Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: tGp2cCsSwfwE0aCBLsYEj1Q74oHVAnOxyrT5U33/ng4=
Subject key identifier: C0:01:8F:D2:8E:94:49:13:51:22:88:8A:B6:F2:7F:BE:C9:06:42:20
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 01967E339B140A4CC0F5759C13B0D6654467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 11F4
Signing time: Mon 28 Apr 2025 21:00:33 +0000
Manifest this update: Mon 28 Apr 2025 21:00:33 +0000
Manifest next update: Tue 29 Apr 2025 21:00:33 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: l/LjBBznG9P16mR/ATKHzopov1rOykSI2eQAjXVDSPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:9b:14:0a:4c:c0:f5:75:9c:13:b0:d6:65:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Apr 28 21:00:33 2025 GMT
Not After : Apr 29 21:00:33 2025 GMT
Subject: CN=c0018fd28e9449135122888ab6f27fbec9064220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:cd:f2:2a:56:f3:0f:16:95:af:77:46:ce:
c4:61:cc:04:d6:7a:3d:db:f5:d4:9c:fa:c4:ca:d0:
98:7b:34:2e:90:c2:d2:fb:dc:97:36:f8:30:5a:98:
73:d4:24:c3:4e:8f:eb:95:df:00:63:b2:4d:10:eb:
2d:0f:4d:a2:ca:77:b9:8a:54:12:fe:b3:04:fc:03:
cb:19:77:a8:ae:0d:4e:a1:e1:63:38:5b:61:93:af:
37:e0:6c:da:bf:7b:6c:c2:95:e3:ae:66:06:c1:a0:
e4:79:4f:80:19:14:3f:f4:aa:a0:cb:3d:8b:97:97:
a9:a1:d6:0a:de:bf:27:e9:2f:d6:8b:53:b1:8c:86:
3f:41:4b:76:a4:e2:2b:fc:e0:66:e1:a5:4b:a7:b4:
cf:4c:b1:7d:5d:b9:e6:cd:dc:4f:cc:42:56:d6:f1:
75:40:5e:3e:67:52:9a:68:be:44:96:ff:2f:39:76:
98:0f:dc:23:22:ee:06:47:67:27:11:f1:53:fd:93:
0f:73:08:a3:e0:2f:4d:7e:54:84:c3:23:37:9b:4e:
36:ce:35:7d:ca:cb:3e:76:61:29:4d:43:5f:a6:a3:
f2:57:3f:5f:d1:3a:35:1b:ea:15:bf:83:7e:2b:18:
bc:a2:34:79:9c:72:a5:ef:f4:52:ee:fe:b9:46:a1:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:8F:D2:8E:94:49:13:51:22:88:8A:B6:F2:7F:BE:C9:06:42:20
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:33:b9:89:8b:48:54:9a:7b:b2:be:3b:c2:b9:09:8c:21:
4f:e9:10:93:5f:62:af:8a:9e:8d:f7:b6:1e:7d:10:52:e5:32:
41:5a:e5:60:b9:a3:1c:f2:cf:99:74:e1:3d:fb:1c:a2:a7:88:
7c:51:4a:4a:58:dc:59:18:f4:0f:e0:7b:70:76:ac:20:0b:45:
4a:42:4c:60:9b:8e:e6:f7:31:15:b4:38:66:1e:63:6a:7f:74:
4a:e9:5a:2f:fe:dc:fc:5d:e8:ea:f9:94:21:0e:55:7c:0f:23:
53:48:46:05:e5:cd:cc:12:5f:ed:fa:bb:2f:1c:a8:80:45:cf:
8e:47:ef:69:6e:bc:1d:3e:92:05:0e:a2:f8:b5:90:47:e3:cd:
56:79:c2:f6:0b:00:08:ea:4b:c2:57:7f:ab:b7:d6:2d:29:cd:
d5:6b:12:32:62:01:23:0d:b6:89:f4:aa:5c:05:78:b8:f2:e1:
75:a6:01:e0:89:b1:ab:b7:f2:d0:c8:a7:5e:0d:c3:92:13:75:
2e:2f:2b:46:0e:29:d4:7e:d3:e4:47:80:c3:b9:63:a0:cb:0c:
2b:7f:2a:ee:94:61:a4:78:b0:2b:03:38:9d:1b:5a:9b:3f:79:
9f:59:97:ee:ab:37:45:f2:3d:f5:26:59:cc:d8:bd:f9:f5:de:
07:33:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:00 2025 by rpki-client