Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: FFcIs80iKPwuEtGSJaLpUcO33U5ujRt05y/wdr0vSdw=
Subject key identifier: DC:95:ED:E4:2C:B5:4B:CE:60:32:65:6A:33:2A:2A:13:9D:D7:D0:E5
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 01964DB53AA15E32C8C9DD3CAFB962AF8A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 11:00:44 +0000
Manifest this update: Sat 19 Apr 2025 11:00:44 +0000
Manifest next update: Sun 20 Apr 2025 11:00:44 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: 3Yb9a9KPesFaQQmpimAVy3HuM4o0R39pIqDU5Y27T7U=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:3a:a1:5e:32:c8:c9:dd:3c:af:b9:62:af:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Apr 19 11:00:44 2025 GMT
Not After : Apr 20 11:00:44 2025 GMT
Subject: CN=dc95ede42cb54bce6032656a332a2a139dd7d0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:ab:b1:8c:2c:31:f2:1f:a6:cd:8a:18:ca:
00:8a:70:2f:13:38:3c:0f:86:21:38:ea:ed:ab:57:
82:cb:25:80:06:75:8b:40:09:97:e1:91:2b:3b:16:
55:96:d3:a3:3f:16:2b:4c:0c:38:e9:d8:6a:b8:e6:
52:15:21:76:57:59:b2:35:ba:3d:46:8e:f3:c0:7c:
79:07:db:e1:ab:54:c3:b7:b3:66:93:6e:6e:0e:bb:
74:8f:dc:42:27:99:7b:19:7e:cb:64:7b:0e:99:e6:
1f:63:63:70:b6:96:d8:a6:51:20:9d:78:6c:46:eb:
69:ce:2f:4e:7a:dd:14:86:ba:87:8f:d1:d0:6f:eb:
c0:11:0e:f8:d1:cd:41:e8:9a:0d:bf:8a:80:04:4d:
c3:f5:2c:3c:f9:1b:d1:c7:d5:27:f6:5f:00:26:7f:
8c:92:8b:52:0b:ef:51:05:03:98:50:c9:dc:9a:f1:
ad:5c:a1:0e:60:b8:02:3b:63:50:3c:ca:ee:b4:8e:
42:af:81:14:e0:0f:ab:4e:3a:e7:73:77:30:77:7a:
6e:a0:21:01:08:d8:ec:04:a7:a2:29:b4:07:60:c3:
d8:ff:b1:28:12:c3:8a:b1:56:0a:b6:d8:cb:a9:07:
7d:09:f8:78:8a:46:4d:2e:87:ac:f6:e5:65:56:91:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:ED:E4:2C:B5:4B:CE:60:32:65:6A:33:2A:2A:13:9D:D7:D0:E5
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f9:36:f6:43:12:03:55:00:d4:e5:ff:c6:33:cf:37:f7:c5:
71:48:5f:ba:81:e0:06:5c:26:ff:72:e5:d1:08:cf:d9:56:67:
09:72:f0:b2:19:f2:e5:a9:b4:cb:05:80:44:a2:05:f8:f4:27:
c7:64:9c:51:02:75:3c:b6:20:43:9b:c5:70:c5:3e:7c:eb:3d:
65:9a:05:f1:4d:0f:6e:3b:5a:48:2b:d4:6c:7b:47:9d:af:0e:
b4:e0:4d:1d:c5:d5:b9:5c:dd:86:5d:00:a8:b0:42:53:27:51:
eb:09:d0:24:45:50:df:69:45:d9:79:f4:5e:27:bf:d5:69:44:
d8:18:c2:5e:1f:bd:bd:a6:b2:c9:4f:76:60:42:16:1f:cf:bf:
de:fd:16:b6:84:7f:47:1e:e0:28:f2:1c:17:ad:00:5c:1d:4c:
ba:18:b2:dc:a6:59:55:6b:c6:c5:b3:42:03:f7:25:6b:e9:20:
ca:f4:f3:09:d8:c9:36:37:e5:87:5c:19:0d:f7:4a:a6:ae:a8:
bf:79:5f:26:c0:6e:87:40:d4:02:a1:b5:4f:e3:30:ac:63:03:
3b:cc:93:37:c2:13:bd:c8:c0:2d:11:6c:3a:be:11:74:c4:70:
6b:e3:17:3d:3b:01:37:b3:db:1d:19:0d:a9:5a:2f:6e:93:6a:
37:60:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:45:50 2025 by rpki-client