Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: 5RRmFOO0+eifjG2astwYivagGzP487uBmkB/s25B8og=
Subject key identifier: 88:FE:2A:C4:B1:02:AC:D1:C6:A3:A2:E8:DD:65:6D:96:66:E4:F7:1F
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01967FB4EFFE7114C2F5FAFD6E3CC3DB151A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 04:01:26 +0000
Manifest this update: Tue 29 Apr 2025 04:01:26 +0000
Manifest next update: Wed 30 Apr 2025 04:01:26 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: HgQgf1cC3Fa6Hm99QaD+c6FAaA0nOy072lUOz8ns1Rg=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:ef:fe:71:14:c2:f5:fa:fd:6e:3c:c3:db:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Apr 29 04:01:26 2025 GMT
Not After : Apr 30 04:01:26 2025 GMT
Subject: CN=88fe2ac4b102acd1c6a3a2e8dd656d9666e4f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:4f:d3:73:b9:79:21:56:f1:df:92:8f:82:
19:25:ad:8e:83:63:56:dc:aa:4b:b7:6d:38:f0:bb:
94:d0:c0:46:f3:15:81:c1:b5:ec:d7:37:89:53:c1:
a7:7c:0e:c8:a3:ac:f5:3a:a0:de:f1:78:e5:fa:20:
2e:6b:ef:9d:57:29:1d:bf:8d:87:78:1b:63:76:11:
81:e2:49:24:7b:58:9b:f9:e4:a3:7c:c2:5b:8b:b9:
85:7a:c2:bb:92:98:d5:c8:20:bb:80:ce:b1:db:b1:
74:37:6a:e7:5a:9b:4b:c8:01:b5:8d:29:3f:7c:69:
8e:bf:26:9c:6f:4d:59:7e:56:01:08:b1:36:7b:5d:
1b:e2:5e:c8:52:72:f8:3d:ea:fc:ec:73:7d:6f:f0:
d0:d3:90:d0:4e:02:a6:37:1c:9d:c9:44:f3:90:92:
05:e4:8f:a7:21:6d:7c:31:47:9e:a5:67:dc:57:28:
32:30:c0:5b:7d:76:85:38:62:17:25:ed:b5:14:83:
fe:7c:47:07:9e:ec:8e:19:5b:79:6d:f3:36:18:01:
b1:9d:73:d8:3e:d6:19:70:78:07:cc:7c:ce:67:c3:
9f:15:4a:89:59:58:09:23:40:cf:a9:da:d2:13:c9:
c3:d3:83:5e:86:d1:15:ec:8a:13:a3:bb:2b:f4:56:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:2A:C4:B1:02:AC:D1:C6:A3:A2:E8:DD:65:6D:96:66:E4:F7:1F
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:3a:9b:29:4b:2c:56:86:58:68:dc:16:6c:f8:c9:2d:f9:
9d:ec:e6:14:62:3d:d5:68:3c:78:5b:88:7f:58:6d:32:1b:f9:
7a:78:f0:07:6c:53:3c:c8:ab:5b:33:25:90:e4:9e:fd:5c:b2:
35:bb:59:8d:ca:17:b8:3d:b8:ac:77:c9:a9:06:48:e2:27:4e:
58:2b:74:e1:a3:38:ed:d0:be:a3:a9:1d:3c:69:78:ee:8a:2a:
df:24:39:a6:ae:c9:d7:9f:0d:6d:5f:1a:18:14:aa:01:b6:7c:
13:7f:31:86:0b:38:d3:7b:33:c4:8d:a0:b6:2c:92:80:6c:48:
61:04:5a:e6:fa:1f:15:cc:26:89:e6:fb:bd:47:e5:e7:60:68:
6f:21:d6:bb:34:82:26:d4:59:be:10:ff:ba:81:dd:53:4b:2e:
72:2a:93:6a:08:d7:52:95:0e:d9:36:02:74:3a:d8:2f:1b:e7:
4e:c8:11:50:b0:5f:8c:38:e4:2d:97:5a:a6:d9:3d:31:e4:17:
a0:8f:c1:ca:ab:27:4f:d4:39:a6:55:ce:cc:e7:5e:b7:07:91:
93:a7:43:5c:61:5a:02:3f:b5:aa:a7:9c:e0:75:55:2d:e7:a1:
8e:29:06:11:e5:07:e7:7e:e5:b2:80:8e:6e:68:43:a1:48:dd:
f6:5e:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:26:31 2025 by rpki-client