Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: GIUrU2CMyrq1qTvCMAas77DDvotLMy7KptqYqj6re34=
Subject key identifier: EA:04:81:F3:A9:16:17:8B:3D:60:EC:D3:DB:36:70:16:57:74:95:9A
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 01967E6A6A887EDACF47D319C1C04FF22B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 11B8
Signing time: Mon 28 Apr 2025 22:00:25 +0000
Manifest this update: Mon 28 Apr 2025 22:00:25 +0000
Manifest next update: Tue 29 Apr 2025 22:00:25 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: SSTDYbMZ5pscEjve3Bj8c+6eXimmOvIXIEm3y6vOFOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:6a:88:7e:da:cf:47:d3:19:c1:c0:4f:f2:2b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Apr 28 22:00:25 2025 GMT
Not After : Apr 29 22:00:25 2025 GMT
Subject: CN=ea0481f3a916178b3d60ecd3db3670165774959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:ff:a1:da:00:fd:39:c7:34:74:8e:f9:a6:
0c:9a:3d:08:0b:d8:1c:15:9f:7a:12:a9:91:f3:5b:
c7:f0:63:b7:91:59:4e:da:7c:62:2e:f4:5a:a2:86:
8c:a0:6c:ef:05:2f:14:0e:1b:5d:97:b0:a1:05:e7:
ac:12:a7:4e:22:41:97:9f:df:cb:1c:93:35:8f:eb:
86:76:79:b3:7e:89:c5:53:4d:cf:a1:68:ef:03:73:
5e:f1:87:c9:1c:99:5c:d7:cc:09:f0:a4:a7:5c:02:
84:41:62:d7:45:1c:ef:b5:fb:7c:68:fb:65:f6:4a:
66:e2:be:77:09:0c:0a:a7:3c:f4:a8:4a:1a:80:dd:
51:f9:db:19:98:d0:b8:57:71:00:16:31:37:c0:31:
0f:0e:39:8b:11:14:d1:0a:93:5a:a2:c7:58:7c:8d:
1c:89:97:e8:40:50:fb:ee:a3:35:6e:a5:04:e3:42:
ee:0b:d4:d1:99:26:32:60:eb:c2:cb:1c:1d:b9:58:
9e:32:23:36:d4:45:07:66:3e:9b:3d:c2:98:ff:55:
3c:56:08:93:22:e2:ec:9f:b1:12:45:4c:a4:66:e4:
2d:ff:df:61:5c:15:e8:2f:8a:9c:37:21:d4:d4:69:
7f:45:8b:28:96:a4:91:04:e9:25:f2:ce:e3:8d:c7:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:81:F3:A9:16:17:8B:3D:60:EC:D3:DB:36:70:16:57:74:95:9A
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:30:64:2f:aa:c7:f3:a4:27:5f:3a:09:6f:4e:e4:33:d9:81:
e0:27:f2:33:82:fa:ae:93:35:0a:4a:c2:6f:a6:56:e2:e0:e2:
2f:b2:14:00:1a:79:10:66:7c:78:75:4f:72:fe:4c:e9:38:07:
7d:72:44:4e:d0:e2:b3:88:6c:78:6d:b3:5f:3d:9d:77:64:a0:
c6:72:6a:3c:a6:9a:ac:9e:d9:4b:54:3d:77:c4:94:4d:6d:72:
34:ed:ca:e6:16:e8:54:16:14:e7:8c:8f:cd:12:d0:d1:97:63:
d0:ac:3f:b9:56:68:de:6d:e1:7b:14:e9:c4:ae:13:ec:1f:9d:
65:74:be:a8:32:37:ca:54:6c:4b:83:54:48:78:e3:4e:4d:e3:
eb:31:e6:a0:a7:70:19:28:33:4a:dc:e0:44:6b:0d:af:92:d0:
af:5a:4a:7a:23:85:30:0a:7e:77:d0:d6:84:40:3f:13:36:f5:
ae:07:a2:68:62:f9:ee:d4:7a:8f:d1:f7:9c:e1:1a:7e:e7:e4:
87:7b:39:bd:a1:79:d5:8c:98:63:63:b8:c1:e8:54:2d:02:bc:
18:af:eb:1f:be:78:f8:31:d2:1b:5f:04:ea:03:38:0d:84:8c:
ee:7e:50:d5:45:5b:1e:ac:81:4c:88:0d:23:72:f4:6c:28:2f:
b5:13:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:00 2025 by rpki-client