Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: ihGszp38fI1gdZSZ6cbDlHm9txADhSA8RH0lhU/7MPc=
Subject key identifier: 43:F5:09:FD:BF:06:D1:64:D4:7F:1D:BF:EE:D1:76:30:5B:B5:53:55
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019673E70F50DDBC50AE0064B10766CABA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 21:00:44 +0000
Manifest this update: Sat 26 Apr 2025 21:00:44 +0000
Manifest next update: Sun 27 Apr 2025 21:00:44 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: Ouu8uMavYsnzkKq7r2W79RiKgHMXTEnXyX62MaXBryE=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:0f:50:dd:bc:50:ae:00:64:b1:07:66:ca:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Apr 26 21:00:44 2025 GMT
Not After : Apr 27 21:00:44 2025 GMT
Subject: CN=43f509fdbf06d164d47f1dbfeed176305bb55355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:03:9b:ea:c5:f3:19:25:8d:0f:f7:c5:2a:
aa:e3:07:43:c4:19:15:a0:b7:bb:80:a5:be:6b:74:
9a:20:7f:8d:6d:61:70:69:1f:e3:c5:e2:c3:82:4a:
91:d4:2e:7c:25:18:86:95:f7:7f:03:48:a1:18:d4:
96:42:29:bf:47:38:ac:a6:ec:97:ad:80:68:fc:27:
9e:79:91:bf:1c:e7:ef:08:ea:a1:27:b9:2d:7c:80:
b5:c3:9c:77:27:63:70:03:7b:21:50:7d:f0:ab:d9:
8a:46:3d:fb:d4:87:e6:9a:de:b2:51:77:05:9f:14:
e9:e0:e3:94:3a:83:91:77:92:1c:40:d6:7c:9b:99:
7a:6d:c5:62:51:fc:84:85:a7:04:21:83:14:44:c4:
b1:5b:f5:9f:40:e2:1c:13:93:9a:9e:cc:54:04:c8:
3f:59:c9:36:b6:0f:af:d1:3e:52:f6:4a:23:fc:99:
d1:96:54:58:6d:fd:21:06:29:d8:0e:74:b4:c7:59:
d1:ff:4b:11:5f:5d:23:be:e7:0c:99:20:10:fa:50:
28:e8:f6:54:4f:c7:50:c3:7b:19:b2:29:bb:9e:bd:
ca:9e:73:1a:ec:63:22:12:45:85:94:c3:a7:84:43:
6b:ad:9a:d2:24:aa:0e:f8:df:e8:76:d6:ec:79:94:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:09:FD:BF:06:D1:64:D4:7F:1D:BF:EE:D1:76:30:5B:B5:53:55
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e0:84:26:6c:a5:b9:33:0a:45:24:ff:4b:c6:be:07:4b:05:
0a:a9:0d:6e:f5:a6:08:4b:b2:7e:ad:8d:92:d7:a3:3b:9f:2d:
10:f7:4b:d4:b9:ff:aa:2e:5b:86:1a:42:e0:dd:94:8c:56:c5:
0f:a5:92:8f:1e:e3:c8:c6:8d:12:83:e8:ae:c2:5e:be:d7:a8:
9e:2d:94:f2:02:fb:14:56:ae:b4:7c:81:0b:1e:9d:7e:a0:83:
da:27:86:d1:80:2e:4f:ea:09:92:5f:c8:30:b2:50:60:0e:96:
36:dc:28:83:7a:16:5c:98:cd:61:f0:ff:a9:8f:09:22:66:a5:
a2:50:3a:57:ee:a1:e8:d8:34:ff:3f:6e:7a:da:73:2c:ff:a2:
a7:a4:7e:1c:25:f1:3f:ed:88:f6:5a:f4:1e:8d:0e:f8:76:dd:
2f:a6:fc:c2:be:25:66:a3:8d:04:2b:77:06:90:15:8e:28:f5:
68:2a:55:cf:46:51:9a:0a:ff:ab:fb:78:75:b4:ee:d0:ab:52:
90:00:7b:ed:35:84:51:ca:b8:8f:e9:24:a7:af:d8:02:05:af:
b1:2e:f5:a8:20:fa:d9:e4:09:5a:d4:a2:29:86:82:ac:47:91:
b9:83:92:5a:83:a2:d5:45:54:7d:1f:c4:54:fa:89:9a:76:3d:
d1:e6:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:45 2025 by rpki-client