Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: /z8lGTBNLfD+mOvQX4Li5MwhV19bruvLayPwNVw293Y=
Subject key identifier: A5:D3:AE:59:99:76:74:1A:4A:E0:D0:88:99:A5:98:84:11:67:D2:B1
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 01965349409033208A6158C178FC18F42E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 13:00:31 +0000
Manifest this update: Sun 20 Apr 2025 13:00:31 +0000
Manifest next update: Mon 21 Apr 2025 13:00:31 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: oiGrFFUauvVyUcJ58XYFqaSIv++d05uXQkEkYSG7vkg=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:40:90:33:20:8a:61:58:c1:78:fc:18:f4:2e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Apr 20 13:00:31 2025 GMT
Not After : Apr 21 13:00:31 2025 GMT
Subject: CN=a5d3ae599976741a4ae0d08899a598841167d2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:7e:5b:62:ff:ba:28:fe:b4:57:5c:dd:ad:
69:02:dd:26:3a:8f:dd:ed:be:5d:34:f8:40:ad:42:
3c:ff:e2:9f:51:61:ef:70:50:d8:dc:d7:0c:ab:0e:
d9:26:5f:39:b8:53:46:ec:af:62:8c:9e:35:be:d0:
ec:51:70:2a:16:f4:4e:5f:d9:05:73:77:87:8b:43:
4b:09:6f:73:fb:c2:5d:d0:6e:54:48:ca:7d:ea:e3:
ac:d2:d4:d5:19:e7:a2:17:76:1a:59:0f:52:71:94:
c6:0b:51:6e:87:86:3c:67:63:20:cf:40:64:69:30:
36:a6:ac:91:96:f6:87:6c:2a:78:d3:06:49:fc:48:
62:af:76:c4:6c:74:a8:7f:55:59:b0:91:60:a1:8f:
80:1a:12:be:1b:02:68:d6:b5:4b:86:d0:a1:76:f5:
95:e1:48:45:22:bf:3c:ce:d2:c7:6c:6c:20:bd:73:
40:7f:81:c0:b0:9a:be:b1:85:06:47:23:c1:1b:28:
4d:9e:e7:c2:d7:f3:63:82:a0:e8:8f:a9:74:a3:cb:
65:de:c0:95:d2:56:4b:db:c6:3e:f1:6d:8b:33:b7:
db:d5:cb:42:17:b5:3c:c1:1a:ea:80:8d:22:1d:51:
31:35:8e:99:0e:1d:5c:8b:13:c5:3a:2f:e6:f8:a8:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:AE:59:99:76:74:1A:4A:E0:D0:88:99:A5:98:84:11:67:D2:B1
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f8:c7:aa:c9:8f:5a:1a:1b:63:ed:e9:73:10:24:e2:01:aa:
4a:38:1c:79:b0:e9:b4:6d:f9:74:14:74:81:ef:c6:74:be:85:
6d:fb:c2:cc:b7:cf:69:cc:79:b4:aa:38:32:18:ad:51:56:25:
c3:8c:46:d6:95:1d:4a:bc:27:10:b5:9f:ed:54:b8:d1:96:1c:
f8:a8:7c:c6:4c:f8:8f:a4:5f:de:d0:f8:67:3a:98:dd:f8:f8:
6d:dd:80:68:02:89:db:99:34:ad:87:4f:30:14:fa:18:f5:25:
34:20:3b:9c:31:70:53:74:a2:44:4e:20:d7:9f:84:28:6b:38:
a5:bb:12:92:80:f9:c1:6f:e7:f2:44:8f:3f:d5:24:88:66:82:
a1:fd:0c:cd:bd:bc:ef:39:9b:23:d2:59:2c:79:86:cb:01:a5:
15:32:e8:01:fd:e0:47:39:d9:da:c6:3b:07:f8:d7:b7:6c:da:
da:c3:e1:27:39:92:26:74:c6:87:32:73:d2:65:94:b2:bd:99:
a2:65:b8:95:3b:3c:d8:9d:d7:8b:b8:73:06:81:b2:70:89:0e:
2e:32:fb:a2:ff:14:70:41:06:85:ec:f9:ca:ca:ff:6d:02:7c:
8d:01:7b:77:73:7d:13:f3:08:38:5e:37:61:f9:81:72:cb:a3:
b8:f6:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:17 2025 by rpki-client