Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: +cYZQej2Vi457RWtc4UocZI5s4ZiJaLTbT18E1CrHbw=
Subject key identifier: 52:88:4B:9F:94:77:22:25:AE:D3:79:63:A3:D6:DF:58:53:02:D5:39
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019678312EDE30E844C365DFEFCFA0A0AB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 08AF
Signing time: Sun 27 Apr 2025 17:00:11 +0000
Manifest this update: Sun 27 Apr 2025 17:00:11 +0000
Manifest next update: Mon 28 Apr 2025 17:00:11 +0000
Files and hashes: 1: CK5OwOiGaEqVwo-YKnguP745KMY.roa (hash: A/BEklrCD+whYVqSqE4ctRcYYnzQ35ctbU126Ujt5AA=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: tVdsoYiGe/DdOhvwwbd2XxDcTNg/OZ435ayeJZgSOt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:2e:de:30:e8:44:c3:65:df:ef:cf:a0:a0:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Apr 27 17:00:11 2025 GMT
Not After : Apr 28 17:00:11 2025 GMT
Subject: CN=52884b9f94772225aed37963a3d6df585302d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:d3:4d:34:b4:b1:04:52:d6:ed:33:8a:41:
83:20:3e:df:1d:fb:63:83:91:04:ea:41:86:83:cf:
11:b5:89:1c:e2:ac:b7:43:c8:1b:fa:b1:f3:47:45:
da:47:6b:eb:f5:ef:5e:c2:ab:53:3a:07:bc:55:c1:
7d:31:14:b9:85:bd:1e:75:88:9f:ef:79:93:38:bc:
dc:6c:aa:46:b8:2d:94:3a:ea:5d:11:98:e1:19:2d:
13:19:51:31:d6:b0:0a:be:49:75:8c:bc:79:40:f4:
e9:a7:9d:93:05:73:c4:2d:31:c9:09:c8:8e:54:2c:
db:cd:17:a7:26:6b:85:d7:e0:b7:fe:0d:55:f4:52:
1a:40:d6:c3:71:00:3a:a9:52:84:38:2a:f6:33:64:
9c:e4:f5:24:f0:5e:6e:fe:3b:bd:bd:14:6a:32:c6:
34:e8:95:93:dd:90:c1:73:e8:43:68:85:17:fa:02:
35:78:db:62:8c:10:de:06:8a:cc:7e:3b:59:10:16:
ae:01:ff:dd:f0:3d:eb:1b:17:f8:3e:80:e5:6c:a1:
2f:cc:90:ab:8b:53:d5:cf:73:10:45:bb:ff:0a:37:
e4:9f:0f:69:ba:56:f3:e7:78:38:30:e4:78:e6:98:
d9:7f:8f:91:b8:65:fd:d1:17:e3:81:0b:c6:41:38:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:4B:9F:94:77:22:25:AE:D3:79:63:A3:D6:DF:58:53:02:D5:39
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:63:38:b0:5d:fa:03:1b:aa:6b:dd:0f:1b:16:93:12:6d:
5f:2a:47:a6:9e:fc:05:0f:32:c9:66:01:7b:84:2d:bf:f7:ed:
b2:83:e8:92:3c:21:23:1e:6c:25:f9:69:47:9b:16:26:a2:2c:
5b:a5:4e:45:a7:d1:4e:58:8d:2c:69:77:94:e4:20:93:a3:96:
33:8b:b1:91:22:92:ce:a6:8a:60:e0:ec:4d:1c:22:be:23:58:
f8:b6:3c:ff:1d:60:cf:71:f7:51:9a:a2:cc:09:f1:f2:7c:6d:
84:ab:27:f0:43:27:08:2f:c6:4d:56:b4:44:69:cc:70:e2:d1:
c0:a9:32:5d:7b:ea:9a:46:58:40:74:4e:68:b9:0b:1f:b5:6f:
7c:58:37:0c:77:65:77:15:34:8b:2f:42:bc:1d:2c:83:67:ad:
24:b0:ef:1f:0e:eb:c1:c8:ba:31:6d:60:b8:3c:bd:d0:11:cc:
bd:58:81:21:94:25:8f:c6:1e:06:4f:a5:aa:38:d2:d0:57:2b:
61:33:14:59:04:0f:85:87:9c:2a:13:c0:37:94:8f:57:65:cd:
a4:00:3a:0e:15:b8:30:10:81:3f:ac:10:48:9f:6f:22:cf:26:
eb:35:fb:13:69:03:e5:a1:2c:ea:02:03:86:a9:67:8d:89:03:
ad:40:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:10:31 2025 by rpki-client