Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: NdF1fbqW/44qxuehKmYUMv9s/qK7qhpDnoVFCJjnda8=
Subject key identifier: 32:8D:4C:CF:E4:3A:41:B8:B5:AF:0B:82:05:84:21:F7:DF:F9:B5:22
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 01964FDA6FA2A8DB6A5ECA02CA40F3084281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 117F
Signing time: Sat 19 Apr 2025 21:00:37 +0000
Manifest this update: Sat 19 Apr 2025 21:00:37 +0000
Manifest next update: Sun 20 Apr 2025 21:00:37 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: WLp3vpJI+iHIhIkfAfNbbZC3/ezmcMkdOve2leb4wnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:6f:a2:a8:db:6a:5e:ca:02:ca:40:f3:08:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Apr 19 21:00:37 2025 GMT
Not After : Apr 20 21:00:37 2025 GMT
Subject: CN=328d4ccfe43a41b8b5af0b82058421f7dff9b522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:2d:9e:f3:dd:d2:fa:10:6e:0b:e5:a0:0c:
b8:6b:b8:ed:78:aa:a8:bd:13:84:dd:4b:68:64:26:
68:21:f7:c7:80:f5:03:83:a0:75:7b:63:56:56:a4:
24:56:f6:93:d2:37:71:ed:cd:33:34:46:30:30:24:
40:f8:15:d9:2c:21:95:02:da:41:61:73:97:b1:ce:
1d:34:61:87:00:86:84:b7:88:87:0b:2a:2c:a7:6a:
e9:e0:77:ab:94:92:9c:a4:e1:dc:4e:4c:9c:b8:9e:
9e:0a:03:40:92:69:2d:57:18:07:1b:67:67:37:c6:
74:5e:a2:1a:5d:fe:21:48:6c:3a:07:e8:91:7a:4b:
51:62:8b:7f:a9:e5:22:6f:b2:ff:6f:18:d8:36:f1:
82:69:56:d0:c3:50:d0:ed:da:b3:36:ab:b3:da:8f:
55:68:10:8e:fa:ad:75:b7:be:26:d6:97:0b:9b:85:
02:02:93:5b:06:86:11:01:c3:fd:88:60:c9:83:c3:
51:de:68:74:e9:9d:b0:3e:ba:cf:e7:ad:51:56:c8:
fb:6d:7e:7a:d9:7c:7b:08:b9:e7:c7:4b:b3:cf:14:
75:7a:19:ea:9e:df:3b:7c:3a:b5:78:46:bc:c3:1b:
d0:a6:34:3c:c4:b4:46:5c:06:64:14:c4:80:c2:a5:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:4C:CF:E4:3A:41:B8:B5:AF:0B:82:05:84:21:F7:DF:F9:B5:22
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2f:0b:dd:0d:6c:e1:d6:4e:17:a3:70:f0:7f:e0:f3:2c:df:
9a:51:ff:f3:85:8a:fc:f7:ff:0d:b2:6b:c4:46:e1:74:14:98:
18:40:42:39:1d:78:69:ed:b5:b7:00:9e:e9:9f:ca:42:df:df:
9e:41:58:67:35:22:08:d6:84:ae:5f:0b:c0:ee:6a:e0:eb:ac:
74:03:2f:da:0d:45:e9:02:1a:1b:20:64:00:5f:23:18:98:27:
9d:59:26:97:1f:77:f5:9e:b5:db:43:a4:6a:02:19:b2:15:dd:
65:3d:8c:e1:97:05:4b:1c:57:ce:1d:8a:39:27:c2:ba:c1:9e:
cc:77:dc:4a:4a:17:1a:9e:f4:ee:99:d9:b9:29:f2:d3:87:0d:
ed:70:87:df:62:ef:a0:d8:c1:32:52:97:bc:af:b2:ef:bc:3e:
8a:39:3b:0a:a5:36:a2:34:b3:08:43:59:de:82:0c:90:e0:e8:
99:20:bf:5e:88:fe:9e:59:98:44:41:a4:60:ed:49:06:6f:62:
a2:e4:16:f3:44:02:29:f5:9c:47:18:da:7c:75:3d:97:29:94:
c4:82:11:d5:75:d3:e7:37:91:e4:20:62:5b:dc:52:07:e8:34:
d2:a7:ff:46:d1:f6:21:4b:d4:35:f0:88:ed:b0:89:56:6c:c5:
2d:a8:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:19 2025 by rpki-client