
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier: BsdsYlg/Jy4w2HfbUnHEeaP6yvNVxjWA/6yhkcmvGDE=
Subject key identifier: 01:EF:31:FB:28:6B:92:27:30:A9:8E:68:55:AD:7E:10:53:02:E5:74
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 01965236F6C4903938B38E07466EF9F65160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 08:00:55 +0000
Manifest this update: Sun 20 Apr 2025 08:00:55 +0000
Manifest next update: Mon 21 Apr 2025 08:00:55 +0000
Files and hashes: 1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=)
2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: 93fAEemQuUf536GBhxp0dTyQ1dCtWQGVO1k1pCn6FiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:f6:c4:90:39:38:b3:8e:07:46:6e:f9:f6:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Apr 20 08:00:55 2025 GMT
Not After : Apr 21 08:00:55 2025 GMT
Subject: CN=01ef31fb286b922730a98e6855ad7e105302e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:ee:31:76:d1:7f:0c:b1:1c:4f:e5:94:bd:
05:ac:05:0c:af:1e:f0:ac:9c:5d:5f:11:fa:6e:15:
74:0d:0a:07:2a:e2:88:c8:77:d0:f5:74:94:55:96:
04:e4:4d:50:c4:7c:04:7c:8f:ed:5b:87:c8:95:53:
b7:9e:f5:27:49:10:a2:68:2c:b0:27:9b:c5:2f:c2:
9f:39:30:bf:4d:5a:aa:c5:9b:d9:98:4c:75:18:e8:
29:f7:18:0f:5f:4b:b8:ab:81:2b:dc:81:2e:eb:08:
1f:d1:ea:b0:59:cf:25:5d:40:04:2a:59:b9:12:1a:
32:f3:03:ac:5a:c4:74:a1:2d:5c:69:76:01:07:42:
34:05:d5:ac:69:ef:70:04:69:fe:cf:83:89:de:bf:
72:90:35:cd:5a:b4:25:e2:56:8f:12:93:3d:4a:5c:
45:cf:0c:26:91:a1:12:ca:7c:e1:a2:44:84:79:b5:
64:dd:b9:77:7c:72:fb:61:0d:4d:86:15:50:d0:c5:
92:5d:08:bf:43:b6:c8:37:5e:7c:25:d1:ed:9a:6e:
12:cb:bd:48:27:74:df:eb:ab:99:15:96:d8:3c:11:
cf:38:da:e9:99:d6:0d:5f:17:1c:70:c5:56:11:97:
01:2b:01:f5:0c:3d:f0:43:47:36:5c:44:17:03:34:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:31:FB:28:6B:92:27:30:A9:8E:68:55:AD:7E:10:53:02:E5:74
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:50:e3:42:22:07:b4:f5:39:33:1e:5f:e6:4f:9d:e8:d8:04:
11:33:cf:4d:1b:01:47:c1:28:69:38:be:30:ab:c4:d6:8e:d5:
5d:88:64:52:e5:87:49:b0:39:df:d1:cc:6c:e1:5f:8f:a0:10:
09:26:79:6e:2d:21:ea:48:1a:ef:b7:6d:80:87:b1:60:80:aa:
8d:29:bc:9b:de:c5:16:fe:15:c9:03:cf:75:39:35:58:df:97:
b4:8f:6b:5f:ba:0b:54:c3:31:bc:01:7a:42:fa:83:13:74:53:
63:95:dd:33:38:65:05:ed:8b:cf:52:1d:b4:28:1a:de:8e:51:
7a:1d:87:5e:2b:7d:82:ee:e3:d8:b8:97:c1:31:49:ae:12:25:
95:9c:4e:3a:7e:a9:36:00:df:b5:15:8e:95:71:62:32:18:bc:
00:65:85:18:fc:15:0c:b0:69:fd:6b:59:8e:68:40:13:80:1a:
5d:04:6d:78:4b:07:bb:0b:0b:17:4c:42:92:58:02:77:d6:4f:
0c:0a:62:56:67:3b:82:45:f3:36:64:be:db:69:68:9e:f2:ff:
a3:7f:35:ff:f3:6d:c8:72:4a:d8:57:b2:8f:a3:b1:b8:8f:c0:
0a:28:7e:86:39:78:0b:94:36:2e:ef:56:03:20:03:d8:21:26:
7e:c8:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:00 2025 by rpki-client