Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: eXwe/1I2UfiPg4F9hFIO7as3b2UiKyKA04Akc0ptukA=
Subject key identifier: 88:BF:9F:50:1E:97:16:30:45:5C:7C:97:0B:5D:3C:64:FA:57:73:F7
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 0196899313DE3AB5B7B0820B6BA725330747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 02:00:39 +0000
Manifest this update: Thu 01 May 2025 02:00:39 +0000
Manifest next update: Fri 02 May 2025 02:00:39 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: K/ZPB6uQ9rlpTqgB/lD65zQZdVsiSF6zszCAw0iUVkM=)
2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:93:13:de:3a:b5:b7:b0:82:0b:6b:a7:25:33:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: May 1 02:00:39 2025 GMT
Not After : May 2 02:00:39 2025 GMT
Subject: CN=88bf9f501e971630455c7c970b5d3c64fa5773f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:7f:9e:af:87:aa:71:8f:74:46:33:4b:8a:
63:76:78:76:5e:23:1f:8f:05:9a:5c:d2:b0:a4:68:
b8:0b:91:00:7e:79:4c:40:3d:a7:2d:e9:ab:fb:e2:
90:82:7b:fe:c3:86:a5:23:15:a0:28:e1:c5:dc:52:
cf:ea:cb:a0:41:98:34:50:34:84:16:10:21:5c:b3:
10:7e:67:ae:85:34:36:d9:31:16:cd:1f:df:ac:40:
5a:60:39:1a:37:87:27:a1:ac:03:43:ac:e8:63:57:
89:b2:24:41:b2:0b:0e:d6:49:cf:74:2b:92:88:f1:
1c:d6:bc:af:ef:03:44:fe:e3:fc:f8:9b:dd:4e:cd:
6d:ee:2f:27:df:37:99:19:5c:f7:49:19:27:73:8d:
0b:37:90:9f:f9:af:18:2b:2f:73:3b:08:21:74:33:
60:56:c8:f4:54:cd:e4:b1:db:41:54:4c:fe:9d:03:
df:10:d1:b3:7e:ca:f4:44:70:29:8b:ad:c6:2e:e5:
3c:bf:45:79:f5:9b:2c:d8:70:dd:53:cb:7f:da:dd:
66:6e:c8:fc:ae:9a:b2:2d:92:0d:62:89:73:3e:1a:
39:6a:8e:25:0c:4f:6b:ce:f3:37:3e:7b:71:af:f2:
e9:f6:9e:f2:a2:ba:dc:2a:f7:96:b8:99:32:e7:a1:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:9F:50:1E:97:16:30:45:5C:7C:97:0B:5D:3C:64:FA:57:73:F7
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:ae:76:8a:c8:ce:d3:9d:82:1f:cb:1d:38:0b:57:80:fa:
af:29:a0:6a:3f:69:b8:bc:0b:1d:ce:2e:60:f9:11:b1:6a:47:
46:93:e9:03:cb:14:c0:a5:f7:ea:a2:02:1d:54:92:e8:12:ec:
6c:20:70:8f:0e:4d:dd:a5:51:1a:c9:3b:92:a9:ed:84:a2:7f:
49:c8:03:2a:68:6a:f6:48:39:5b:f9:44:ad:8e:ee:c5:64:1e:
44:c1:d4:97:09:a0:8a:42:c3:7c:d9:e2:cb:2e:12:12:f7:ba:
41:78:82:ec:a7:76:43:18:64:d6:dd:45:81:9d:d8:c6:d7:38:
39:02:b3:06:db:f2:56:dd:25:71:cb:08:ab:86:82:3a:b3:a4:
a7:ba:94:d0:cb:44:c0:cf:bf:81:eb:f2:29:c3:71:f1:56:8f:
5e:e4:40:c0:b6:b6:42:d4:cb:94:02:b5:71:77:54:bc:b1:4d:
6b:bf:aa:97:54:85:15:53:f5:95:d8:ab:57:1a:84:87:c2:3c:
70:ec:f0:a1:bf:a0:da:48:83:a3:fc:02:58:31:26:6c:4b:29:
51:6f:56:a0:6e:5a:f6:a1:a0:5e:75:bb:0f:2d:87:2e:dc:e9:
43:0b:75:4b:4a:06:f8:8b:6c:c8:06:41:f3:1f:48:24:b6:d9:
b7:d2:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:35:12 2025 by rpki-client