
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier: TMpLNDiE8C4xM+2vetHLwbmuDpwMXKF8ATnsJrqI6XA=
Subject key identifier: 3C:6D:7D:3F:5E:88:FB:76:1E:31:8E:95:E8:2A:99:5F:E6:3C:6E:99
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 01967C7C58292B0BAF2A243CC85F679D1C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number: 09BD
Signing time: Mon 28 Apr 2025 13:00:45 +0000
Manifest this update: Mon 28 Apr 2025 13:00:45 +0000
Manifest next update: Tue 29 Apr 2025 13:00:45 +0000
Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: Bdy2mLg4FNyRU0yrzfBkrtKhHIUiSgsmfkQVru+Dd/Y=)
2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:58:29:2b:0b:af:2a:24:3c:c8:5f:67:9d:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Apr 28 13:00:45 2025 GMT
Not After : Apr 29 13:00:45 2025 GMT
Subject: CN=3c6d7d3f5e88fb761e318e95e82a995fe63c6e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:d3:22:56:40:73:53:4e:89:2d:42:5c:16:
a4:32:1e:ad:ec:da:b2:6c:1d:a6:11:02:49:30:40:
0d:1c:6d:4c:d6:11:89:c7:39:5d:b4:d3:c8:f9:f1:
c0:2b:c3:f6:80:e6:19:38:3a:88:05:cd:03:2f:2a:
01:28:42:8a:76:d8:29:7b:e2:7b:49:e4:84:f5:74:
7e:48:40:e4:6f:1c:72:58:45:ad:77:c4:90:ff:70:
29:eb:e2:73:03:88:6e:c9:9f:2c:5c:05:39:10:dd:
95:1f:54:db:dc:1c:01:0e:bb:ec:f4:7b:01:8b:ee:
be:f6:16:d3:6e:4a:1c:d4:bf:23:a5:b1:8f:bf:74:
33:67:92:e0:e0:cc:8e:00:ee:af:ee:e9:b0:e7:7c:
e7:39:ae:e9:d0:3e:f6:9c:f1:04:ec:e4:49:4d:a5:
d6:1b:03:9f:77:17:19:29:50:80:47:0b:63:33:e6:
31:3c:8d:9a:21:55:f4:9c:79:e8:92:0d:0d:7b:9d:
c8:ec:61:ef:01:68:d2:a5:fe:19:47:7c:2a:18:55:
1c:9c:0c:59:28:1c:ad:50:9f:64:bf:0e:75:26:33:
d9:77:a0:71:6b:8b:17:8b:2f:59:8e:12:28:36:8d:
f9:f0:34:fd:d5:6f:e1:d6:f8:fa:4e:d7:f2:21:64:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:7D:3F:5E:88:FB:76:1E:31:8E:95:E8:2A:99:5F:E6:3C:6E:99
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:27:8a:42:ee:31:09:96:95:b0:d1:d0:48:b1:0f:73:1e:
a1:f7:26:c1:27:2f:6b:92:cb:5a:91:ea:73:b5:03:b8:50:94:
ac:9d:b3:ff:6a:57:c4:64:46:9b:a8:5d:af:a9:1e:be:3d:9f:
0b:11:f9:de:7d:0f:0f:84:dc:85:f1:eb:4a:51:3e:f2:39:77:
ea:41:10:32:b5:c1:06:07:ce:01:c6:93:94:11:18:a4:c5:a9:
dc:8f:5e:84:65:36:96:2e:f1:d5:98:a7:ca:6e:b7:14:14:f2:
d1:09:6c:f4:6b:d2:40:85:1c:d2:05:2b:f1:c0:ac:9b:62:ff:
43:92:69:60:81:30:48:78:5d:1a:3a:bd:69:13:7d:85:d8:46:
39:cc:eb:f8:38:5f:1f:bd:39:21:03:fa:6f:f2:47:d3:61:f8:
20:86:9f:f7:bd:30:16:9d:9e:8c:f1:bf:db:f7:51:cd:a7:4c:
db:0f:7d:58:bb:8b:55:8e:22:fc:69:15:23:5d:54:da:3b:6a:
a0:62:a9:1e:18:6b:d5:e5:01:00:39:ec:15:07:5c:00:05:75:
8a:ca:01:d2:ff:2d:01:d8:2b:71:c4:10:cf:1b:87:17:ca:7d:
4d:10:50:0d:fa:ad:40:25:8f:f3:11:a4:5b:cc:82:95:e6:65:
a9:fb:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:05:57 2025 by rpki-client