Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: /3RRFG7hnAGuQH169G4yPDo8ckGHc/Fo/aElzVLk1wE=
Subject key identifier: B2:7F:F7:EA:CC:6C:69:C8:FB:50:17:EA:CB:FE:8E:8E:A8:6F:BD:94
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 01967A5777C52C0A0CE31026FB796C35D714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 120E
Signing time: Mon 28 Apr 2025 03:01:14 +0000
Manifest this update: Mon 28 Apr 2025 03:01:14 +0000
Manifest next update: Tue 29 Apr 2025 03:01:14 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: z4yhe2Wn7KjpmMTKpv+bz8UD0NbPpzIMR3eUBWQqx7c=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:77:c5:2c:0a:0c:e3:10:26:fb:79:6c:35:d7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Apr 28 03:01:14 2025 GMT
Not After : Apr 29 03:01:14 2025 GMT
Subject: CN=b27ff7eacc6c69c8fb5017eacbfe8e8ea86fbd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:f3:ea:73:4b:b2:e0:82:44:73:a6:a8:53:
80:f3:36:8d:ca:2f:d2:6e:05:68:56:ea:3e:db:15:
19:b3:63:b5:1c:3c:f0:ff:a8:61:66:50:d9:3f:54:
b1:0b:a0:a3:4a:79:59:0c:21:ea:30:38:fc:d7:13:
a9:91:45:4e:ea:f7:fe:e9:87:2b:83:66:cc:f7:97:
f0:88:65:96:cd:7c:b0:de:ef:c5:22:da:af:61:04:
32:9c:88:c0:39:ee:ab:fe:2d:0a:dc:43:f9:9d:cf:
89:ca:f4:3c:d9:86:1c:e3:66:5d:ca:60:30:b0:01:
94:97:90:27:b3:1d:83:ff:da:d5:56:38:bd:3b:ae:
e3:4b:3f:6c:ed:fa:3a:cb:09:c1:40:c9:4f:40:9b:
ce:77:19:26:33:6b:96:af:8a:fd:77:bb:7d:59:f2:
62:46:e8:fc:e8:d7:32:99:30:ce:f3:47:19:64:28:
b3:5b:c3:78:cc:a3:e0:4d:dd:c1:eb:18:1d:2e:b0:
52:28:6e:b2:c2:be:d0:a4:e1:a2:35:c7:82:17:a6:
5c:c1:4f:d2:ae:fa:08:d6:f2:43:c0:74:89:b1:c2:
aa:4d:ec:b5:54:79:f5:93:42:5d:bb:89:7e:7b:a7:
a3:89:7d:d2:b7:69:02:4f:f9:82:c7:7d:04:b5:8f:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:F7:EA:CC:6C:69:C8:FB:50:17:EA:CB:FE:8E:8E:A8:6F:BD:94
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:2c:8b:aa:eb:24:63:66:59:30:7d:dd:6d:cf:b4:99:c5:
f2:ed:42:2d:c4:a6:04:0f:3a:03:da:38:ec:e7:6c:8b:0d:d2:
2a:34:9c:99:89:75:2c:a7:89:c7:08:f4:de:01:0d:8a:33:16:
10:64:13:31:22:df:15:e2:80:64:47:6b:52:0e:f1:8d:e5:9f:
6d:c1:11:6c:03:cd:c2:a8:d5:f7:8e:d4:82:61:1d:77:5e:27:
82:b1:cc:82:d1:bb:12:d1:ac:82:2e:15:7e:d0:b0:3c:7e:47:
9d:88:57:a5:bc:02:1e:ec:53:cb:b5:82:bc:b2:e1:e6:7a:d1:
5b:ed:59:06:c3:aa:ba:70:17:89:96:1b:ed:61:30:dc:b2:1b:
1f:75:99:e6:ed:98:b9:43:d9:71:e7:fb:38:42:18:f6:c2:b2:
06:a0:36:74:89:6e:51:fd:dc:12:a1:7b:88:1d:b7:d6:9e:11:
6b:92:ff:0d:6e:df:aa:10:8e:d1:f8:21:56:d1:de:0d:16:2f:
cc:af:d5:32:9b:70:ee:a9:73:04:c8:bf:9e:dc:57:e2:a5:9a:
f6:53:79:ea:8f:84:4a:45:f6:84:65:da:68:dd:d0:e9:c2:bc:
88:a8:e6:ac:d3:1b:7c:ae:27:34:11:70:e1:d4:d2:37:3f:c6:
1e:c9:d2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:14 2025 by rpki-client