Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: 4IKjeTcWZeQOU/yIWkZSPt2EkS0TyraDVR2jmBqJDtQ=
Subject key identifier: 0E:E7:6B:EE:52:5E:36:BA:D1:84:2D:3C:E0:A5:C4:5F:FF:80:59:CA
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 01975535A50B7B5B0F6ECDB54BC1AFEE1CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 1544
Signing time: Mon 09 Jun 2025 15:01:08 +0000
Manifest this update: Mon 09 Jun 2025 15:01:08 +0000
Manifest next update: Tue 10 Jun 2025 15:01:08 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: Rj6RgbBAzKr2C0lq/k81S1vJhP1HGvgvdmf915Z5Zh4=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:a5:0b:7b:5b:0f:6e:cd:b5:4b:c1:af:ee:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Jun 9 15:01:08 2025 GMT
Not After : Jun 10 15:01:08 2025 GMT
Subject: CN=0ee76bee525e36bad1842d3ce0a5c45fff8059ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:3d:2e:a6:55:6a:18:1d:53:82:4e:12:45:
cd:37:19:4b:ab:de:72:fe:55:6a:aa:5e:e5:9f:11:
f0:a1:63:43:07:29:9c:a7:44:bf:e3:e5:73:2f:e3:
ab:43:c2:ff:4e:44:8c:09:03:89:41:76:ae:c1:b1:
40:c7:23:80:26:89:cb:ec:ad:c3:0e:a3:00:43:09:
40:00:0e:82:b1:05:06:40:d7:66:25:dd:cc:2b:66:
4b:ea:96:e8:cb:8c:3f:56:c5:33:37:ca:6a:07:6f:
a7:5d:8d:6d:34:b7:fb:4f:93:5f:82:08:6f:d2:d7:
50:be:29:e7:1b:eb:46:8d:9e:1c:70:72:8c:e0:49:
21:d7:4f:e6:02:91:10:0c:6b:9a:44:d6:5a:3d:02:
d9:21:22:bb:62:b6:bc:f2:d3:4c:19:1a:1f:ad:1a:
6a:56:82:ae:0a:b3:cc:90:af:fe:d8:a5:4e:47:6e:
02:73:27:a0:30:c6:28:6e:c6:de:ca:a9:2d:dd:d3:
e3:23:22:67:49:3d:84:8c:05:6e:cc:c9:87:28:e0:
0b:60:e3:26:ca:a5:e7:6c:23:1c:9d:ca:47:1e:5c:
c1:f5:f2:48:d1:b1:dc:a4:96:b4:ca:a4:4a:6a:26:
12:6e:7c:11:02:07:23:f5:ab:60:da:f6:19:a8:8c:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:6B:EE:52:5E:36:BA:D1:84:2D:3C:E0:A5:C4:5F:FF:80:59:CA
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:01:e1:6c:69:9f:fc:bb:82:9b:4f:e2:7e:88:11:79:eb:
7e:07:a0:ee:9f:42:ff:b9:72:ab:93:02:a2:3c:32:e3:95:ee:
8a:83:2a:3f:c7:7e:3a:eb:ec:ad:7c:d2:72:36:b2:79:3e:55:
03:7d:02:c0:f0:14:fc:8b:5d:34:75:fa:0e:5d:79:bc:63:ce:
e5:bf:90:de:12:6f:5d:13:da:26:72:2a:56:1c:e2:8f:77:49:
59:1e:fd:0e:51:84:ae:43:09:26:9c:49:ca:bc:cc:81:fc:3b:
69:1f:02:71:83:7e:9c:b7:ba:d8:09:c8:21:15:44:2e:76:3e:
04:c3:15:82:4a:2f:1e:6c:9f:75:2d:cf:85:7f:9f:b7:e6:2b:
cb:c2:de:b2:4d:7c:3e:58:1c:95:5b:c5:a0:bf:62:74:81:80:
c5:9f:97:c3:53:b5:f2:2e:b5:44:6d:dc:77:02:13:d0:13:05:
21:0e:f8:1a:69:57:64:c9:af:14:8a:da:b8:01:75:a5:43:d2:
da:a7:ef:50:4f:84:b4:55:fa:e6:05:5c:d6:61:a7:6b:b9:23:
5c:44:12:32:d7:f5:07:01:ee:ee:f0:c4:7d:c3:9b:bc:50:16:
2f:b8:0b:d7:c0:17:22:78:40:05:0e:6d:6f:1d:b1:b4:b8:1f:
74:47:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:35:28 2025 by rpki-client