:a2:d7:44:1f:69:8b:f2:c3:c4:12:65:14:ba:c9:e6:7a:5f:
24:81:67:e5:d1:6d:aa:0b:ad:40:32:23:e2:6f:bc:03:43:25:
59:b6:50:bb:a0:f6:c8:51:3e:4f:99:69:c8:9b:26:22:35:c8:
c1:77:1c:35:a8:3b:8c:da:6f:13:ac:bb:c8:56:15:94:b5:2d:
c4:b9:69:95:18:b6:18:82:a4:fc:a3:7c:8e:88:46:6b:0e:d0:
14:a5:eb:8d:f1:8c:82:d1:79:4a:66:65:6e:5f:1c:c0:74:a9:
89:fa:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:31 2025 by rpki-client