Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File: GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier: aHFaP08BX//NwiAyVPi6M4Erb5/GIDzq09O0dDDFWMs=
Subject key identifier: 8F:D9:DB:EB:00:DD:D7:62:23:A1:DB:FE:ED:7B:76:F4:D1:2E:97:7F
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 01962D18E3855B5808CDA18ADF43479810CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number: 08EA
Signing time: Sun 13 Apr 2025 03:02:07 +0000
Manifest this update: Sun 13 Apr 2025 03:02:07 +0000
Manifest next update: Mon 14 Apr 2025 03:02:07 +0000
Files and hashes: 1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: 5uXwwSC9ZZA4+SaE0IBp7uYvqFYaPNA8nF56xQf0ovo=)
2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:18:e3:85:5b:58:08:cd:a1:8a:df:43:47:98:10:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: Apr 13 03:02:07 2025 GMT
Not After : Apr 14 03:02:07 2025 GMT
Subject: CN=8fd9dbeb00ddd76223a1dbfeed7b76f4d12e977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:89:ef:98:09:1c:43:02:4f:9e:78:6d:e6:
27:1e:9b:76:54:b6:83:c7:7a:3f:97:3f:85:88:ba:
da:f3:6c:5b:24:bc:3f:32:4c:12:3c:eb:ec:e4:1d:
dd:6d:62:c2:f9:ee:fe:3d:4c:0f:aa:8a:71:55:37:
0c:12:9b:63:ea:80:b5:ab:b1:8a:de:a2:34:24:24:
39:e1:eb:2c:60:c4:dd:6d:6c:e4:68:5f:1e:87:42:
db:3d:7c:9e:7c:1f:93:9b:15:e4:d0:14:6c:af:c6:
80:4d:bb:a3:22:cd:33:3b:0b:24:f0:74:a4:7c:bf:
21:b4:b2:45:94:6a:e5:4d:ca:1c:0a:70:ee:7c:26:
e4:a7:59:9f:94:f6:e4:d7:bf:7f:4a:90:ba:e0:c4:
ea:81:ea:28:38:3b:e8:a7:b3:92:97:2a:d0:f3:34:
36:49:ba:6b:3b:12:07:ae:43:8d:98:d3:9d:c4:f4:
f3:00:8c:94:29:c8:ca:62:ee:1a:28:15:5d:b4:95:
26:91:40:12:f3:6a:a1:20:84:90:5a:19:f5:e0:da:
9f:e0:00:a4:6a:e2:a1:23:3b:be:a0:47:bf:a5:3f:
19:c0:cd:4c:bc:b1:49:c5:91:5b:fa:2d:1a:ef:00:
15:50:f6:ed:09:b5:91:ac:74:99:1d:1d:3d:97:97:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:DB:EB:00:DD:D7:62:23:A1:DB:FE:ED:7B:76:F4:D1:2E:97:7F
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:54:4e:bf:88:6b:32:aa:d0:b1:29:6a:cc:b2:a9:46:36:
81:26:b7:b5:20:aa:ef:6c:8c:ed:9d:1c:c0:e0:e9:7c:85:eb:
53:f7:0f:d0:81:eb:07:b4:e7:32:09:b1:d6:ab:20:45:54:c6:
5c:c2:a4:2f:d3:c4:18:25:cb:e6:5e:c5:f3:15:b2:fd:f3:9c:
b2:10:3e:72:a8:0b:3a:b1:ed:b1:52:9d:67:1e:65:de:fb:18:
2d:2d:ac:5a:56:b6:12:a1:82:40:90:6c:c9:53:f8:f5:72:3f:
e6:cd:d9:cd:13:8c:b7:bd:f4:87:a7:68:0d:7a:b1:7d:19:bc:
10:66:67:63:45:90:cc:ed:73:77:b2:ed:f8:d7:c3:9f:cf:cb:
9f:6e:2d:c8:87:e3:1a:60:4b:86:cc:4e:30:54:db:c4:00:44:
15:05:4f:ab:ed:f5:5a:d4:e4:76:a6:30:43:10:a5:c1:61:00:
32:72:1c:52:d6:6d:c8:a0:c2:2a:f7:ce:6f:d2:a9:7f:78:ed:
3d:fa:a8:46:09:ce:10:5c:f1:70:b8:3f:08:60:73:f4:3c:9d:
dc:7c:98:c5:6a:bc:c3:89:30:4e:f3:4c:35:44:ed:7f:4c:bf:
ff:71:dd:fd:c8:e0:e5:12:99:f5:9d:b8:5a:ae:7a:48:fb:ac:
12:68:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:26:36 2025 by rpki-client