Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File: GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier: 1M+25IP4nuDDXeoetbqEGRZqxxvvk7UNi2Kkrm8Vf6M=
Subject key identifier: 90:33:32:1F:C2:58:58:32:CD:9F:63:CD:3A:B8:1A:02:CA:02:5C:77
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer: /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial: 0196832335DEEEF317D1FABF34538389E699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 20:00:44 +0000
Manifest this update: Tue 29 Apr 2025 20:00:44 +0000
Manifest next update: Wed 30 Apr 2025 20:00:44 +0000
Files and hashes: 1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: ltMNwVlQKtuJpQiIjFkYY3WEx3SLE8pMWRNe6zpQrHk=)
2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:35:de:ee:f3:17:d1:fa:bf:34:53:83:89:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Validity
Not Before: Apr 29 20:00:44 2025 GMT
Not After : Apr 30 20:00:44 2025 GMT
Subject: CN=9033321fc2585832cd9f63cd3ab81a02ca025c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6d:5f:df:12:5c:0a:76:60:c7:44:53:59:fb:
15:db:2b:5c:05:78:7f:09:78:85:51:f6:10:6f:c1:
b1:1c:bc:ee:c0:d9:91:7e:90:2e:c5:66:97:92:b7:
4a:96:86:b7:56:e1:a5:57:2f:4e:c5:3d:09:e3:2f:
3c:94:32:ee:29:e3:0b:b3:18:04:83:e7:b9:24:3d:
00:fe:61:1b:82:5a:9b:6c:99:52:38:f6:9b:49:9c:
fd:ab:26:62:c5:a0:65:94:0e:96:8c:5b:85:d4:81:
b4:5d:b4:f9:eb:fb:1b:bc:0d:98:ca:89:2b:8d:0d:
94:99:38:a6:84:85:d3:60:04:f7:94:ee:ec:36:de:
c8:6c:e7:34:25:2c:b5:a8:cf:cc:b8:f5:3c:f5:52:
e4:ba:8c:34:4f:2f:e7:eb:3a:25:5d:69:b0:e9:1b:
64:4a:e0:76:6c:3d:e9:11:7f:53:4e:48:63:69:30:
63:11:1f:80:29:15:93:a4:63:d2:b9:08:88:98:15:
de:e1:a3:cc:23:ba:d5:c3:18:87:48:cb:f9:82:ef:
ef:03:b9:3d:b6:de:22:46:76:02:53:d8:9b:fb:4a:
7f:08:83:af:71:1e:b8:58:af:4f:b0:f5:78:7d:b6:
1b:ce:55:c0:b7:ea:53:d5:a3:34:c0:3c:f1:60:f7:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:32:1F:C2:58:58:32:CD:9F:63:CD:3A:B8:1A:02:CA:02:5C:77
X509v3 Authority Key Identifier:
keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:eb:0d:cb:cd:52:2e:b1:0d:9a:81:2d:81:59:f7:d4:a5:33:
5f:c9:22:6f:42:f4:97:c6:e9:82:c3:e1:62:a8:50:bb:63:d9:
c3:82:d2:70:7c:f0:a7:ee:6e:6b:97:30:29:9f:d8:d9:3d:1c:
0e:b5:39:1a:5b:82:8d:63:ed:6b:10:dc:6c:e0:96:82:f9:7b:
a0:46:f4:f3:97:c8:11:a5:3b:55:3d:8f:f5:32:fe:62:6c:f9:
02:0e:b8:d0:3d:87:36:f3:b6:be:d6:27:c4:21:bd:56:7e:e9:
85:5d:8c:e1:18:56:6a:98:b0:64:b9:93:cc:8a:13:de:d1:61:
a3:72:55:cc:4f:39:3a:7f:8e:ff:4b:5c:f6:bc:90:90:a6:bc:
03:db:01:c1:ef:55:44:e0:83:47:cb:80:b8:2a:fe:5c:c5:0d:
df:12:03:e5:b7:95:94:ec:9c:a2:a9:30:c5:b4:c2:1d:c7:1c:
96:e1:e5:5a:2d:ef:77:9e:8d:88:e9:49:32:29:fe:e1:9b:ff:
ee:11:19:53:79:ac:6a:8b:36:42:d8:7d:d1:c1:4d:58:0c:53:
cd:29:01:c9:fb:51:3e:e7:64:04:10:5c:12:13:c0:77:4a:0a:
f4:24:f0:82:66:75:75:56:02:a4:53:d0:12:5f:dd:8f:22:21:
7a:b8:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:26:48 2025 by rpki-client