Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: 8SqM4kzOUeH3VsSEROCWzwXEE+351hnI79yT/57T5Kw=
Subject key identifier: A2:CA:88:9A:79:03:3C:A5:53:F3:C4:ED:16:34:A0:09:00:E0:DA:20
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019687A484D7B400421B2EB23CC2C0301BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0B6E
Signing time: Wed 30 Apr 2025 17:00:28 +0000
Manifest this update: Wed 30 Apr 2025 17:00:28 +0000
Manifest next update: Thu 01 May 2025 17:00:28 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: 8wYo8M5LNlybcTuZfYKGsI/FoGeY3yPB2icHtkPbp3Y=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:a4:84:d7:b4:00:42:1b:2e:b2:3c:c2:c0:30:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Apr 30 17:00:28 2025 GMT
Not After : May 1 17:00:28 2025 GMT
Subject: CN=a2ca889a79033ca553f3c4ed1634a00900e0da20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:b0:ff:e0:ea:61:53:e8:dd:84:81:39:5c:
d0:0d:04:c2:a3:b3:13:96:29:3b:6c:d3:95:e9:35:
a7:70:4c:24:ee:cd:9c:48:f8:4c:ce:d9:7b:9b:1e:
95:ac:47:65:ef:b4:d4:2a:69:8a:e4:2e:b8:17:60:
f5:a6:0a:7d:c8:3f:74:58:d4:32:1d:7f:9e:01:46:
cd:0d:fe:1f:08:09:47:fa:0f:75:f2:65:1a:46:7c:
33:95:f9:83:3c:b7:95:95:11:bb:a2:56:36:32:7a:
c9:14:3b:a5:f5:33:a9:ea:cb:70:de:59:49:e3:96:
6d:bf:e6:e0:d0:10:e4:47:b7:a7:65:af:fe:c8:b7:
d8:ab:d4:86:74:34:e7:42:54:db:6e:74:fb:66:39:
03:75:a5:70:71:b1:ca:b0:e9:62:ea:65:06:7d:dc:
40:9c:ed:04:42:35:fd:42:d9:a2:dc:26:35:b4:b3:
d5:63:f7:fe:86:6f:77:ec:bf:60:31:3d:9d:e7:d4:
0f:56:c9:36:63:e4:32:08:89:a3:3b:4e:74:dc:aa:
7b:79:5a:fa:81:f3:e1:bf:7e:c6:45:e9:14:4d:d2:
38:7d:12:10:28:d3:be:72:34:ac:17:1f:71:66:66:
e6:b0:17:51:49:ea:23:2e:60:6f:26:64:24:4e:96:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:88:9A:79:03:3C:A5:53:F3:C4:ED:16:34:A0:09:00:E0:DA:20
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:a9:49:56:e4:a1:92:fc:50:16:44:45:85:35:b3:3d:95:
ee:e7:5c:41:1a:90:23:14:5a:15:bb:b7:36:c1:23:18:3d:b2:
7e:3e:88:0d:21:6b:2a:39:c4:d8:49:6a:79:d0:0d:f9:b2:e2:
d7:32:3a:4b:fa:7f:80:07:30:4d:05:31:e7:ed:42:e0:c6:aa:
ec:21:cc:79:de:4b:f8:bd:9f:6b:74:4b:6a:e9:78:01:9b:b7:
7f:2a:60:23:b7:4f:f1:99:c4:a6:f3:ba:b8:8b:32:e2:29:66:
6e:e6:a9:49:62:bf:72:67:1b:84:46:7a:fc:f3:6c:03:65:57:
02:01:85:65:d4:d0:a4:b2:76:3f:c9:d8:c5:d6:4b:cc:80:a5:
19:54:80:af:90:48:08:e6:3e:c0:0d:e6:e4:44:47:69:42:95:
ab:e3:82:87:42:63:c3:10:27:6e:6b:d9:0c:50:d1:c4:ce:2d:
a9:3c:19:bc:ee:73:e3:d2:5a:14:7c:b9:ea:54:eb:67:7f:6a:
18:47:7a:0e:72:a1:49:4b:ea:fb:a2:3e:52:47:3d:ee:90:20:
ee:ee:5b:8e:9e:2c:c1:01:ce:34:eb:51:a1:cf:40:3e:6b:e7:
ce:6e:fa:4d:1e:09:5e:2e:41:b6:2f:74:11:8d:b9:15:a7:40:
90:0f:d3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:38:34 2025 by rpki-client