Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: aQ15DoiZdG9pbqgIYbW8LGDDn6EzYyXNMo/+ML9GGNs=
Subject key identifier: F9:63:94:D2:13:CF:B6:8F:40:FC:D8:EA:29:21:D3:75:AD:15:DB:17
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 0196138F5595A055C98E1ECA3AE67441BBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0C60
Signing time: Tue 08 Apr 2025 04:01:22 +0000
Manifest this update: Tue 08 Apr 2025 04:01:22 +0000
Manifest next update: Wed 09 Apr 2025 04:01:22 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: I8aBH7LIsAGsfuD6H1j0uy7/GxVQVZXL02XNPKpjqUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:55:95:a0:55:c9:8e:1e:ca:3a:e6:74:41:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Apr 8 04:01:22 2025 GMT
Not After : Apr 9 04:01:22 2025 GMT
Subject: CN=f96394d213cfb68f40fcd8ea2921d375ad15db17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:89:79:38:46:26:8c:61:93:db:05:ac:44:
ab:4b:07:b7:a0:64:3c:f5:74:46:bc:6a:cf:6d:26:
7c:cf:2d:9a:69:96:65:f1:23:31:f8:f7:5d:8d:d3:
35:9e:c4:d6:22:43:60:ba:bc:66:af:60:e0:76:79:
99:0f:8e:6f:62:93:d9:c2:42:53:6d:eb:95:5b:0d:
58:f7:bc:83:30:4f:34:3b:5c:e8:25:f1:7b:1d:fb:
c5:f1:0d:d0:c7:6a:d1:67:54:1f:44:12:4e:89:4b:
63:52:47:b0:99:a9:6b:d5:05:08:2b:89:e0:28:4a:
eb:85:52:c6:12:3e:62:fb:27:c0:8d:69:b4:c6:a5:
10:0c:98:d0:f1:c2:a2:d1:ca:96:08:42:19:17:64:
25:c3:41:0f:f6:e3:a4:05:ac:1b:f3:ad:3d:30:90:
ac:b9:5c:66:67:44:99:a3:e6:de:bf:e9:f1:db:e9:
57:cd:24:08:7d:ee:54:f6:a8:ff:75:70:04:01:51:
6f:52:85:46:4b:a3:e7:8c:e4:e3:d7:7b:e6:8e:48:
6b:7e:f5:05:ed:1d:b4:0b:0f:28:9b:7f:7c:14:04:
af:5f:60:0b:33:0c:0b:dc:ae:69:62:94:d6:2e:00:
cb:30:39:10:69:b5:f0:b8:44:26:74:37:bd:93:92:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:94:D2:13:CF:B6:8F:40:FC:D8:EA:29:21:D3:75:AD:15:DB:17
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2e:3c:7d:7f:e9:33:7a:a7:13:c0:9a:46:a4:61:ac:4f:c4:
0b:b5:57:d9:63:df:0b:67:f2:64:43:c3:b6:a2:ac:a7:f3:28:
b8:e9:13:14:c3:28:f7:64:38:16:0c:53:8b:44:e2:e7:14:7a:
96:97:98:30:c4:19:4a:f6:c5:6d:b0:78:2f:5d:37:89:50:b7:
db:18:a4:ce:8b:44:d4:b0:04:07:07:4d:39:54:f5:8b:47:5e:
81:48:40:cd:26:40:50:00:97:9e:f2:d4:e4:a1:26:82:a8:fb:
9f:61:ff:93:4c:d9:f1:bb:7c:b2:cf:c6:fa:02:47:36:c9:a6:
97:ad:52:8a:87:a9:05:d3:c8:8e:73:1f:54:93:64:8e:a9:94:
c8:08:32:2b:01:4c:25:77:c3:d9:0a:af:d1:34:ae:66:9f:75:
45:78:fa:fe:81:63:20:03:25:4e:c7:c5:f9:4b:37:e0:01:04:
5e:88:49:bf:e2:a4:5a:a7:51:f5:60:51:45:a5:66:fc:cc:97:
9d:89:4e:69:a6:76:e7:0b:6f:1f:84:f4:a9:f1:24:42:16:00:
bb:b8:2e:4a:bc:28:29:fa:3a:29:79:77:a3:27:40:ad:a4:5e:
74:18:e0:49:8a:e5:73:04:38:db:fa:7f:d3:bb:9b:8a:cd:5e:
0a:02:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:37 2025 by rpki-client