Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: Em0gnMsTV80VKCZZRjeGYrCmNqC9ZKqKq1ZOxlYEE2c=
Subject key identifier: DF:3D:47:F2:11:D1:5F:E5:22:30:31:88:18:31:D2:34:07:09:B6:93
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 0196748C27EB4BF54D4E140F88A916143ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 14E3
Signing time: Sun 27 Apr 2025 00:01:04 +0000
Manifest this update: Sun 27 Apr 2025 00:01:04 +0000
Manifest next update: Mon 28 Apr 2025 00:01:04 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: 5Nl8m/jWmcr0ufpurBtEBIrEWjC7KIR6vUD7IpkR/+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:27:eb:4b:f5:4d:4e:14:0f:88:a9:16:14:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Apr 27 00:01:04 2025 GMT
Not After : Apr 28 00:01:04 2025 GMT
Subject: CN=df3d47f211d15fe5223031881831d2340709b693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:99:2d:7f:18:53:9b:8d:92:46:a8:af:a5:
ca:ef:25:c9:71:60:eb:7c:e4:33:cc:12:1b:61:61:
10:cd:3c:09:ad:2f:ef:9f:c8:29:55:bd:22:56:4b:
66:c1:44:35:aa:07:2c:76:60:26:cb:cd:67:70:31:
2c:7a:30:16:8f:4c:7f:d3:7d:b6:55:e0:d4:a4:85:
d4:07:31:24:77:bb:e1:0b:44:a0:3c:77:59:55:38:
eb:3e:34:d9:23:8d:5e:53:5f:7a:fe:8d:53:59:0e:
ca:0d:08:d8:8e:3e:ab:a1:74:ff:49:42:45:7a:b3:
b4:80:94:25:ad:89:d7:c0:f5:77:e1:ef:5f:c2:60:
39:ff:a9:c6:1f:c5:f6:86:e3:56:f2:49:56:24:71:
f0:ee:ac:60:20:46:42:5c:db:7b:e0:a9:d0:d6:60:
b4:52:8a:d1:1e:d9:f9:8c:83:03:13:db:53:3e:03:
5d:6b:92:b8:94:ae:7f:bc:f0:a3:71:89:7b:1e:47:
be:c3:35:16:16:ed:3b:fc:a5:74:cd:70:97:dd:03:
8b:8f:4a:07:27:47:cb:10:b8:74:e0:9b:0c:d2:41:
c1:05:cc:4c:c9:d6:c8:fb:58:5b:d6:dc:6f:ee:68:
c5:2a:62:b2:f9:0c:bc:9b:dc:9c:9e:17:9c:e4:55:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:47:F2:11:D1:5F:E5:22:30:31:88:18:31:D2:34:07:09:B6:93
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2d:d3:ee:2f:d4:a2:33:04:4c:3d:46:f4:41:4f:0d:2f:9f:
0a:12:86:0c:a4:b0:05:4c:34:12:21:85:c9:51:7e:01:ee:65:
22:3c:56:ed:fa:cd:cb:98:ee:1c:e1:7d:9e:0d:09:a2:9a:42:
5f:14:27:a8:9e:20:3e:15:9b:2c:4b:57:80:85:82:bc:55:31:
c7:24:47:9e:44:3f:47:5b:06:6d:b0:c6:f1:fb:14:60:ac:65:
a6:aa:50:34:22:80:8b:71:37:ca:97:74:19:cb:c8:e9:e5:8b:
46:10:a9:7f:16:7c:e3:83:e5:94:19:99:3c:a7:10:c9:fb:05:
f4:96:43:09:b6:cf:bc:e4:0e:b4:a4:d0:d8:81:9b:07:4f:fe:
54:34:55:aa:cf:c4:a4:58:2e:c0:ea:67:30:3e:86:af:8c:3e:
f4:5a:eb:2b:e3:a8:33:ce:10:15:e4:a1:59:b1:59:ed:60:43:
24:4b:a6:ce:da:23:f7:b9:a2:1a:24:92:56:24:2a:8a:86:46:
48:92:6d:54:79:eb:21:41:ae:4a:6e:b9:01:02:e2:f5:8a:70:
a3:d1:cc:bb:41:16:1c:e5:ac:10:00:a3:cd:16:4d:a2:02:bc:
66:3f:f9:d2:5c:50:69:c9:9e:21:ed:6a:87:f6:d3:e5:d1:4f:
b3:16:35:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:42 2025 by rpki-client