Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: W2M0qjhJdkRYhRU/Hr0G5dX130x2cwwbzwmDs3h4QJs=
Subject key identifier: 67:C1:FA:BF:FC:FD:96:A5:94:28:B2:7E:05:8A:BF:3B:85:65:19:38
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019655383F4A39A14548698DE7AAAF16D0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 22:01:11 +0000
Manifest this update: Sun 20 Apr 2025 22:01:11 +0000
Manifest next update: Mon 21 Apr 2025 22:01:11 +0000
Files and hashes: 1: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: 8c/tidRGQelDsr9X3R51GkVo0qSVpWo08wOxp+PfMrI=)
2: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
3: zYcJKaM6JzCKVxiyX4VCo_gC9ZM.roa (hash: mZBVVY1LVqtMV+cGPcfvfBAAoOoYhoi230NuYqjuA4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:3f:4a:39:a1:45:48:69:8d:e7:aa:af:16:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Apr 20 22:01:11 2025 GMT
Not After : Apr 21 22:01:11 2025 GMT
Subject: CN=67c1fabffcfd96a59428b27e058abf3b85651938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:b4:f7:20:c7:49:9b:fd:f4:98:b8:44:e5:
08:60:5e:da:1f:6f:37:f3:e2:c6:78:c3:a0:e5:65:
75:b2:9a:c2:f2:35:f7:54:dd:bf:b3:9b:c7:3d:80:
89:82:32:2e:45:b4:23:30:6e:c8:45:1f:0f:14:38:
b1:ad:21:de:c7:c0:e5:42:6f:60:7b:2d:a9:40:06:
26:ef:ff:43:ff:4a:1b:9c:53:f1:76:95:69:c6:e2:
c9:63:9e:24:db:11:22:a3:c9:43:01:e3:75:c2:d4:
3a:3c:96:d5:b4:5a:55:20:c3:32:37:67:94:0b:dd:
9c:7c:cb:df:32:d3:1e:f1:6d:98:7d:f1:01:69:06:
aa:a9:6d:9d:f0:d6:55:c1:36:82:60:11:e2:9a:e2:
5e:cb:86:aa:34:69:f2:eb:00:88:9d:6c:cf:6d:a5:
ca:c1:bf:29:9f:68:4c:27:76:34:13:ec:cf:8c:30:
26:3d:6e:ac:67:52:c5:ac:0b:24:b6:7f:ae:f9:65:
69:01:16:af:5e:d4:64:f9:3b:54:9c:4a:ea:9a:51:
a2:7d:eb:37:43:ca:b7:5d:83:59:d4:fb:af:4a:0e:
49:13:97:6b:0a:1a:0e:2b:22:90:76:71:35:96:02:
66:56:a7:ff:09:93:15:64:b6:f0:f6:fa:25:9e:b4:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:FA:BF:FC:FD:96:A5:94:28:B2:7E:05:8A:BF:3B:85:65:19:38
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4a:c2:54:bc:89:18:65:58:98:82:15:2a:a0:03:dc:b3:50:
b5:51:a1:48:e0:29:2f:4f:7c:2a:d5:0f:b3:90:10:d3:de:64:
e0:5e:6f:20:15:72:66:f9:c0:f5:b7:37:1e:45:e7:a5:2a:97:
76:83:47:08:12:7f:b4:a4:ef:72:13:a0:df:65:81:75:68:8a:
39:3b:93:02:2f:50:58:33:df:0f:99:e4:b4:80:e9:a5:ab:d5:
e2:7f:25:e6:7e:47:bc:12:23:73:22:72:3e:f4:b9:56:ec:34:
ff:d5:49:2f:c3:74:2e:36:b9:e8:ab:05:1e:a5:43:16:81:3c:
ce:d7:c7:58:35:ed:9f:3c:87:1d:81:27:c0:7f:bb:e7:70:fc:
69:19:00:ef:b4:0d:87:9c:f4:8b:4d:a3:a6:91:b4:ed:8e:9c:
d3:09:97:7f:68:54:04:78:48:34:b4:8d:09:a4:0a:2e:f2:64:
be:4f:cf:64:f3:7d:94:3b:0b:ed:aa:0d:40:93:c8:e3:30:81:
7c:c9:e7:a1:5c:8b:fc:28:76:80:44:d6:b2:bf:36:8e:05:e8:
f4:65:50:1e:fd:53:07:c2:eb:84:41:c5:3a:8e:c9:7a:3a:4b:
fc:ce:c8:4b:63:a5:30:5a:4f:af:10:41:af:c3:fb:1d:4b:ca:
4a:9d:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:14 2025 by rpki-client