Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: xeEWBv8Ntn+qM0iJD2/dNztJ8+lIfueSQifFE9ZKU5A=
Subject key identifier: A3:27:B5:E2:FF:CC:16:24:34:7C:58:25:9A:D2:23:EF:14:25:1F:6B
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 01968058BE60F90E46F59A35A0B21306B8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 0FB4
Signing time: Tue 29 Apr 2025 07:00:21 +0000
Manifest this update: Tue 29 Apr 2025 07:00:21 +0000
Manifest next update: Wed 30 Apr 2025 07:00:21 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: L+xDdBR9qW9lq3zBVCfpmEDZ6ALx8Vdg3kohy7PAMtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:be:60:f9:0e:46:f5:9a:35:a0:b2:13:06:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Apr 29 07:00:21 2025 GMT
Not After : Apr 30 07:00:21 2025 GMT
Subject: CN=a327b5e2ffcc1624347c58259ad223ef14251f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:41:59:db:2f:65:b8:0a:72:1e:86:fb:eb:
fd:64:26:91:a4:28:d6:80:9b:4f:1f:79:ae:fa:da:
63:57:18:c4:e4:d6:5c:64:4e:38:ad:7a:f7:6f:a4:
a2:ca:9a:cf:2d:4f:34:a1:09:2c:11:cf:cb:dc:3c:
41:ce:7e:33:40:1a:3a:01:5b:00:58:b2:38:3f:dc:
e1:d7:e9:ec:a9:83:f7:11:3d:46:c1:f3:be:c5:cf:
94:42:d4:4b:ce:ef:1e:05:52:dc:f2:f2:32:ce:db:
25:9b:bd:49:54:84:4f:db:9b:f2:2e:ac:77:16:2e:
e3:b0:38:d1:9d:4e:f6:78:6b:2f:05:bc:1b:d2:e3:
34:25:9c:1c:69:ff:ae:e6:96:6d:d3:9e:61:0b:ab:
b3:1a:b8:53:a8:8b:95:7b:14:2d:71:58:8e:b3:b7:
9c:7e:81:3c:c6:37:3b:67:43:e7:b9:1a:6e:1e:28:
99:8f:28:b8:65:87:61:c8:d1:8f:e9:1c:1e:35:1d:
44:75:f7:75:80:ab:2f:fc:77:bb:9b:02:15:8c:f6:
73:0f:dc:70:ca:c4:6e:0d:95:e6:44:b7:bb:92:6c:
1f:e3:e7:c9:a7:5e:bd:7a:05:b0:5f:32:fc:3a:cf:
76:ab:35:f1:11:0e:9e:63:57:5a:d2:e5:2d:23:24:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:B5:E2:FF:CC:16:24:34:7C:58:25:9A:D2:23:EF:14:25:1F:6B
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f1:d9:1b:71:6c:cf:e6:ed:3f:ec:fc:91:1c:12:f7:a6:29:
4e:4b:eb:f0:30:39:e3:9b:04:b9:d0:27:c2:02:1b:30:6a:c2:
a7:b4:f0:eb:1e:e4:b0:bc:ae:bb:08:aa:a7:17:53:93:4b:68:
93:ce:99:62:07:4f:aa:5a:14:2e:ed:74:f7:e1:f3:7f:11:84:
a1:df:9b:0b:d2:f9:37:f0:76:72:35:8d:5a:15:ed:72:19:7a:
ac:9d:b2:fa:d4:48:97:84:a9:e2:2f:f0:42:f3:24:5b:9e:8a:
ac:d0:65:43:98:2f:c1:34:5f:1b:b9:44:ac:d1:d5:ae:32:ed:
27:12:27:ac:24:b8:ba:ab:ec:ab:16:5d:09:86:70:ee:9e:bb:
7a:aa:f6:e7:c8:1a:c1:63:dd:6e:3d:ac:a2:1b:2d:c4:81:b4:
8d:27:4e:22:40:a2:5c:2b:19:c2:35:5d:71:a2:42:d0:70:f4:
02:e9:11:20:d4:1e:93:55:8f:00:b7:5a:e5:5c:f4:c9:03:ac:
76:40:fc:1e:35:d5:0a:42:6b:e8:f6:7f:33:56:5f:2c:36:4d:
a1:21:8e:34:c7:cd:f1:1f:27:b3:b6:16:1b:04:5a:9e:a4:3a:
56:59:e5:2f:39:0c:d9:c2:3e:fc:42:90:74:87:9f:37:7f:6a:
cf:53:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:52:42 2025 by rpki-client