Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: 7UducyScRi4cKRv4jeuVVaR8ZmStl721iachEQfYisQ=
Subject key identifier: 06:B4:82:17:89:D4:F7:92:DA:33:D5:DE:FF:CF:40:07:62:A1:F2:BD
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 01965537D61D71F5912EFFC69E0F4DFD51C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0B6C
Signing time: Sun 20 Apr 2025 22:00:44 +0000
Manifest this update: Sun 20 Apr 2025 22:00:44 +0000
Manifest next update: Mon 21 Apr 2025 22:00:44 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: aPu+75RBFkfPz7C9IAoPqFCzZy/ywTjfwU5WsWVCRHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:d6:1d:71:f5:91:2e:ff:c6:9e:0f:4d:fd:51:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Apr 20 22:00:44 2025 GMT
Not After : Apr 21 22:00:44 2025 GMT
Subject: CN=06b4821789d4f792da33d5deffcf400762a1f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:e6:62:42:f6:3b:b9:80:65:bf:a6:7a:5e:
0e:c4:fe:d2:b6:21:96:62:98:cd:93:08:0b:a1:38:
ea:71:ba:20:5b:69:e1:8d:76:ef:f8:47:5e:e9:28:
d5:43:57:a3:69:6f:95:28:4f:3a:85:32:65:cc:de:
0f:5b:be:8d:6e:e6:03:2b:6b:c3:34:41:05:42:03:
60:f9:81:54:24:76:de:42:d8:cb:af:ef:3c:d4:01:
76:7c:57:94:c2:c5:de:e6:1b:3e:20:26:9b:37:41:
85:5b:8f:db:ea:59:76:84:5a:b9:c9:34:21:cc:4b:
b9:b6:27:46:00:b7:16:b2:19:fc:40:ca:57:ff:b9:
c5:92:35:66:5a:7d:3b:34:6a:9f:5d:d1:5f:60:fa:
36:47:47:59:69:56:a7:86:77:a1:37:76:33:d0:8f:
99:21:ff:8c:05:bd:8d:54:c9:88:8c:4e:5e:10:ed:
9d:17:5b:11:92:4e:8e:81:58:2b:a7:84:ed:3a:2b:
c9:39:33:99:14:02:90:01:44:cb:64:f2:e5:db:c5:
79:32:58:9a:ff:22:8b:34:ed:63:05:19:04:33:c9:
8e:2d:8d:ac:21:36:29:6c:ca:4f:26:35:30:88:c3:
a9:a2:fd:a1:e0:e3:a6:68:5e:f0:15:e7:2f:0e:c9:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:82:17:89:D4:F7:92:DA:33:D5:DE:FF:CF:40:07:62:A1:F2:BD
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:af:25:c3:af:5e:f3:be:01:d3:ef:4c:45:d3:1e:38:b2:55:
11:fb:8a:c4:97:95:0c:ac:8e:88:9a:cf:11:25:7a:9b:9a:b1:
8e:99:1f:b7:07:cb:de:1c:69:8f:84:40:0f:f2:49:07:83:4d:
b7:5f:8b:95:c7:9c:b1:e8:df:1e:65:51:e6:8c:24:d9:34:df:
bd:f3:fe:9b:8a:74:26:ce:b2:0d:cb:e5:a9:97:13:c3:d7:2f:
c0:46:26:e5:56:b1:aa:a9:8a:2c:13:3b:f4:13:c9:dc:ba:58:
2d:10:1a:c4:00:a8:55:62:c4:ba:ca:ab:57:fa:8b:cf:4f:54:
53:f1:e2:03:10:da:29:0a:96:3b:08:3d:5d:71:e3:6a:08:45:
1b:3a:15:81:66:b5:35:3c:e4:6b:f2:33:a8:9f:0a:74:8f:7c:
a5:58:57:50:c2:a1:0a:7c:05:1c:a9:dc:18:e5:1f:0a:66:78:
d5:dc:be:a0:fd:3f:b4:59:dc:91:df:a8:d9:53:8f:1d:42:3a:
6e:aa:8f:dc:ee:2c:0e:c9:5d:11:f8:50:5f:bc:6b:da:8b:ef:
69:57:b1:41:6b:9d:2a:15:a3:a4:6f:e3:cd:eb:81:4f:26:aa:
2d:78:52:de:7d:ad:20:20:b8:8e:fb:42:74:d2:eb:67:1a:06:
4c:b6:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:35 2025 by rpki-client