Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: jqM0JKy0qYxIt4cWjXg6XlbvxhRlW625Ug7ZSRdo9P4=
Subject key identifier: 1A:3C:1F:CA:22:21:68:06:B2:1B:F5:91:44:43:E1:A2:67:93:01:98
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0196594B5F1A78C2B17C97D11FC17AFBA716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 17:00:33 +0000
Manifest this update: Mon 21 Apr 2025 17:00:33 +0000
Manifest next update: Tue 22 Apr 2025 17:00:33 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: R+Opp0unhNdHnMxb1H4l0ADXbanpmJYWg97x/lRmkb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:5f:1a:78:c2:b1:7c:97:d1:1f:c1:7a:fb:a7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Apr 21 17:00:33 2025 GMT
Not After : Apr 22 17:00:33 2025 GMT
Subject: CN=1a3c1fca22216806b21bf5914443e1a267930198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:90:b8:60:f2:48:02:e1:4a:0b:52:41:c8:
21:54:5d:1b:e5:37:68:ab:aa:47:ce:ed:5b:6d:01:
75:0f:c2:c4:1e:b9:54:99:7a:fb:52:e1:43:22:99:
98:be:9f:1f:18:84:2a:c4:8e:09:1e:7d:05:69:dc:
96:2a:b3:08:78:3a:0d:ad:ae:fb:b1:2b:f0:a3:77:
e6:36:07:50:4c:70:66:7a:e6:30:05:ff:4a:53:32:
e6:7a:e5:08:62:93:e9:b0:5d:0c:97:59:1b:34:e3:
ea:64:37:97:a1:3c:1b:32:54:f4:fc:74:d9:df:8f:
61:98:44:e0:fe:28:b4:c8:a8:e7:f5:cb:a8:29:39:
22:69:97:f9:c4:fe:03:cd:2b:95:6a:7e:cc:51:12:
0d:b6:00:0b:5b:33:3c:e5:11:81:17:b1:91:0b:04:
c1:d8:38:af:68:e3:4f:f0:4e:2a:f1:fb:51:eb:1d:
0d:ba:60:5d:9e:5a:52:7b:87:07:22:c6:57:a9:7e:
8e:75:ff:6a:8c:61:7a:a5:e7:db:61:81:bc:b8:f1:
55:23:cf:b8:2f:01:cd:1d:9b:9c:75:11:9c:c6:03:
ba:ba:f4:dc:e7:76:ca:37:1d:8e:73:26:3a:7d:01:
1b:61:48:fa:07:8a:61:91:22:85:a2:d1:ec:11:7b:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3C:1F:CA:22:21:68:06:B2:1B:F5:91:44:43:E1:A2:67:93:01:98
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e8:fb:5a:e4:4e:f6:3e:73:e3:20:52:b0:7e:a6:dc:a5:b3:
6e:44:25:1b:d8:84:62:5c:bb:a1:f4:23:87:fb:08:61:d8:8e:
64:23:1a:62:39:aa:57:bc:5e:68:57:1c:5d:17:6f:5b:12:01:
9c:57:b7:ac:79:bb:c1:4b:d3:fb:bb:ac:02:56:b8:49:f4:b8:
ea:1b:2d:ec:46:23:32:4b:66:c0:b5:55:7f:23:4a:99:68:17:
6d:4b:bc:d0:3f:a2:a1:fb:3a:be:cc:33:a4:6e:72:d0:50:3e:
eb:9a:7a:4c:f4:8e:eb:f8:01:8f:bb:b8:ee:58:b5:7c:bc:c9:
c4:5d:37:4f:4d:1d:3a:23:98:45:9f:b0:a8:b6:56:56:59:58:
17:19:e0:26:c0:35:d7:72:fa:17:16:4d:62:ff:6c:c2:b6:43:
eb:e2:14:fc:0c:b7:4b:0b:24:a9:20:ce:83:aa:83:60:12:44:
65:f0:b6:3e:24:6e:20:9d:74:ba:1f:ef:0a:51:41:f1:f2:18:
9f:57:ab:a1:20:9f:d0:58:69:f5:77:51:a3:45:10:41:c6:02:
91:8a:49:d7:ae:a2:87:5a:b9:25:fe:99:de:f8:b6:d0:23:fe:
32:1c:4d:ea:53:32:c8:9e:55:c7:14:88:f5:e0:22:76:2e:54:
26:44:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:32 2025 by rpki-client