Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier: P1eRo2iU1K+wC9pcjmSNx96muMYFBlmHxIn2h8WD4IA=
Subject key identifier: 96:E4:1D:2C:B9:2C:2D:6B:4E:69:E1:22:D4:4C:81:C9:31:EF:58:0F
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial: 019655DCC799931685233A651E6665A87AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 01:00:54 +0000
Manifest this update: Mon 21 Apr 2025 01:00:54 +0000
Manifest next update: Tue 22 Apr 2025 01:00:54 +0000
Files and hashes: 1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=)
2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: pHR0XS0Vte4pwI3G0jBFbrm9hNmbS5kHm3rusSrQ0j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c7:99:93:16:85:23:3a:65:1e:66:65:a8:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Validity
Not Before: Apr 21 01:00:54 2025 GMT
Not After : Apr 22 01:00:54 2025 GMT
Subject: CN=96e41d2cb92c2d6b4e69e122d44c81c931ef580f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:6c:c0:f8:c6:f5:dc:87:25:2b:69:7b:62:
31:96:9e:70:33:ad:e3:0d:45:ae:48:62:a6:4a:a5:
a0:71:8e:41:83:8b:57:23:b5:17:31:29:2b:56:64:
3c:66:30:09:d2:77:79:48:16:64:7c:b0:12:48:0a:
79:32:33:ad:5b:a9:55:d1:03:81:16:83:10:af:a1:
9a:b8:36:e7:fb:30:f0:17:62:45:90:b2:51:30:96:
05:50:08:18:a3:32:83:b6:8e:a4:4b:7d:ee:2b:48:
08:c6:15:45:ca:82:b8:a4:cb:36:a9:fd:96:a6:f5:
84:a9:ca:aa:74:84:14:6b:f0:0f:53:82:2c:90:8e:
c5:b7:15:a2:cc:dd:89:45:dc:35:31:ee:78:b4:db:
b3:22:26:80:80:b9:4a:a1:7a:00:99:1b:55:f1:cd:
94:d0:88:66:57:d7:43:6a:c8:62:75:48:6a:d3:b9:
c4:4d:bd:a0:1f:b4:ad:f2:81:1a:ba:ad:f2:b1:96:
39:02:cc:1e:7c:d2:c9:6d:4b:3f:8d:6c:86:e8:27:
5f:34:e0:e6:55:9c:24:ee:07:f6:a0:82:e0:08:8f:
87:98:e4:ac:78:db:2c:f9:70:55:aa:a3:7d:10:8a:
36:34:71:09:7a:64:31:fd:7c:8d:0d:55:86:8a:27:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:1D:2C:B9:2C:2D:6B:4E:69:E1:22:D4:4C:81:C9:31:EF:58:0F
X509v3 Authority Key Identifier:
keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fd:45:c7:d3:6c:8a:1f:68:59:f9:fa:32:41:dc:88:37:b8:
a1:cf:69:a0:be:2d:96:5e:ff:8e:37:72:25:6d:8b:72:c5:f0:
46:13:83:98:bd:b6:05:32:97:80:67:0b:5e:29:0e:a8:25:00:
10:f9:a0:ac:bb:06:a8:e5:38:24:93:ce:2b:ea:66:af:3b:fb:
12:c4:48:e8:df:98:4d:26:94:17:b4:f5:c4:e0:c8:86:a4:ad:
83:df:6c:79:5e:eb:f4:e4:57:35:a6:fb:75:46:b8:46:88:58:
61:e5:19:15:29:ea:00:9a:c7:f6:ee:d2:c0:c2:21:8a:32:9f:
f7:28:44:1d:02:f3:4f:6e:0b:8d:2a:27:39:37:3f:ff:98:1e:
43:ca:57:ac:1f:aa:f9:b3:f4:97:dc:9e:e8:41:00:4e:1a:23:
88:21:04:55:c7:ce:81:c3:d9:4a:44:2e:14:94:c3:b1:c0:53:
7b:23:4c:24:4d:5d:71:5b:ab:be:60:56:62:bb:50:be:29:d6:
14:f3:82:3d:23:22:b1:dc:7d:ee:e6:0a:e5:ba:b7:17:e4:14:
49:87:18:9f:3c:8c:d8:71:2c:a2:a7:59:f9:b4:47:9f:83:74:
94:96:d1:de:0b:89:17:56:26:e9:43:21:47:aa:d4:ed:87:e3:
2e:13:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:56 2025 by rpki-client