Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier: GgikemRbLjioPi5HTGznDm9Ol60rTpEYK+Iryqbnw4U=
Subject key identifier: 2E:66:56:F4:6D:50:56:FF:5B:93:8A:46:42:6F:E5:25:17:18:B6:CE
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 01967ED8AA170F4C98CCBE5DBCB5F289DCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number: 0BCA
Signing time: Tue 29 Apr 2025 00:00:50 +0000
Manifest this update: Tue 29 Apr 2025 00:00:50 +0000
Manifest next update: Wed 30 Apr 2025 00:00:50 +0000
Files and hashes: 1: BXWkDJgGeE3wLT1lYDsJPAlavfw.roa (hash: irjuewqr+XdI7kgKWav4JZTl4lqEMRRX3Cq/Qdp74jc=)
2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: BlxVMmzLnufj+HtSy6Adlrvj4m4NHn4LFwFV8luaaN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:aa:17:0f:4c:98:cc:be:5d:bc:b5:f2:89:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Apr 29 00:00:50 2025 GMT
Not After : Apr 30 00:00:50 2025 GMT
Subject: CN=2e6656f46d5056ff5b938a46426fe5251718b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:d1:cc:7d:5a:fe:a3:1d:1b:5e:87:6a:fc:
b5:93:66:e9:2f:4c:af:42:95:8f:e2:34:03:a7:99:
8f:d3:e1:b9:7c:c6:5a:31:79:b6:bb:df:a8:1a:db:
f7:9c:c3:eb:ee:af:2a:84:74:e3:59:19:33:af:76:
ab:27:9a:10:7e:e3:c1:c8:8f:c1:0d:aa:34:f7:a8:
98:02:c7:84:64:1c:aa:fc:71:42:62:80:e2:5b:c1:
b3:5e:fe:c9:cb:ff:9c:dd:24:75:1d:87:34:4a:1d:
d6:42:74:b0:ed:bb:76:d9:0b:3b:0e:f6:f8:a5:4b:
56:d8:1e:17:4a:a6:29:3c:22:85:ef:ab:81:4f:e9:
3d:4a:b2:d1:43:91:c2:f1:3f:7c:b3:25:ab:1f:e6:
50:d6:e4:e5:b8:1d:4d:33:f7:73:39:cb:fe:97:fb:
42:88:6c:72:f5:81:9e:78:52:d7:4d:bb:96:ce:fe:
8a:5f:38:f7:84:7b:4b:d2:82:d9:45:10:53:d5:d6:
03:16:42:b4:63:b3:12:26:58:63:0b:1c:3a:6d:47:
0d:45:d0:d2:8e:1f:ed:82:39:5a:a6:f2:32:2c:e7:
56:90:cc:11:7e:3a:9c:50:6b:b0:1d:fb:06:5e:09:
2f:7a:26:84:08:2f:ff:ff:5e:a9:fb:4f:44:f9:fc:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:56:F4:6D:50:56:FF:5B:93:8A:46:42:6F:E5:25:17:18:B6:CE
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:6c:d7:29:73:74:13:b3:17:b6:4d:95:f8:9c:89:18:65:
39:b4:54:fa:75:2c:ae:f9:a4:b5:d3:cc:30:e8:dd:ee:c7:b7:
0a:e2:b3:31:86:72:8d:f5:6b:e5:bd:fe:44:49:c1:7f:31:8c:
4d:1d:46:87:30:1b:92:d1:ef:59:d2:dc:b3:54:bb:90:a6:6e:
c2:81:8e:25:c8:b8:67:bc:62:fb:c6:22:28:c2:2a:90:61:03:
f3:7d:cd:9f:c8:a5:6f:ef:21:c9:22:64:b8:05:39:66:6f:06:
09:34:59:e3:55:e3:56:61:09:e9:cd:d7:02:39:48:98:a0:09:
45:4a:df:cc:cc:57:bc:95:e9:5d:c2:30:e6:48:82:19:fc:9e:
91:3a:d0:00:ea:52:f3:d0:cb:63:f9:a3:89:a2:df:3a:e2:aa:
5e:0d:0f:d9:da:3c:c8:88:bb:d1:30:60:52:5b:50:41:de:24:
a1:2f:eb:cf:38:96:d3:67:2f:4a:b3:b3:cc:18:48:98:a1:9b:
7f:ef:cb:b6:1c:d3:52:98:4e:f0:6b:e3:fc:e0:12:60:38:95:
46:b4:d3:9c:a5:d0:9d:f6:e5:55:9e:32:de:04:c8:c9:51:0a:
37:0e:da:c8:79:da:04:65:2a:d8:3e:bb:be:aa:07:07:10:cc:
8d:49:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:19:00 2025 by rpki-client