Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File: G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier: dvLeBO8UJWKOOBIS9X9qMSNB//llFZ0H4wGbiopbe90=
Subject key identifier: AF:9F:2E:57:98:7D:17:2B:74:D1:95:CB:D0:A6:E9:00:78:26:C9:02
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial: 01964CD99860BA6AAE7EB1B8D28FBA41F552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number: 02DD
Signing time: Sat 19 Apr 2025 07:00:50 +0000
Manifest this update: Sat 19 Apr 2025 07:00:50 +0000
Manifest next update: Sun 20 Apr 2025 07:00:50 +0000
Files and hashes: 1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: /0mpYIoIa1BLV1Q6OFUpxJeIRzNSpSSrUBP/9AHpYmY=)
2: mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (hash: Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:98:60:ba:6a:ae:7e:b1:b8:d2:8f:ba:41:f5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
Validity
Not Before: Apr 19 07:00:50 2025 GMT
Not After : Apr 20 07:00:50 2025 GMT
Subject: CN=af9f2e57987d172b74d195cbd0a6e9007826c902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:a6:ed:5d:dd:ad:71:c2:fb:a4:15:8d:4d:
70:63:6a:45:9d:ef:c6:70:7b:bd:d1:41:67:25:2e:
cf:b3:21:c9:67:13:ba:f4:3f:29:bc:0a:8d:82:0f:
0d:b6:6d:72:73:42:6d:c0:c7:c5:17:bf:13:f1:dc:
c3:46:59:39:13:76:ba:64:ad:14:56:83:5a:74:94:
fe:51:1b:7a:3d:1f:96:49:d0:0b:3d:8b:51:23:79:
64:5d:c1:5a:7d:b0:bf:20:15:53:d8:97:4e:57:c1:
90:e2:4f:17:26:f3:da:d0:f8:35:08:ef:bf:81:c0:
56:b5:f5:a9:3c:2f:12:38:6f:26:b8:b5:be:fc:9b:
4e:a9:b8:8a:88:af:5a:56:a4:93:32:d0:ff:17:a1:
ab:1e:6c:60:a0:4d:c5:0e:d0:54:76:22:4c:48:dc:
27:46:91:4b:9a:81:47:41:e0:06:ef:5a:6d:79:39:
34:15:e3:1d:f4:d7:6e:70:2c:53:86:03:0b:27:03:
0f:ed:8d:2c:61:87:38:84:7b:db:70:28:9f:71:92:
5c:f1:1c:09:32:09:a9:4c:f0:a1:55:99:ff:8a:46:
bd:ba:22:1b:6b:a7:ed:eb:ed:2e:60:4b:88:0f:2d:
8c:2b:fa:8d:d5:e1:e7:ea:6f:8e:e5:aa:db:c7:ce:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:2E:57:98:7D:17:2B:74:D1:95:CB:D0:A6:E9:00:78:26:C9:02
X509v3 Authority Key Identifier:
keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:15:b4:cc:d7:fd:7b:a8:5e:2c:54:13:04:49:41:76:84:
85:af:c5:8f:20:7c:b6:b0:f1:71:ea:c1:10:c0:84:99:56:32:
2c:50:ab:d9:2c:15:43:1b:79:b1:1e:8b:c8:b1:2d:fe:07:97:
51:14:db:4e:f1:c7:e5:c3:ea:07:93:f2:be:61:b4:46:5f:b8:
e3:df:90:71:43:57:c1:2e:4c:e0:ab:8e:d6:92:ec:3a:71:43:
ff:c7:56:8c:49:b4:84:6f:19:c1:b2:51:ba:c1:07:cb:c4:07:
ed:f3:98:ce:3f:68:eb:92:07:c0:9c:26:e3:9f:37:a9:49:a4:
be:0b:a8:b6:06:09:4d:d8:94:11:e0:24:89:85:f7:e3:71:26:
97:88:ad:19:ee:8e:56:cd:2c:08:a4:ed:b4:da:e5:87:be:c6:
f7:4d:86:6b:18:43:7e:fa:2e:e1:1e:c6:fd:c6:b4:94:ff:11:
5f:f0:b5:bc:ba:8e:89:23:ca:f9:a0:03:cf:15:de:de:70:0a:
3e:31:69:67:1d:7b:19:8a:92:d5:79:9f:de:2c:04:6f:e4:0c:
aa:d1:2d:b6:3b:76:4e:f7:f4:92:f1:22:76:6a:d1:30:bc:0d:
61:58:e9:85:ee:67:f2:20:43:f0:0b:c1:1d:18:0a:b5:bb:7d:
1b:e1:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:53 2025 by rpki-client