Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: AQP7bZYo+yZeV5mfUrV401CfuMMAhOBTbMM11T4acdw=
Subject key identifier: 29:F7:D7:89:CF:41:85:F6:7C:AC:54:4E:65:92:34:2C:BB:9F:73:AA
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019639F7024DFEDC8301927A4EC9BE6E45A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 15:00:11 +0000
Manifest this update: Tue 15 Apr 2025 15:00:11 +0000
Manifest next update: Wed 16 Apr 2025 15:00:11 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: cW8tuPe2fC7Vr8Jf+PQslehNxoIzmbg+pVImBT7VBc8=)
2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:f7:02:4d:fe:dc:83:01:92:7a:4e:c9:be:6e:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Apr 15 15:00:11 2025 GMT
Not After : Apr 16 15:00:11 2025 GMT
Subject: CN=29f7d789cf4185f67cac544e6592342cbb9f73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:2b:dc:91:7d:da:95:0a:33:0e:68:fd:f8:
62:15:b0:da:83:a5:69:a2:c5:9f:eb:dc:05:be:05:
fc:a3:f5:e3:54:bc:7e:4a:6e:6c:44:05:20:2d:94:
05:f3:60:47:aa:2d:37:8e:de:86:56:6b:a4:44:11:
f9:ef:18:be:bf:86:ab:2f:cf:97:cc:12:5f:b0:5a:
2a:35:d6:d7:56:37:3c:79:24:c4:50:e1:25:ff:6c:
e9:2a:6a:c5:08:8d:0f:4d:d1:29:07:e9:d9:5d:64:
32:0d:81:1d:17:c0:12:77:b2:79:78:6a:be:f6:37:
e2:ed:57:d0:e5:1d:7f:42:7a:39:05:97:7a:27:92:
3a:e9:31:13:73:0b:3b:36:92:3a:1d:9d:43:3c:b1:
69:5f:b5:e1:0f:dc:b9:71:0d:ab:aa:68:9e:46:7c:
51:39:c8:c0:0e:2d:16:c3:d4:89:6d:90:1b:60:2c:
a8:1c:6b:4f:06:51:1a:ce:68:e5:95:4b:b4:91:a5:
44:6c:a5:e4:79:4c:72:86:ea:70:ec:a5:81:99:c1:
11:8d:95:9e:7a:c1:9c:b0:59:00:49:be:e5:a3:ad:
1e:2a:5d:61:c2:ea:8a:4a:e7:dd:4c:86:3b:d0:44:
6b:58:76:1b:73:a2:84:49:35:d7:2c:33:7d:9d:3f:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:D7:89:CF:41:85:F6:7C:AC:54:4E:65:92:34:2C:BB:9F:73:AA
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:33:91:61:02:13:ab:bf:df:7c:1e:f8:52:d2:14:3f:3e:61:
46:ce:81:69:fe:83:57:bf:1a:9d:05:b7:33:73:0e:56:7a:a6:
de:06:60:74:80:c2:03:f9:2d:36:c5:50:3d:68:c9:b2:06:72:
32:5b:a4:13:e5:3c:e1:ae:de:3a:dd:54:d9:4b:1b:57:51:bd:
7e:be:e2:5c:96:84:9c:fc:8b:76:f6:16:91:4c:e6:74:e1:ef:
c5:e6:8a:0a:92:f4:58:6d:ea:dd:23:66:1a:52:c2:fa:12:73:
5c:d3:4d:68:ef:76:e4:a0:43:a3:21:e3:c4:35:96:a8:27:e2:
1a:47:c7:ae:61:36:df:f9:7b:53:b8:d9:22:60:97:27:58:e6:
ad:db:fb:d2:b8:b2:d9:d1:45:5d:39:ae:0a:b1:9a:52:7a:74:
6c:2a:6b:0b:60:83:f7:96:91:ae:ee:45:c0:e6:e7:f7:f6:06:
9a:bc:27:67:9c:c7:36:2b:8b:04:53:a2:a2:99:26:b4:50:b9:
b4:79:9b:1c:7a:42:49:30:4e:66:b6:eb:37:04:c2:08:b7:d1:
13:fc:b9:9c:34:df:32:c2:d4:b8:4d:14:13:fb:ab:24:13:10:
f3:ab:a4:14:3f:36:9f:5d:25:a9:f4:9f:b0:81:5d:46:34:a7:
13:45:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:45:30 2025 by rpki-client