Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: D8rEzKHP3yPpYx4mH+52pnsJOQyRCn2nmB25oojLOpo=
Subject key identifier: 75:7E:96:A7:CA:5A:E7:30:A9:BD:53:30:AF:03:1D:2A:51:5A:03:3D
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 0196586FF4571369AD15BDFEE6392FDE777D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 13:00:54 +0000
Manifest this update: Mon 21 Apr 2025 13:00:54 +0000
Manifest next update: Tue 22 Apr 2025 13:00:54 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: g7uRF6SAxC3XUXuwnW1pFZRbZvdlTJehllN+6Xfydds=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:f4:57:13:69:ad:15:bd:fe:e6:39:2f:de:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Apr 21 13:00:54 2025 GMT
Not After : Apr 22 13:00:54 2025 GMT
Subject: CN=757e96a7ca5ae730a9bd5330af031d2a515a033d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:01:f3:d3:5b:d5:5e:00:73:a2:c2:89:94:
13:89:e1:52:23:27:c0:19:36:a9:58:a7:5b:bd:2e:
09:35:2b:a1:00:cb:f5:eb:aa:e2:77:d2:5e:68:51:
5d:3b:be:8f:33:ba:aa:ca:6e:0a:d0:60:ef:5b:1f:
fd:70:d9:3f:44:0a:4d:b7:d8:b8:34:21:b9:40:d3:
11:22:7c:6d:a8:18:99:ae:f8:70:0d:da:74:71:ae:
da:c1:21:2c:80:d6:68:a4:1d:30:44:c8:ad:29:34:
c4:b6:2d:88:48:18:16:1a:e8:16:f6:ed:bb:c4:57:
18:f5:4a:58:cb:35:74:01:5f:b3:f1:a9:b9:d1:5d:
a0:de:44:05:0a:27:64:92:13:50:c0:a2:17:f0:c4:
8b:2c:8f:01:11:f3:ae:f4:cf:bb:fe:df:0d:fa:50:
51:0d:24:2a:30:b2:2e:f3:e9:d8:50:11:34:d5:c9:
f8:92:fe:cb:d0:90:54:83:e8:a4:8e:a0:64:5b:20:
5c:ca:63:04:49:29:c4:3b:39:6e:13:61:5e:1b:99:
8b:66:fd:cd:60:c2:08:e4:f3:1a:0a:70:6d:12:e8:
c9:a9:e3:f0:27:7f:9e:3d:d2:a6:96:13:22:00:1d:
57:c1:32:2f:40:0c:b3:54:7c:2d:90:29:da:cf:47:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:96:A7:CA:5A:E7:30:A9:BD:53:30:AF:03:1D:2A:51:5A:03:3D
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:eb:d8:70:e0:15:ac:ca:17:b6:e0:40:c1:7f:0b:42:f3:3c:
57:e7:05:33:e0:35:2e:0e:9d:2d:15:4f:f9:6a:d1:c0:f2:43:
3c:a4:ca:72:35:b0:b8:51:14:d8:55:47:ce:ee:fd:6d:8a:3d:
04:96:a5:58:3f:8f:70:2b:41:8a:86:c4:4d:31:6b:8e:e7:04:
51:83:29:16:fa:a7:31:92:46:e8:ae:24:a6:c4:bf:0a:43:7a:
2a:db:37:c4:59:32:95:45:52:cb:5c:ac:de:4d:da:7c:71:2c:
c6:9e:05:78:db:2e:22:bc:ff:8f:5e:9c:ad:09:8a:b9:38:dd:
f2:3d:28:cc:d8:1a:d0:57:2e:c1:b8:51:ad:0b:7e:6b:d5:7b:
9f:e8:e5:fd:6b:2d:42:b2:f8:63:d7:1c:6c:94:e6:fe:e6:7d:
52:23:45:4b:84:57:ea:ce:7b:ca:6e:d3:28:8d:b2:ae:7e:af:
d2:74:aa:f8:55:81:74:1c:0b:21:e9:1a:97:9a:b0:1b:d6:0e:
31:2c:32:e5:c4:ac:d6:d0:c1:9e:1c:68:1f:e8:d4:cc:e7:e6:
ed:61:c7:f3:92:ed:7f:83:05:1b:30:40:8c:4c:d4:c8:4a:c8:
3c:1a:58:c1:f5:12:63:09:e0:40:5c:6d:e6:f5:a2:c4:f0:10:
64:6d:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:33 2025 by rpki-client