Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: qBnDTbMU6nYFfizZ/Smi1gSbZfkc2H/a9cXBcjVNUPY=
Subject key identifier: A5:08:43:88:B8:5E:8D:6D:8D:02:FC:C9:DF:B0:8C:D3:4D:33:F3:CA
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 0197782ED5C9BA9FADC1B3174818BFC61301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 0569
Signing time: Mon 16 Jun 2025 10:00:24 +0000
Manifest this update: Mon 16 Jun 2025 10:00:24 +0000
Manifest next update: Tue 17 Jun 2025 10:00:24 +0000
Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: iShbXpnoFvzT4abldzGopu/xGWNiusdH3uGfLyL5mqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:d5:c9:ba:9f:ad:c1:b3:17:48:18:bf:c6:13:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Jun 16 10:00:24 2025 GMT
Not After : Jun 17 10:00:24 2025 GMT
Subject: CN=a5084388b85e8d6d8d02fcc9dfb08cd34d33f3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:83:bd:4c:27:ed:85:a1:ea:54:3a:71:97:
aa:3e:0d:87:26:00:66:46:57:4b:82:00:41:83:99:
0b:7a:9b:48:f3:5a:5b:a8:e2:7f:29:04:98:a2:d7:
67:1b:e4:2e:b5:43:c4:28:46:1c:8b:f5:e2:ab:18:
0a:05:cb:e5:9e:dc:4d:6c:3b:7d:51:a0:f3:c4:d8:
92:e8:ce:b7:75:4e:1b:1d:13:df:c3:95:de:ba:c7:
60:62:ff:81:64:8b:93:b8:7c:48:d9:29:49:5c:44:
7d:9d:55:c2:5b:ca:16:81:52:59:5e:15:bd:08:77:
8f:2e:dc:92:b8:6c:9d:6a:51:32:78:3b:b1:c9:ef:
9d:96:1c:f2:08:17:f1:f3:bb:70:78:32:c0:9c:16:
fa:f0:f6:bb:ee:f8:cb:18:3b:09:a8:7c:f6:ba:5d:
7f:95:ce:99:e5:90:0a:c0:8e:db:db:cd:6e:77:2e:
e7:39:99:ac:14:89:69:47:d3:b6:69:61:99:16:f5:
d1:11:4c:8d:9e:cf:a4:e4:1e:07:65:18:fa:c0:96:
4b:93:02:87:bf:e3:02:4a:43:e7:28:e7:f0:77:ac:
06:30:9b:26:f5:36:fe:2b:db:e9:ea:a1:94:3a:f8:
44:b0:5b:a0:2f:62:49:b8:b7:8c:00:36:99:04:c8:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:08:43:88:B8:5E:8D:6D:8D:02:FC:C9:DF:B0:8C:D3:4D:33:F3:CA
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:ae:82:df:00:77:8a:16:7b:04:af:f4:54:2c:e0:b4:a6:
29:63:06:50:cb:60:5e:8f:d2:8c:d0:86:ff:14:41:1a:47:57:
58:03:e8:f9:e2:18:b1:d0:f3:c7:eb:fe:78:89:ea:00:e1:b8:
3d:87:7c:bc:aa:4d:42:d2:00:d7:c7:95:f6:1f:9c:13:0c:8f:
ab:67:bd:b0:95:e1:37:d6:08:fc:b4:dd:a5:98:27:dc:3c:98:
ea:90:10:17:2e:4a:57:13:37:e2:73:00:07:9e:d3:1d:9f:96:
ed:2b:81:34:f5:35:f9:b0:a8:ac:a5:3e:01:0a:43:d4:29:b2:
26:09:00:d4:d9:f0:df:0e:29:36:7a:73:b4:be:5c:db:5c:5a:
49:e6:e8:f5:ce:cd:87:84:b9:fb:e2:7f:61:25:9e:fa:e9:cf:
b0:60:5b:c8:20:06:e1:ea:80:52:6a:02:d2:ec:d8:5f:a9:a8:
a4:83:bc:00:71:bc:75:71:7f:c8:a7:01:66:db:b0:d5:ab:93:
74:8a:b7:9c:43:ba:d6:0f:18:ff:f3:9a:d1:a9:92:54:84:bb:
34:26:df:ec:67:d1:3f:87:f6:3e:ac:53:ca:e0:02:3d:fe:8c:
c3:8c:35:e4:21:8f:82:72:a7:bf:e8:7d:0a:b3:4d:15:8e:a7:
49:6e:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:06:56 2025 by rpki-client