Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File: GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier: +XkDuVz0VNJCErq9A0sDfh0B/aP/kHY8ZvbvvWGR8lc=
Subject key identifier: BB:08:AE:D2:BC:58:41:D5:EA:53:33:0F:21:D0:7C:84:12:3D:EC:23
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 019652DB4FB379F09297DE78857ADD4F67E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number: 0881
Signing time: Sun 20 Apr 2025 11:00:26 +0000
Manifest this update: Sun 20 Apr 2025 11:00:26 +0000
Manifest next update: Mon 21 Apr 2025 11:00:26 +0000
Files and hashes: 1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: IGLUc5B7wQ6nDpo7SP1irkAYpjDr0PTh3eauKQpOuFk=)
2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:4f:b3:79:f0:92:97:de:78:85:7a:dd:4f:67:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Apr 20 11:00:26 2025 GMT
Not After : Apr 21 11:00:26 2025 GMT
Subject: CN=bb08aed2bc5841d5ea53330f21d07c84123dec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:8b:58:8f:48:ba:94:85:1d:c9:18:45:13:
91:02:8f:ca:01:0a:ef:b0:71:d4:af:b8:7e:c6:3a:
8b:3e:9c:c1:d9:32:3b:13:63:d4:31:8d:76:3e:5f:
ff:06:30:42:dc:c8:e0:3a:52:7f:46:73:bd:6d:3a:
a8:15:78:20:a6:21:9b:36:dc:30:9c:46:3d:d5:06:
71:84:35:5d:15:35:18:5f:57:aa:89:c1:e0:7d:80:
7e:e3:63:65:4e:b7:8f:6c:ce:49:82:07:65:21:aa:
d2:cb:6e:5c:60:bb:74:89:15:5c:7b:5a:9b:04:6e:
a5:87:a2:4a:55:dc:ab:fb:74:8e:17:c0:ae:1f:3f:
c2:57:23:f0:e7:dd:6b:c6:7e:ca:50:96:bb:19:24:
84:85:3b:c5:02:5f:a4:0f:cd:01:d3:58:b3:18:59:
b8:37:0e:b8:2d:3a:b6:b1:92:14:13:de:35:49:ce:
8e:21:06:d0:df:d4:6e:c4:47:28:c7:08:5b:9d:09:
b2:93:6a:6e:79:ed:dc:eb:55:e9:8c:ba:dc:d4:0a:
37:89:81:0a:c4:e7:72:8d:7f:68:b2:7d:56:7d:24:
ca:e5:94:d1:84:f8:89:6f:cd:97:99:dc:41:9a:54:
4d:1a:27:61:ca:32:10:cc:e3:e1:99:3f:6b:24:53:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:AE:D2:BC:58:41:D5:EA:53:33:0F:21:D0:7C:84:12:3D:EC:23
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:6c:ef:1f:aa:dc:97:b8:3a:b8:f2:d1:2b:27:e9:c0:3b:
c9:12:e6:f5:23:ea:31:de:a4:01:13:4c:e0:78:6f:21:d1:c0:
7e:8e:a8:fe:10:fb:0a:16:a2:47:32:9d:1f:83:15:c9:29:ee:
f0:94:a9:41:28:25:f0:8a:60:ba:9f:fe:35:eb:e3:44:4a:38:
dd:23:9b:ba:96:5a:2c:13:29:9e:08:ec:68:05:96:04:2f:f3:
79:c2:db:32:27:a6:65:0c:c4:4d:e1:82:98:30:af:cf:5e:4f:
30:d0:86:8f:b8:19:1d:22:37:db:2a:e4:f0:ed:e9:b1:1a:2c:
ac:2b:3e:68:24:c7:aa:9e:ef:8f:ff:d1:73:f5:08:bc:90:bb:
3a:df:92:b9:a5:cf:91:ab:37:23:67:8b:01:b2:c4:63:4e:7e:
25:28:88:85:08:4d:82:1f:a1:46:bf:23:d5:f7:7f:7d:d8:a1:
b2:5a:27:94:09:ad:7e:90:fb:76:88:17:f3:cd:10:2a:78:a2:
07:11:a7:0c:35:71:f6:c7:68:e5:ed:34:d9:ca:e0:89:46:27:
49:4c:b3:a4:cb:90:87:95:55:cf:7e:87:a5:84:a5:ef:a5:f9:
2e:9d:ea:c7:27:48:bb:af:8e:dc:13:3c:60:d0:0f:13:38:83:
f7:50:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:20 2025 by rpki-client