Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: +iXJY0pWlzD6GTN7QWmUt8+4QMD+XCPaud+3Stg/xOY=
Subject key identifier: 92:13:44:49:CD:64:C0:7C:D9:AC:80:26:5F:79:E1:EC:F3:1A:A0:F2
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 01968C268A6BBB6829E3B3030DB93AFECCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 0E1D
Signing time: Thu 01 May 2025 14:00:58 +0000
Manifest this update: Thu 01 May 2025 14:00:58 +0000
Manifest next update: Fri 02 May 2025 14:00:58 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: 6CbZ4MDmkO+K6qSb9jf2D8PviiOBhKkddHg6eLpMxh4=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:8a:6b:bb:68:29:e3:b3:03:0d:b9:3a:fe:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: May 1 14:00:58 2025 GMT
Not After : May 2 14:00:58 2025 GMT
Subject: CN=92134449cd64c07cd9ac80265f79e1ecf31aa0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:03:24:a6:d1:02:33:2b:fd:b4:51:50:9e:
6e:a8:70:2c:8a:e6:01:3f:82:79:29:19:e8:4d:92:
6a:b9:1e:36:fe:01:eb:d7:f6:03:63:f7:15:7d:36:
5e:f4:2a:aa:d2:b7:b5:11:b8:39:72:76:22:76:97:
ec:56:a9:e2:0e:14:de:26:84:a9:a9:de:52:4a:53:
f6:9a:05:8d:fb:1a:58:29:3a:f9:9d:0e:a2:93:5b:
87:2c:48:1a:16:44:61:5f:cd:22:4a:eb:29:f3:43:
d9:6a:94:44:62:d5:7a:57:9c:14:97:9b:54:36:c9:
40:27:51:75:d0:8f:0c:22:36:10:e2:7f:4e:f6:58:
8b:8a:70:b0:af:9d:94:90:3d:f4:c1:cb:61:85:0f:
23:14:0e:c3:50:6f:87:ed:15:bc:00:a7:1c:d3:46:
9d:c6:7b:37:58:53:c7:92:3c:b8:1a:5f:b0:5c:ae:
51:f0:ce:7a:05:ba:93:25:f3:a2:c8:9f:ea:7e:aa:
aa:6f:9f:4e:c3:d0:e9:57:b1:7d:fd:70:d7:c5:7b:
4d:55:9b:fc:38:b9:92:9d:6a:8c:6a:4c:bf:dd:08:
2d:80:de:14:df:d1:e8:cf:f0:0e:2c:02:f6:95:47:
ac:f0:e0:57:89:e4:47:2a:52:6c:ef:f4:e7:59:b9:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:44:49:CD:64:C0:7C:D9:AC:80:26:5F:79:E1:EC:F3:1A:A0:F2
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ca:de:18:f6:4a:2e:b3:a2:10:93:e6:a9:de:1b:94:cf:d7:
71:9f:86:dd:84:d1:e1:f6:01:32:b2:82:b1:ae:83:b0:3a:4a:
a3:61:31:3d:68:f9:d1:94:a8:53:c4:70:58:ee:4f:4d:a3:69:
95:70:d5:f2:64:16:b9:23:00:f2:ff:6b:a5:2d:e4:8c:a0:85:
bc:cf:31:86:ba:74:9a:a5:11:6e:60:68:08:6a:ea:62:63:a4:
5c:ce:27:20:bc:70:2e:68:7a:cf:f4:c7:ec:5b:a5:d6:5f:6e:
9a:2f:6e:d1:42:23:73:3a:2d:1f:4f:0c:31:e1:29:a3:61:dc:
18:b5:3c:62:9b:21:f8:d8:43:66:8a:59:7d:96:a5:0b:7e:e3:
9e:2b:db:fb:98:82:8a:e3:5c:60:be:79:33:cb:04:ba:5c:81:
2c:fd:96:0e:31:2c:ed:23:82:88:27:d0:9f:b2:8a:10:5b:cd:
09:25:b2:cc:73:da:c3:2e:56:04:fe:37:44:cb:03:51:d2:09:
54:b4:2a:ec:b9:ff:2e:11:91:14:ed:13:ac:0d:a0:2f:1b:44:
49:00:91:f9:04:3c:7f:5c:6f:23:dc:b8:94:b1:eb:b5:a6:19:
d0:a2:0e:12:d0:77:78:8e:2c:f8:13:60:dd:2d:0f:d8:13:d5:
fe:ef:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:31:11 2025 by rpki-client