Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: dXkSnftCHby7NP/mdEe+sXbtPDpWahkdg0VuRjS//ts=
Subject key identifier: 6E:51:1A:E9:43:4D:95:44:4D:09:3A:A9:C7:B6:92:84:FF:38:1B:E0
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019694F29E0791835DD627759F6361D53703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 12DD
Signing time: Sat 03 May 2025 07:00:50 +0000
Manifest this update: Sat 03 May 2025 07:00:50 +0000
Manifest next update: Sun 04 May 2025 07:00:50 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: 7glT5BwQRa3lblIJBKXmsrP7zkxvN6CRRi2cOoz0LGY=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:9e:07:91:83:5d:d6:27:75:9f:63:61:d5:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: May 3 07:00:50 2025 GMT
Not After : May 4 07:00:50 2025 GMT
Subject: CN=6e511ae9434d95444d093aa9c7b69284ff381be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:10:8b:15:13:b6:8c:f8:ab:2a:0c:9c:55:
8f:d1:ed:85:49:36:d9:b6:2c:94:c0:35:55:62:28:
ec:7f:59:7d:1d:d6:7c:6f:9f:20:87:00:cf:b2:0e:
16:e0:e3:de:6d:20:1a:ee:ab:ff:d4:75:c4:98:27:
91:3f:05:d4:17:92:dd:db:44:a5:df:b6:df:7d:36:
f3:48:0b:da:4f:b3:e2:fa:6c:32:9c:a7:d8:a9:2c:
eb:d5:58:95:76:17:4d:55:08:8b:12:ac:d4:d6:c9:
11:41:93:f6:bf:d7:22:f8:23:16:9a:5d:df:b2:f6:
5c:e5:f3:bd:5a:69:8e:2e:b0:2b:a1:c3:6a:95:b9:
8f:02:0c:02:c3:20:47:a5:f0:5e:ee:21:af:ab:73:
eb:9e:c4:d7:61:92:e7:25:63:78:30:e1:5e:20:f6:
b7:1a:3a:ae:32:6f:94:15:b4:55:b2:31:3e:a0:15:
bc:65:4e:5f:83:59:6a:fa:76:b4:ff:ec:8e:81:9d:
31:68:e1:61:95:9e:6d:62:7f:dd:db:a7:a9:28:4c:
4d:2e:ad:1e:e8:6e:9a:4f:ed:46:45:1f:87:69:d7:
33:bf:38:25:6b:73:9a:99:b8:38:2c:b7:6d:e9:6d:
33:0d:66:fc:12:b8:29:4f:ff:50:6e:63:b2:dd:ca:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:1A:E9:43:4D:95:44:4D:09:3A:A9:C7:B6:92:84:FF:38:1B:E0
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:77:b1:e7:66:00:9e:6d:a3:bf:5a:32:f2:9a:db:82:0a:
81:0e:91:e3:b5:37:5d:9f:3f:b8:ae:29:43:7b:38:08:d8:35:
49:00:80:aa:45:54:84:9f:97:71:09:79:f5:91:52:7a:d5:50:
ce:da:5a:81:70:dc:08:f4:fe:82:5d:f5:00:f2:0f:e1:86:6b:
b8:b7:6f:59:89:18:67:4d:a6:2e:c1:7d:cb:2a:6b:ad:01:ca:
70:f5:89:11:07:fb:56:56:dd:45:03:62:6f:91:fb:00:92:f7:
46:1c:03:d3:4c:de:ff:2f:ea:2d:b0:cd:2f:4a:6b:0b:4d:a5:
b0:78:67:c6:91:a9:02:1a:5d:7e:25:cf:4f:dd:48:d6:b2:e5:
13:fa:82:10:71:83:4f:d2:66:5c:b1:81:94:bf:dd:da:3b:7c:
df:da:63:49:0a:c8:85:11:3c:92:07:23:ec:71:b7:7a:9f:76:
6a:55:7c:4a:b5:da:78:3d:19:62:32:d9:38:35:ee:24:31:42:
42:86:23:10:0b:99:f8:96:21:14:de:e3:61:f9:aa:7d:38:5e:
06:bf:6a:78:15:5a:18:48:ad:67:9b:28:24:1d:15:e3:7e:ff:
cc:70:16:e3:1d:a3:59:40:f0:16:61:da:5e:c1:44:4c:f3:85:
57:68:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:37:50 2025 by rpki-client