
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: 5EAa1QXAhgj0AX+4olpW9lhLPxlIeikPRaD2EXJXNfw=
Subject key identifier: DF:AB:90:A2:94:08:76:84:D1:3F:05:23:87:1D:BD:10:78:60:54:A0
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 01964933ADAAC8B8C777402CB0A11B4A0020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 04CA
Signing time: Fri 18 Apr 2025 14:00:45 +0000
Manifest this update: Fri 18 Apr 2025 14:00:45 +0000
Manifest next update: Sat 19 Apr 2025 14:00:45 +0000
Files and hashes: 1: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: kzR8foltFm7P+N3alXQaPZrLADtMSQWqHJoKJHBy7L4=)
2: HfhWfm-8JwIIiQYp_iHO4fd3ANk.roa (hash: D9mkb/r3quYRr8SAt68TwHmtLFpg3Gut24nbmI/VIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:ad:aa:c8:b8:c7:77:40:2c:b0:a1:1b:4a:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Apr 18 14:00:45 2025 GMT
Not After : Apr 19 14:00:45 2025 GMT
Subject: CN=dfab90a294087684d13f0523871dbd10786054a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:5a:5b:75:ef:be:dc:2c:5d:8f:e1:4e:95:
e2:e8:6d:5b:c9:ff:0c:07:0b:d7:6d:04:d2:e0:36:
1f:cb:0b:71:d7:26:a2:3f:d1:99:95:ed:29:74:be:
91:d7:ff:16:cb:e3:09:51:fc:4e:8f:32:03:de:8f:
ed:35:56:78:ff:98:40:b9:8f:fb:b3:9f:fe:b6:69:
0a:be:fa:f8:d4:fc:ea:c9:85:d1:57:d8:e3:a5:e8:
1c:eb:ef:2f:d3:23:ae:f1:17:7e:45:38:9b:71:a9:
64:99:0e:2b:0b:61:30:c9:1f:75:26:a9:27:d6:51:
0e:b0:0f:c1:9a:3f:98:12:60:6e:a6:49:3f:6e:89:
8a:ff:72:c3:3f:00:74:e1:53:18:15:d6:71:b6:98:
c6:d7:66:0e:b5:fa:51:61:78:db:5e:24:a5:79:58:
26:83:dc:93:09:86:d1:12:c8:92:a2:51:1b:c2:2b:
99:02:22:27:81:63:03:f3:a8:86:de:1d:2c:bf:ef:
97:2e:41:34:63:52:5a:44:34:03:ef:f6:91:53:b2:
c8:fe:ca:73:71:1a:f0:70:a9:c7:f8:55:cb:b7:79:
07:27:1c:f3:2c:26:bb:9e:64:f3:c8:6b:4d:59:70:
7b:ba:53:cc:bd:53:42:ce:d4:18:0a:74:89:a1:e0:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:90:A2:94:08:76:84:D1:3F:05:23:87:1D:BD:10:78:60:54:A0
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:41:3d:db:98:b3:44:0d:47:6e:d8:d0:df:e6:12:84:f3:55:
c3:77:80:a9:21:9c:42:93:68:41:a4:f4:f4:67:84:5c:a9:3b:
96:02:38:ba:e3:53:18:d4:16:27:64:d0:3e:5c:c3:59:5b:f3:
2d:c1:27:a4:10:22:fa:1d:83:54:fd:d9:db:dd:a9:37:cd:af:
7c:4d:5d:2e:ec:57:35:30:cf:56:2e:6b:f3:8c:25:2a:bb:d5:
37:e4:96:ab:8e:18:bc:ce:0d:40:d4:64:48:76:e0:90:8e:da:
33:f3:ef:9a:76:21:19:d7:59:38:72:5b:90:d6:f1:a8:58:f5:
2b:5c:af:cf:64:5e:5a:78:35:10:8c:73:00:ca:3b:d5:53:94:
ae:ea:61:ce:20:43:d5:6c:2b:87:f5:f9:bf:51:22:b7:56:95:
63:4b:81:52:71:43:b5:91:59:86:26:af:c3:f3:83:56:fd:61:
d4:41:c3:77:cd:aa:fc:ce:a3:d9:60:b9:f9:86:f1:28:36:e5:
22:04:cd:f5:ec:07:48:3d:66:c0:84:47:88:7d:71:96:c3:f2:
1d:5e:d1:d9:c4:26:3f:17:aa:31:bd:1d:b6:bc:99:16:79:ad:
b5:7c:c0:07:e0:99:c2:8a:3e:10:5e:f3:eb:81:23:cf:a2:3c:
ff:b3:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:14 2025 by rpki-client