Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: AJDP+SUY4xS+mwjjXRkngPbgxLELZilCtKPX4EMnNwE=
Subject key identifier: 6D:D0:CB:78:86:0B:6E:31:63:64:63:E7:18:07:68:BA:CB:BC:8E:CD
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 01965726E9DF12973AA3FAA0A3082712443A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 07:01:30 +0000
Manifest this update: Mon 21 Apr 2025 07:01:30 +0000
Manifest next update: Tue 22 Apr 2025 07:01:30 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: Q7nGLg/3PeMHmRy/FoMzQ+OHtrCA73BLWYuu7YZnkq4=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:e9:df:12:97:3a:a3:fa:a0:a3:08:27:12:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Apr 21 07:01:30 2025 GMT
Not After : Apr 22 07:01:30 2025 GMT
Subject: CN=6dd0cb78860b6e31636463e7180768bacbbc8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:eb:98:35:8a:b6:d7:81:62:ab:ce:56:c5:
b3:72:72:a0:c8:0e:66:af:9e:b5:ca:b3:9a:94:e8:
b3:26:9b:b5:f2:3c:38:9f:b2:b6:a7:86:06:b2:a5:
64:f4:7b:8a:ea:e0:e1:ec:a9:64:1c:e1:3f:3a:98:
06:4c:ea:42:ee:61:9c:f7:7a:9a:73:a5:16:b9:7b:
51:dd:02:9f:ec:03:74:10:0a:ec:90:92:14:b6:4b:
94:82:d6:99:79:c1:ac:46:2d:8d:79:a2:be:df:c5:
10:44:89:fd:2d:84:e8:a9:49:ba:b0:c7:b9:9f:83:
b8:68:45:61:f7:f2:4d:04:75:db:4b:95:7b:f5:85:
31:7e:96:c9:24:4d:36:19:32:84:84:03:71:97:ba:
e5:1a:b4:f0:1f:63:9a:7c:de:27:46:28:aa:34:12:
8f:7f:8e:13:46:3f:86:9c:2b:dd:20:8a:0a:90:64:
8b:c4:3c:b3:ab:8b:5e:c7:94:f0:d9:c4:3d:cd:ac:
15:07:71:15:3e:03:58:73:df:cd:f2:a0:a8:57:71:
06:70:85:53:1e:0f:72:fc:e7:40:e2:80:75:10:88:
b1:fa:fd:cc:99:4f:83:6e:12:92:85:dd:37:cd:cf:
ff:25:37:49:ac:e6:75:88:51:db:70:4b:21:0a:d4:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:CB:78:86:0B:6E:31:63:64:63:E7:18:07:68:BA:CB:BC:8E:CD
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:ba:6a:ff:d0:59:a1:6c:fe:0f:2f:ee:ce:35:ab:75:64:
74:70:24:1e:65:a6:8b:ca:49:41:47:37:4d:1a:75:3d:92:0e:
da:28:67:d1:11:68:7a:06:bf:41:5c:51:e2:c4:04:bd:f4:20:
0e:e0:ad:88:21:9d:7e:bb:28:4b:e7:65:a4:94:2d:04:9c:9d:
89:15:a2:2f:9a:41:46:bc:ce:f1:bb:14:06:07:aa:03:92:40:
78:9c:ef:29:ab:9a:cf:d6:fc:4d:45:a7:d0:2b:8a:17:bf:bb:
0f:f9:88:52:65:44:bc:09:43:80:b0:2f:56:f3:85:64:ce:ef:
f9:c5:0a:e9:51:69:61:69:b3:dd:b3:32:77:4b:13:14:40:c4:
a1:ef:4b:0a:82:9e:f2:9e:e2:27:15:f1:0d:84:dc:56:47:da:
b4:39:f2:57:42:58:9c:a8:f8:83:f8:49:68:07:8b:9d:99:ab:
33:85:02:dd:93:99:ad:08:89:41:53:10:9e:6d:ae:c1:fa:98:
41:87:d4:58:50:d9:1f:e2:a5:9a:92:be:b9:f4:bb:e4:1b:4d:
a6:b3:c2:50:ff:04:9f:c0:eb:86:9b:b8:e0:38:b9:5d:c6:07:
0f:c3:63:c9:d4:96:8e:43:75:33:d7:6a:4a:8c:8b:a9:96:75:
f4:ea:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:27:11 2025 by rpki-client