Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: BHi3w/jXSTIGVfPkFnpm44dphbLM0nTvtRXPMIcXf1c=
Subject key identifier: 74:B6:4E:8A:05:D2:2F:40:AE:EE:0A:B5:05:E7:C0:C6:6A:D9:DD:C3
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0196458D79A91E27D188902F076509A046D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 21:00:21 +0000
Manifest this update: Thu 17 Apr 2025 21:00:21 +0000
Manifest next update: Fri 18 Apr 2025 21:00:21 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: yUd733YmtjWoDxWhVl007b3witOj99ADKenXeEoBb7Y=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:79:a9:1e:27:d1:88:90:2f:07:65:09:a0:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Apr 17 21:00:21 2025 GMT
Not After : Apr 18 21:00:21 2025 GMT
Subject: CN=74b64e8a05d22f40aeee0ab505e7c0c66ad9ddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:43:5c:58:25:51:94:81:3c:55:26:1f:fe:58:
5b:21:9e:72:d3:c5:a7:34:29:a2:3e:9a:90:ef:87:
30:41:ab:70:0f:b9:8a:48:6f:f8:fa:9c:1a:da:f5:
c0:30:dc:b2:bf:06:82:52:02:78:f2:48:a7:2a:64:
c0:bc:4e:3b:9f:0c:e6:7c:0f:6e:f6:27:75:07:9f:
d6:9e:7c:0c:33:b0:01:bd:f7:7d:c5:96:25:7f:fb:
7e:3b:e9:00:62:54:28:04:1c:f0:09:07:8d:af:f7:
f3:64:9a:6d:bd:7c:84:9a:34:c2:af:40:5c:bb:78:
5e:80:86:02:4b:0f:fa:48:03:9a:97:cb:04:8d:29:
05:a7:c6:07:93:fb:01:ce:30:66:35:d9:f1:c1:ee:
76:f9:e4:c1:13:ef:70:96:40:01:7e:10:02:f3:80:
33:28:b8:ff:b9:2e:7b:cf:eb:c1:cd:63:ed:6f:7d:
5f:2c:5b:94:ae:92:f2:2c:01:b8:35:9b:f7:b1:a7:
e7:f7:42:59:e6:3e:1f:f8:10:44:ee:4d:84:a4:9f:
e2:2b:20:fd:22:48:70:d0:c1:2e:a6:dd:a4:91:e5:
a6:04:b3:e1:ed:b7:4a:2a:cd:ff:1f:a1:8e:05:2c:
03:f3:93:ed:21:33:06:9a:c4:0c:55:ad:4a:f7:3a:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:4E:8A:05:D2:2F:40:AE:EE:0A:B5:05:E7:C0:C6:6A:D9:DD:C3
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:83:62:e2:50:9e:c1:08:e7:20:29:8a:d1:fc:42:51:6b:
f0:00:b8:58:06:07:2e:73:20:bc:01:43:4c:a9:28:ad:f6:8a:
36:9c:6d:60:ae:f9:7e:91:34:ef:2f:b2:27:bd:19:6c:d1:73:
9d:57:32:67:4d:b3:2c:3f:a2:08:09:42:49:d2:cb:24:8d:1e:
1d:52:80:73:1f:46:44:b5:fc:14:3e:dc:3e:ba:ec:46:9f:f1:
28:4f:36:89:16:21:9f:69:b1:7f:9d:32:32:b8:6c:8e:b7:7c:
90:f6:1b:a9:a4:76:b0:a5:ca:1f:f4:42:09:ad:16:46:36:c7:
e4:f9:91:f5:8c:26:ea:05:e6:18:c4:b5:b2:9d:08:e1:33:47:
cb:31:6a:4f:3d:81:28:44:9e:86:f4:42:9d:71:fa:67:97:bf:
83:cd:5b:e3:14:3a:4f:c8:1b:17:22:68:74:8a:e4:00:a3:d3:
ab:a3:3d:fb:25:a1:f1:52:5c:61:4d:7f:8e:05:6c:12:4d:b8:
55:31:63:bc:89:a6:9e:68:53:49:71:f2:ca:56:97:25:8a:5f:
36:41:7f:6e:df:29:e0:0d:a5:3d:21:33:5f:7d:0d:ea:60:dd:
5d:87:a7:f3:30:35:55:d3:59:d8:07:ab:5e:f0:6e:3e:98:fe:
44:62:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:50 2025 by rpki-client