Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File: GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier: MrpR2745f/J6Ti1q5fZ4U90Pk/qJRv6V7Vv4DP8ksGs=
Subject key identifier: C7:A4:A4:A3:51:A9:55:3B:71:89:23:D1:F1:59:F8:6E:46:72:E2:EF
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 019629E03581A9DBDF7B24ED9439B5C67A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number: 1479
Signing time: Sat 12 Apr 2025 12:01:21 +0000
Manifest this update: Sat 12 Apr 2025 12:01:21 +0000
Manifest next update: Sun 13 Apr 2025 12:01:21 +0000
Files and hashes: 1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: 6cvYgNNnFXeH0sJociqEBQGWsF39rTU9rG925ST1gTA=)
2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:35:81:a9:db:df:7b:24:ed:94:39:b5:c6:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Apr 12 12:01:21 2025 GMT
Not After : Apr 13 12:01:21 2025 GMT
Subject: CN=c7a4a4a351a9553b718923d1f159f86e4672e2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:72:7b:c2:d4:e3:51:1b:74:9f:9f:bc:25:
9a:52:bd:d3:ed:06:e7:c1:86:4e:f4:4d:54:aa:89:
80:20:c1:8f:2f:7c:b8:f8:ca:e9:35:29:15:94:64:
f7:dd:e4:77:88:53:4f:30:24:a7:f9:d1:2b:fe:0e:
a5:86:72:93:60:78:e3:9d:00:18:14:ff:c2:ac:0b:
44:1e:30:03:47:22:60:20:71:7f:b6:0f:0c:9f:d8:
4b:96:a0:30:d1:f9:37:b3:77:7b:7a:42:ef:a8:bf:
0b:d3:c5:3a:cb:bd:08:85:93:8f:82:33:38:dc:9b:
47:c5:c9:db:10:62:45:14:db:4e:c2:1d:8b:ba:8b:
41:91:90:05:dc:7e:26:f2:8a:31:e1:67:ef:cf:a0:
35:73:6e:9a:77:59:88:3c:75:2a:95:d0:89:c4:b3:
79:4f:f6:8e:b5:18:c4:f4:a0:88:78:08:b5:6c:0a:
44:65:fa:26:97:d8:b3:62:82:c7:08:5a:b3:dc:45:
21:23:07:b7:50:1f:64:b4:26:07:a0:63:36:5a:9f:
ad:7b:fc:30:9e:a7:76:c1:ba:a5:76:f9:ef:c2:e7:
4e:07:66:b5:3f:59:8e:94:a8:c1:db:bc:28:07:a6:
40:ab:6e:87:37:e3:6b:43:8e:b4:6d:fa:9e:1f:5e:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:A4:A3:51:A9:55:3B:71:89:23:D1:F1:59:F8:6E:46:72:E2:EF
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:18:e4:2a:69:1e:81:a6:b2:dc:e5:4d:a1:71:b9:86:28:f8:
57:32:d2:7d:87:00:66:53:4b:7f:5f:1a:6e:74:0a:35:23:f8:
f2:65:32:67:22:d9:fe:85:01:ef:d0:95:d5:8f:b7:97:54:72:
59:d3:05:d5:f7:75:c2:f1:17:f1:f1:4e:5a:dd:52:54:7d:31:
05:5d:3a:d7:08:2d:b8:88:11:4f:84:93:e0:ce:85:97:ff:2c:
be:a9:25:81:c9:24:53:4f:c8:e0:61:d1:57:42:e8:82:8b:5d:
5a:fc:b8:a0:42:18:9f:16:ad:4d:30:0e:78:d6:3c:54:29:a8:
ad:24:4e:c9:ed:fe:82:d7:3a:d9:fc:33:26:ef:ff:53:4f:10:
bf:80:3b:d6:62:2b:5d:5a:d7:f1:66:38:19:db:17:21:aa:9e:
af:7a:22:9f:2c:bf:da:1c:1f:c9:f7:65:38:ea:5a:25:2c:83:
d4:c5:34:5d:f6:d9:cc:a4:57:c6:cb:49:eb:da:54:0c:37:83:
b9:1b:a9:8f:e7:47:be:fc:c3:78:c3:7c:73:7e:24:25:61:6c:
ec:af:e7:20:54:b8:e5:2f:f0:b7:c4:02:d3:e5:ca:ae:5e:29:
96:69:ba:ff:5e:dc:5f:72:ec:8d:77:f2:b6:8c:00:c4:d8:2d:
93:18:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:56:38 2025 by rpki-client