Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: MJeESENVmk5quwRVEGBiUK0DSURl/E/Qf3l5Q63iKFs=
Subject key identifier: 82:B3:BE:A3:D4:68:76:83:C2:39:31:96:80:9B:BB:78:CF:12:A6:D2
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 01964DB512113598219984B8B378CF5B4781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 11:00:34 +0000
Manifest this update: Sat 19 Apr 2025 11:00:34 +0000
Manifest next update: Sun 20 Apr 2025 11:00:34 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: 45ggUpaAnZklxFkOtHhUgmjTa22g0KDOBZpHLzoFYfI=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:12:11:35:98:21:99:84:b8:b3:78:cf:5b:47:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Apr 19 11:00:34 2025 GMT
Not After : Apr 20 11:00:34 2025 GMT
Subject: CN=82b3bea3d4687683c2393196809bbb78cf12a6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:a7:2e:4a:c9:7c:b8:d6:69:0c:28:63:88:
b7:1d:f4:3e:b1:18:a7:c8:e7:3a:88:09:44:f0:38:
65:46:2e:a2:a0:dd:2a:c7:3a:f7:c5:94:be:58:87:
75:a2:8b:46:96:37:76:1c:fb:7e:4c:e3:b1:a6:3a:
b6:5e:5d:e0:f6:95:90:8d:78:95:8b:21:15:9e:cc:
c3:1d:5c:69:77:30:25:a5:85:d9:36:11:76:36:6f:
1d:ad:0c:c0:69:9e:f0:9e:34:4b:8e:58:d4:85:5f:
3e:78:9e:0d:38:80:37:81:04:70:a6:fc:d9:df:52:
96:3c:eb:e1:6f:b5:75:29:56:e4:41:dc:45:fa:8a:
dd:bd:14:e5:7c:c9:97:05:60:ac:63:a9:52:26:a3:
48:70:87:fd:aa:98:06:bd:5e:9b:94:5b:ec:b6:1a:
a6:d4:a2:6f:b5:ea:0a:f5:f7:cf:f5:da:cd:cd:f7:
8e:31:9c:25:e9:ab:74:03:8f:20:61:90:8d:f1:26:
45:9a:94:9a:08:18:a6:0c:49:78:da:16:39:da:9d:
69:20:1e:6b:c4:ca:90:d5:41:93:05:0c:dc:03:4b:
24:b3:72:3b:6e:8b:ec:5e:20:d6:0c:06:e8:5a:4a:
ff:27:9c:2a:77:02:f8:d0:9c:6c:aa:bb:b3:aa:e1:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:BE:A3:D4:68:76:83:C2:39:31:96:80:9B:BB:78:CF:12:A6:D2
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:29:59:00:18:d8:a7:68:21:f3:bf:bd:10:f7:7e:bc:3d:
fd:8e:c2:cb:c9:53:d2:fa:fc:28:08:bd:46:b9:32:ff:5f:63:
e1:c1:6e:5a:c2:56:95:45:1e:ce:d6:38:a5:75:e6:d5:a7:a1:
e1:90:8f:1d:35:03:78:f8:8c:c3:a1:1c:4c:b6:d5:f1:3d:0a:
eb:ef:23:fb:c3:c4:87:e2:bf:c4:9e:54:6b:da:3a:3d:e1:7a:
0c:5d:15:29:e7:6e:2b:12:ea:d3:b0:a7:05:46:41:13:85:2e:
34:c6:f0:25:a5:2f:7e:de:07:e6:b1:ec:ae:97:c1:b5:44:98:
db:a6:d6:0d:90:bb:8b:e8:55:15:79:73:50:f3:39:d4:a1:6e:
1d:29:a1:c7:4e:bf:25:5f:11:1b:ba:17:f5:c3:72:f6:77:46:
d8:45:9f:7a:88:3b:82:92:5c:aa:2f:fd:d7:10:d3:7d:26:94:
d4:93:e0:51:7b:73:bc:75:7a:c6:9a:c9:62:c3:0b:15:f6:db:
2a:2a:1d:b6:51:9a:02:7a:11:14:a5:b9:d0:4d:46:d8:d6:25:
b7:c8:58:1f:45:d4:8e:f6:a3:a2:34:c5:56:0c:33:58:ef:f1:
67:3b:d7:68:c5:ac:1a:33:55:e8:f6:8b:5d:a8:83:17:80:6c:
1d:e3:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:00 2025 by rpki-client