
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: QwoZkSEOXkseXIC5P9UxvV2UdcPUCHyEsWPx2hVVV14=
Subject key identifier: E5:8A:89:2C:09:DC:4F:F1:B6:E1:CF:27:D3:3E:0C:D6:8B:BB:BA:A6
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 01974DB2C044AA76CE8E8A8962EFB3D16BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 0553
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: njHrDBqbhv1dxIRMsCpYcZzWDwzgC+TrpBvwKCyYWF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c0:44:aa:76:ce:8e:8a:89:62:ef:b3:d1:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=e58a892c09dc4ff1b6e1cf27d33e0cd68bbbbaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:c6:22:ae:2c:0f:49:7b:ff:4b:6c:69:30:
ad:d3:ff:d2:99:4e:b9:69:8f:2f:64:3e:a6:30:47:
83:8d:e8:fe:00:10:fc:ee:8d:9c:4e:f8:7f:f3:57:
e5:51:f5:ce:35:26:f6:aa:53:f6:00:c9:5c:2a:4e:
be:76:21:72:bc:08:bb:e3:60:66:9b:d7:69:07:b7:
91:83:eb:f9:e4:65:5b:ff:ae:53:cb:48:4a:1b:f6:
5e:07:dd:8b:40:ac:04:10:a3:3e:d9:7b:3c:91:3f:
d7:58:f0:15:16:0d:13:3e:0e:3f:b3:56:b8:12:fc:
28:7b:85:15:0e:b4:92:55:b8:b9:01:a1:c4:1e:a2:
83:b3:4a:d9:ab:4a:26:74:d3:11:07:73:e3:b7:f3:
7b:54:90:39:b8:0b:6d:56:06:a5:ea:e2:50:32:b9:
c8:95:29:bd:f2:a6:f9:69:0b:97:43:a1:57:41:57:
8a:22:5c:cd:f6:c7:af:52:45:a1:da:35:a7:60:49:
1e:85:42:0c:6e:9e:bb:f3:1e:ef:dc:b8:fc:d0:1a:
38:ac:e1:a1:5e:de:48:f8:ee:01:8c:04:72:99:61:
8f:b5:39:2a:7d:59:6a:53:90:46:89:85:c0:a7:aa:
81:c9:95:ff:a6:03:d0:38:6f:d5:6a:09:b3:be:a1:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:89:2C:09:DC:4F:F1:B6:E1:CF:27:D3:3E:0C:D6:8B:BB:BA:A6
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:45:e4:41:d2:c1:61:0f:74:ea:1d:45:4d:e2:55:63:c7:
9e:4a:ce:25:cb:3e:2e:48:2e:5f:5b:46:fa:ba:d3:8e:53:74:
e2:c4:d6:6f:fb:7a:3a:64:89:4b:8e:3b:a6:a9:2d:dc:84:cb:
1a:15:87:40:8c:fa:de:25:5b:32:a3:c6:34:4f:36:91:0c:0a:
dc:e6:3c:ad:69:7f:c1:f4:f7:9a:10:4f:66:fd:61:7d:04:42:
32:a5:29:15:0d:94:a0:5c:9f:c8:16:d7:13:7f:15:55:00:cb:
3d:55:75:45:04:ee:e2:45:9d:21:15:88:74:ba:b1:74:90:7f:
53:fe:7b:22:fe:95:dd:c1:e1:3a:eb:2a:83:6d:19:c8:d3:0a:
da:ab:13:84:70:88:53:eb:67:32:6d:02:47:e5:89:b5:54:e7:
7f:4b:7d:95:4d:5e:4e:6f:16:13:4c:29:de:0c:d7:16:79:d3:
9a:25:c7:21:a4:93:80:59:93:17:d7:3f:20:1b:52:e7:6e:76:
a5:e7:91:b2:9e:3d:97:ae:77:f6:8e:3e:52:db:1a:91:11:c9:
73:ee:63:4d:be:94:1a:39:7d:69:24:5c:c8:69:68:21:a8:97:
ee:d7:60:51:46:ea:bd:47:d1:81:c4:e4:bb:3d:f3:e5:3b:44:
3a:2a:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:08:49 2025 by rpki-client