Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: AX8u/dvYzawO0Ab6CuFmQfM8mUuV8xaQSCcU8WIgHFg=
Subject key identifier: C7:FD:DA:26:C2:43:39:2D:25:B9:1E:8A:ED:09:D9:80:C7:BA:C3:47
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 01962D4F3AC1E1C999A7735153114548F016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 1397
Signing time: Sun 13 Apr 2025 04:01:29 +0000
Manifest this update: Sun 13 Apr 2025 04:01:29 +0000
Manifest next update: Mon 14 Apr 2025 04:01:29 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: TzDmn9q3+vjiug6yDKXCZzbXYAx3M/BmIQjrFECsSWc=)
2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:4f:3a:c1:e1:c9:99:a7:73:51:53:11:45:48:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Apr 13 04:01:29 2025 GMT
Not After : Apr 14 04:01:29 2025 GMT
Subject: CN=c7fdda26c243392d25b91e8aed09d980c7bac347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:6d:c9:69:a2:15:69:91:48:1a:98:62:c4:
f8:24:23:cf:a6:39:f2:0d:60:ca:3f:73:c1:c3:dd:
96:2d:62:74:90:74:5a:9b:f6:d2:c3:4d:b1:fe:7e:
34:7c:dc:a6:c2:c8:ad:fa:41:89:df:c4:e4:19:61:
8b:ff:db:c0:23:9e:58:2a:8b:31:af:53:e3:c8:ee:
bd:96:39:b5:84:5d:02:cf:25:c6:26:92:cc:7b:f9:
a3:01:49:7a:5e:5c:cc:a1:c9:57:fe:c5:de:90:7a:
b7:a0:3d:e5:6e:62:34:ed:56:0d:6d:25:77:49:71:
9f:a0:76:00:f9:5a:5c:64:57:91:73:90:dc:6a:e4:
02:2d:9e:8a:78:c4:a5:41:50:1b:5a:ae:0b:48:9c:
65:73:49:93:d8:f2:29:2a:d4:a8:65:62:86:89:7d:
8b:c4:02:0f:16:a2:d9:13:45:d9:6e:4d:c2:cb:7d:
46:ba:f9:c6:b3:cb:80:ad:16:5a:09:0f:53:1f:5d:
87:f9:06:94:bb:3c:f3:50:1b:86:fc:0b:be:1b:a9:
20:91:30:70:7d:c3:89:48:f1:d7:33:25:ca:bb:f3:
ce:61:ca:5a:8b:f8:12:96:f7:24:50:ab:ed:89:fa:
8f:a5:25:5b:f2:6a:22:a8:03:32:88:3b:a6:11:d6:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:DA:26:C2:43:39:2D:25:B9:1E:8A:ED:09:D9:80:C7:BA:C3:47
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:05:0c:a9:dd:28:64:d5:2c:a2:67:27:96:af:d4:1a:27:8b:
59:4f:46:a0:b9:a1:46:a4:9c:4d:2c:1f:4a:00:5c:1f:69:84:
a8:5f:d7:fa:b4:f6:3f:47:be:f6:ad:e9:f8:5c:88:f6:04:ac:
11:b2:31:c2:c3:2d:78:23:fe:b9:1a:bf:3e:48:dd:b7:61:c0:
44:b8:12:af:33:d8:8a:25:4c:10:92:7a:58:7d:f7:a5:69:a4:
c1:2a:91:29:94:f7:d7:3b:ab:a1:fe:62:d5:e3:6f:cd:12:70:
45:d5:ec:35:9b:9e:f4:37:2b:0e:01:64:d7:a6:94:0b:9f:14:
95:39:d1:f2:8c:67:b5:88:4d:b9:33:81:ce:79:68:2f:b9:43:
5a:e1:9f:2a:f0:ff:3a:b6:b5:53:e2:97:20:3b:97:98:97:38:
51:b0:33:91:c4:dd:39:80:2f:80:b6:6d:bf:69:3f:4a:11:4b:
6c:d5:82:4f:53:7b:1c:cb:fc:d0:f5:b5:03:c1:08:00:05:73:
8c:c1:e0:6d:af:48:ab:01:00:47:56:29:b1:ee:df:13:72:82:
19:c5:a9:5a:cc:84:ee:51:ad:fe:dd:da:32:c8:39:97:a5:ae:
a5:c1:5a:61:43:7b:e0:d1:3e:af:05:ab:d2:bb:46:94:ec:1c:
bb:88:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:15:42 2025 by rpki-client