Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: UwKFTAtBbf06VkFBl9WeUpzM1cGOE95ahnli4BpyciA=
Subject key identifier: F5:76:93:71:6C:B6:9F:DF:B9:01:14:32:97:D4:BD:9F:7F:24:AC:D0
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 019680FDA01967D7BE1730B81343BF38B711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 0E11
Signing time: Tue 29 Apr 2025 10:00:27 +0000
Manifest this update: Tue 29 Apr 2025 10:00:27 +0000
Manifest next update: Wed 30 Apr 2025 10:00:27 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: jUevuxepum+MyHNOyciU9Q6jGCThW5T7CYUXSOKIvt4=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:a0:19:67:d7:be:17:30:b8:13:43:bf:38:b7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Apr 29 10:00:27 2025 GMT
Not After : Apr 30 10:00:27 2025 GMT
Subject: CN=f57693716cb69fdfb901143297d4bd9f7f24acd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:07:14:db:3d:97:84:03:67:55:3e:38:13:
f1:3e:46:ba:b0:d6:4c:18:2a:bf:06:0e:11:c7:c8:
ac:c6:96:9c:44:4b:b5:95:cb:be:31:8a:b6:cc:8f:
9c:88:7a:26:65:85:05:a2:69:76:f0:29:06:28:15:
43:ba:d4:b1:35:85:cc:bf:80:03:20:03:de:c0:ee:
30:d8:26:73:ac:6c:ac:b1:4a:8a:8a:54:7a:b9:d2:
f0:57:27:d3:5b:b4:47:7a:00:08:31:60:dc:4b:67:
04:2e:53:78:59:ca:ff:e5:34:6f:dd:ce:d4:82:7b:
98:9b:81:bb:dc:2f:22:47:a4:7d:20:d4:1d:b8:24:
11:71:40:e0:9b:2c:0a:6b:f3:fb:69:32:5e:7b:a1:
d6:e6:c0:09:f0:d6:22:37:bb:76:5e:d8:4c:3c:ba:
1e:87:72:70:31:86:dc:b0:cd:39:37:a6:f0:ab:85:
47:9f:d8:b0:75:8c:88:3a:81:32:2a:cb:ad:ff:62:
be:04:41:55:17:c8:2a:c2:62:03:7f:1a:11:3f:41:
2c:b6:13:33:de:d8:b4:69:d5:fc:c0:ba:7e:eb:91:
50:72:e2:8b:a2:f1:d7:b1:86:44:3a:c2:5a:2b:eb:
3c:16:e0:55:c1:35:a7:7f:86:d7:47:f6:72:46:7c:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:76:93:71:6C:B6:9F:DF:B9:01:14:32:97:D4:BD:9F:7F:24:AC:D0
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dd:f0:d0:ea:6a:c7:10:25:05:95:f4:6d:35:e0:5e:57:5e:
09:d2:b0:5f:7e:a9:bc:c8:29:72:7c:6a:55:57:81:b7:0e:7f:
2f:d1:a7:8a:84:81:a4:7a:37:ad:62:b1:cd:59:2b:ab:dd:97:
8a:73:2a:a8:5d:30:a6:e5:63:13:fe:a2:20:0f:0f:1d:2b:5c:
8c:ff:48:24:e8:5a:d5:2f:07:62:dc:49:8c:de:5f:81:c1:62:
10:fa:1c:f7:c9:ea:83:3b:a8:fe:8b:18:ae:d9:93:7e:68:f3:
46:fc:18:5f:e8:38:9b:e2:e6:8a:6f:f3:fa:29:d1:1a:7b:ac:
4d:3f:c1:22:2f:f5:75:a0:a1:42:75:2c:e0:19:82:1b:3e:43:
6d:7b:04:80:eb:f4:c2:db:3b:97:0f:45:7f:05:05:43:25:4b:
75:3d:9b:33:32:f2:6e:2f:0e:8d:59:3d:6a:8e:26:16:8d:e4:
f4:be:c3:66:9c:85:27:67:fa:90:3b:8f:27:1e:1d:fa:23:b7:
f6:b1:a4:3f:75:01:16:c5:5c:8a:d0:52:96:e9:4c:8e:ca:57:
54:41:c7:f2:45:b1:95:1a:1d:86:ed:76:03:ae:0a:e9:df:5e:
e2:97:ff:ba:0d:9a:c5:f5:ae:26:74:bb:ea:0c:8e:ee:6d:02:
71:c9:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:38 2025 by rpki-client