Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: zdqo8w96RJBEMLNutwo2zEP9Ab/JNA1a855bGhdCGYU=
Subject key identifier: 1A:F0:A6:4B:57:67:B7:67:7F:EB:77:71:97:1F:F8:86:FF:AF:93:F7
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 019654257DB3E62031AF914C728776423887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 17:01:05 +0000
Manifest this update: Sun 20 Apr 2025 17:01:05 +0000
Manifest next update: Mon 21 Apr 2025 17:01:05 +0000
Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: EJAfs9HphY2A2yMBLWHdZHAZgM6B2/5vTsTiz7UNz5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:7d:b3:e6:20:31:af:91:4c:72:87:76:42:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Apr 20 17:01:05 2025 GMT
Not After : Apr 21 17:01:05 2025 GMT
Subject: CN=1af0a64b5767b7677feb7771971ff886ffaf93f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:0b:0f:1c:76:e8:c6:76:21:15:c7:1f:ed:
45:67:df:4c:3d:d0:7d:3e:75:20:c7:0c:9e:bb:df:
3d:f1:84:52:52:55:47:09:0d:99:36:22:ae:8f:c0:
89:3c:06:8e:cc:6b:86:f7:ab:ce:30:2a:bf:36:f8:
1f:4e:84:cd:dd:3b:8b:f7:16:0b:d2:e7:12:b8:63:
d7:01:ee:20:0e:db:5d:67:80:3d:f0:52:d5:53:c5:
c6:6e:20:47:08:91:bb:37:22:96:ce:15:b5:e2:98:
17:1e:ec:6a:37:14:6b:30:43:79:5e:9b:f0:52:68:
9e:eb:a9:e3:cc:fc:ad:08:9a:c2:d9:fb:53:04:98:
05:f0:12:aa:58:af:cd:a4:e5:eb:26:ab:0f:5c:e4:
86:62:6a:0a:26:05:7a:85:37:e7:93:67:91:f8:00:
df:da:1d:d0:75:03:6b:2b:22:84:ab:6c:a3:46:fd:
94:54:a0:1b:4d:15:75:a8:ba:86:f8:6f:4e:96:56:
a9:48:9c:9b:b8:25:11:c5:19:d2:18:83:68:d7:e5:
18:81:47:b8:c8:43:bd:fd:31:0b:0c:b7:82:71:ad:
98:31:73:c3:61:14:24:cb:c5:63:fc:f8:57:ba:14:
99:8c:4a:b7:75:40:c2:5c:4e:e8:2b:a0:88:b3:ef:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:A6:4B:57:67:B7:67:7F:EB:77:71:97:1F:F8:86:FF:AF:93:F7
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:a5:92:d4:f4:2f:59:51:d3:7a:3d:bc:a9:b0:ab:a0:07:
56:8b:46:34:a9:e4:c1:1e:7e:c8:22:4d:d7:10:4a:8a:82:87:
40:83:8a:f5:d3:76:26:d7:95:a7:e2:0d:46:e7:ae:7d:b7:08:
55:1e:ae:32:b8:1a:17:10:2c:d7:33:1f:33:da:a0:33:30:5e:
d5:0f:40:b2:ef:ce:45:61:e8:40:9e:56:30:71:19:dd:bc:73:
a0:4e:26:9d:f5:b7:8c:16:e5:e9:49:4a:55:8a:f7:53:6f:c5:
dc:21:05:87:73:8b:27:13:82:ad:52:bd:32:77:e0:2c:ce:23:
d8:aa:f5:b3:77:20:0e:11:4f:34:a4:f9:2e:22:6b:6b:22:16:
27:f1:f6:00:91:e2:76:cf:6c:5e:71:86:94:f8:06:21:a3:ef:
65:2e:eb:c1:2f:9f:80:2a:04:36:7d:a2:16:ef:9e:ec:1a:a2:
51:58:9b:b9:a8:52:da:af:5a:96:08:67:72:38:67:32:9e:b6:
af:30:8e:ea:29:f1:ee:b2:d3:1e:8c:8d:35:f6:8d:a2:61:4a:
4d:72:19:f9:1b:67:18:63:c0:51:cc:6e:c9:55:e3:93:99:1e:
2c:c1:ef:80:c5:b4:62:99:1d:8c:77:e3:4e:17:7e:54:87:3a:
a5:3b:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:16 2025 by rpki-client