Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: 7NXj6B2zq49Fjxdxd07tr/9SuXU5HmTjiVDGGutlKnk=
Subject key identifier: E9:B2:92:07:49:56:52:29:99:84:37:FC:C4:2A:38:FA:E3:D8:7A:CB
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 01965BA7F8A51A5B8E0D9D0371E5BF8C1FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 04:00:56 +0000
Manifest this update: Tue 22 Apr 2025 04:00:56 +0000
Manifest next update: Wed 23 Apr 2025 04:00:56 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: RbCHBHIeGGVQUE3vOBHkHcg5p3UH9hFO+xMFqegEUq0=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:f8:a5:1a:5b:8e:0d:9d:03:71:e5:bf:8c:1f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Apr 22 04:00:56 2025 GMT
Not After : Apr 23 04:00:56 2025 GMT
Subject: CN=e9b2920749565229998437fcc42a38fae3d87acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:a6:02:cc:25:cf:49:1e:93:f2:1c:e1:59:
8b:19:d6:c3:66:c8:92:18:19:aa:d5:61:d1:45:7e:
44:e2:cd:0a:c7:c8:0a:65:e1:bf:d1:a1:e3:d4:ef:
df:aa:12:8f:63:66:05:bd:cd:f0:30:4d:84:3f:9d:
b8:e6:95:0e:31:82:85:eb:86:15:23:66:53:54:ec:
d0:13:9a:72:89:98:a4:f9:d1:18:97:be:de:7f:5e:
65:ef:ed:a0:01:b7:2a:87:12:c7:fc:f2:4e:91:91:
32:0c:a6:85:1e:16:de:5b:9d:19:cc:ab:b1:1c:71:
a9:e8:94:74:6b:e5:21:e2:93:eb:71:32:d7:68:f4:
56:9e:1a:48:10:c8:54:7a:99:6a:35:2e:24:20:77:
95:21:f8:8a:1f:b9:da:0c:35:a2:81:8b:74:4c:44:
a6:59:d9:e9:bf:26:05:7c:af:d7:2b:b2:bc:e4:6a:
8b:da:94:d9:40:f7:4c:3d:de:7d:67:e4:45:fa:f3:
45:a2:3c:3b:13:c1:57:ba:ad:bc:f2:69:bd:c6:85:
e1:85:4f:dd:19:a5:d8:d9:f1:8d:d5:2b:02:30:05:
15:1b:a9:d3:72:19:d5:45:14:ae:cb:00:54:30:2f:
73:20:58:b2:4f:b7:99:84:54:4a:e8:ef:40:28:8c:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:92:07:49:56:52:29:99:84:37:FC:C4:2A:38:FA:E3:D8:7A:CB
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f6:2a:0a:d3:1c:5b:1f:75:dc:88:89:04:f9:ea:67:b4:50:
9b:2f:7f:6c:f4:ba:4c:3a:bc:48:cd:ce:9a:be:d6:6d:a1:98:
af:11:be:ee:98:5f:4f:4c:59:bf:7c:37:ac:f5:81:08:0d:5a:
b0:ce:3a:4d:81:0c:62:bd:14:8b:38:fd:4c:5b:c3:82:06:68:
49:82:57:9f:8b:42:35:f3:a3:8a:87:14:b1:8d:90:32:ba:bd:
e9:71:86:9a:91:4d:74:6f:c6:40:9c:b5:e6:28:64:a6:8a:01:
8e:45:74:8c:e8:ba:af:81:6e:09:ac:cc:1e:2c:71:51:b1:07:
59:81:3d:40:fb:ac:74:60:ab:e6:c0:11:72:a4:ec:1f:e6:98:
8c:17:35:87:4e:cf:10:ba:50:81:d4:dd:54:05:5d:04:5d:ef:
36:12:18:8b:b4:c8:17:f8:3a:ff:cf:b2:0a:49:9b:9a:88:81:
60:39:1d:6a:5b:58:a0:48:2b:99:6c:c7:f9:7d:87:7a:24:17:
95:44:3f:53:02:69:9f:06:c0:ff:fb:af:61:63:db:b6:44:ef:
56:55:7c:5d:c3:b5:5b:99:d7:27:87:c7:ec:56:27:a9:98:a4:
87:b4:45:db:3b:ba:d6:ab:34:cc:4f:26:1f:2a:3e:54:8e:96:
93:c0:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:49 2025 by rpki-client