Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: 7fzLtdPb2a9r5fJluTOHGC8CnwwMVz1Nf+IZux2n/WA=
Subject key identifier: E1:9F:59:17:2D:2D:41:DF:6D:8C:31:1A:0E:C7:76:C0:91:81:C1:E7
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 01967B329C70DE7EA11A8922F89C454C1381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 122A
Signing time: Mon 28 Apr 2025 07:00:36 +0000
Manifest this update: Mon 28 Apr 2025 07:00:36 +0000
Manifest next update: Tue 29 Apr 2025 07:00:36 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: GNoLipKebSMTMe/h/YSE4pOlHgYvkHb7lr7sCw2bqKE=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:9c:70:de:7e:a1:1a:89:22:f8:9c:45:4c:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Apr 28 07:00:36 2025 GMT
Not After : Apr 29 07:00:36 2025 GMT
Subject: CN=e19f59172d2d41df6d8c311a0ec776c09181c1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:d8:db:13:39:ca:80:89:d2:ac:bb:86:a4:
57:bf:b3:f1:54:47:50:dc:d3:c8:08:c1:42:89:51:
c8:34:a4:d0:6b:e7:27:d6:24:f5:11:44:ad:76:5d:
75:81:9a:6c:18:3b:36:2c:20:af:52:d0:ba:c6:e4:
df:f6:3a:8f:13:81:64:7a:77:0c:4d:bd:69:ed:4d:
17:88:21:50:7d:a4:32:38:2b:49:d5:74:92:25:b4:
d7:15:85:45:e2:89:d3:67:4b:37:b7:52:49:ae:ca:
9d:af:dd:47:45:ea:78:37:4a:1b:b6:5f:73:09:bc:
ed:a2:8f:a2:1c:65:0b:09:ef:fc:ea:f1:e3:27:29:
2c:a0:31:52:28:f5:db:01:18:75:c9:28:9f:5b:8e:
a1:c4:12:2e:5c:c6:76:ac:c8:27:c0:fe:88:2e:4b:
67:84:da:62:76:6d:1c:6a:87:3f:89:56:52:bc:fb:
5a:56:a3:85:a5:4e:a5:d9:3d:17:e8:9b:ea:9a:a8:
6a:68:d0:96:c3:1a:06:b2:b2:55:53:a9:d0:b9:92:
12:36:a6:18:7f:55:3d:ce:08:c7:bf:6f:b9:83:d4:
a3:23:1d:f4:8d:44:35:18:ff:46:ed:6d:7f:ec:52:
d0:9f:09:6e:ff:70:1e:95:33:a2:56:65:ad:e9:8c:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:59:17:2D:2D:41:DF:6D:8C:31:1A:0E:C7:76:C0:91:81:C1:E7
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:2c:57:71:5e:1c:15:86:4c:77:41:c0:8a:17:5d:36:af:
4b:fd:8d:91:2a:ea:68:b1:3d:b5:49:26:0d:8a:14:cb:61:a6:
b0:2a:d9:d0:f3:0a:7e:aa:bb:64:84:32:94:9d:e7:56:43:9d:
3c:88:fe:68:4b:f7:c0:bd:7a:8e:a0:34:13:1d:87:3d:e5:2f:
af:2d:be:4e:7d:50:50:c6:d3:12:20:30:ce:99:0b:4b:85:69:
fc:f4:73:0b:a2:76:06:37:88:e2:f1:56:f4:89:d8:a2:27:ba:
d9:55:13:ce:e2:d9:90:15:cf:06:60:42:a6:87:0a:7e:12:28:
ee:58:17:0a:4d:88:39:ce:c8:57:39:a6:1a:41:48:4b:3c:56:
73:a0:e5:40:85:1c:73:ad:45:40:39:13:eb:f0:0f:c2:d7:e0:
9a:51:09:b4:6f:62:50:82:86:02:6e:76:2e:f5:4a:91:fb:20:
4f:67:32:bb:14:2b:54:4a:bb:70:4e:19:64:87:07:0f:b7:fc:
3a:3b:c1:93:d7:51:7b:79:b6:5d:10:9b:21:f1:7d:a0:a5:12:
c9:40:d0:81:06:90:ee:bb:59:72:28:4b:28:00:3a:56:a2:f9:
73:06:5e:6c:40:25:29:79:b6:ca:fe:78:95:df:b8:08:a8:42:
5f:e8:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:30:17 2025 by rpki-client