Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: XoQGDtEW6H4hqJguFYGOcnGJRDlSLouOB4MWGsio6Q8=
Subject key identifier: 9C:94:36:77:46:71:9F:60:EC:53:CA:A8:50:57:74:0A:C8:2A:9C:81
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 01967A1F918A83F658C2BB1F2352329B3CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1480
Signing time: Mon 28 Apr 2025 02:00:11 +0000
Manifest this update: Mon 28 Apr 2025 02:00:11 +0000
Manifest next update: Tue 29 Apr 2025 02:00:11 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: Qc/EX/oOrm8X94WKoEo43QAGqGH83m3M7prjxJltrZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:91:8a:83:f6:58:c2:bb:1f:23:52:32:9b:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Apr 28 02:00:11 2025 GMT
Not After : Apr 29 02:00:11 2025 GMT
Subject: CN=9c94367746719f60ec53caa85057740ac82a9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:41:0c:1f:63:7d:a1:3c:f1:65:c2:60:44:
36:bb:c2:55:42:4e:76:ce:a4:39:87:e9:4a:3c:7b:
e3:d0:ed:7b:e4:ac:f8:1f:3e:54:c1:ee:6c:08:54:
5d:cb:cf:5d:3a:e3:12:f3:5a:af:db:b7:44:c3:24:
7a:9b:89:ba:a2:ed:7e:37:6e:bf:63:97:bd:53:27:
95:28:24:9d:be:a8:66:60:32:09:a5:36:fd:af:e4:
02:32:37:5d:b0:dd:38:32:91:e0:4f:37:2e:15:a9:
df:ae:e3:75:b0:99:4f:64:01:a8:49:49:7d:6d:32:
a8:48:56:ec:db:a1:8b:47:47:04:1e:06:71:3f:7c:
9c:6b:9a:bc:48:3d:8c:a9:f7:1e:18:b1:0b:1b:03:
5e:34:98:55:27:f9:19:ca:47:49:e0:6e:7f:17:0a:
2c:67:af:75:80:f4:22:f5:04:cd:1f:11:0c:2b:89:
e4:d5:c9:68:66:2e:a1:b4:d7:a7:94:12:da:6d:f5:
8d:7b:0f:6b:f9:74:1f:08:e5:6a:75:1c:31:42:97:
8f:d4:e1:1a:86:ad:0a:d1:46:d0:24:55:3f:bb:1d:
36:d0:93:81:45:da:9b:21:49:fc:22:0d:08:a9:62:
76:43:b4:ed:95:ae:87:84:52:49:96:5d:f0:4c:7b:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:36:77:46:71:9F:60:EC:53:CA:A8:50:57:74:0A:C8:2A:9C:81
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:2f:4b:6f:00:56:4c:36:a9:f6:a7:8d:86:4b:6b:2d:5f:
b0:f5:b1:54:93:69:8f:f2:f1:47:7e:78:70:1d:37:86:f2:29:
30:2f:ad:5a:e5:fc:a9:ff:fb:ac:4f:fe:52:ca:f7:0e:f8:b3:
96:a3:44:02:dc:30:2c:64:96:27:ff:4e:9f:e9:a8:f9:22:3b:
75:42:7d:1c:cc:76:a3:1e:1f:ef:d3:8b:90:ea:f0:d0:af:8d:
b3:94:02:96:22:20:d4:36:cd:e0:fb:64:f5:58:a5:dc:7c:c9:
d1:7f:cf:e5:69:bb:f5:37:fd:77:d8:40:55:eb:3f:fc:91:3a:
cf:0d:18:f8:c1:e8:1c:6f:7f:9b:1e:d3:a5:bc:3e:d4:69:14:
f9:1f:aa:36:c4:05:ba:30:1f:c3:39:c5:d9:ec:b8:c5:b4:6d:
14:ca:71:39:d7:d4:c8:c7:f6:f8:ec:5c:a0:b0:af:ae:8d:21:
6b:18:51:6b:1b:ac:04:a7:01:ca:20:f2:a8:d7:43:fb:6c:9d:
2f:5b:ed:de:3a:69:e8:2a:7d:98:76:ec:df:a4:bd:c4:cf:27:
42:3b:62:e3:0b:b6:09:1a:a3:c7:23:9d:d0:58:82:d1:90:ad:
9d:a0:a7:f2:f0:a9:74:1f:0e:6f:fc:ba:18:a8:f9:2e:31:20:
8c:20:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:52:21 2025 by rpki-client