Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File: gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier: OBSv1D3Tl7Dzf8QpevxUtQmnCAPd6RiHS9lu3Qjq3no=
Subject key identifier: B0:E7:DD:FD:BA:4C:6C:C0:45:12:B8:C0:F9:13:36:E7:D7:B2:11:52
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer: /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial: 01967EA1AE00CB6155D344445365E12084EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number: 04BF
Signing time: Mon 28 Apr 2025 23:00:47 +0000
Manifest this update: Mon 28 Apr 2025 23:00:47 +0000
Manifest next update: Tue 29 Apr 2025 23:00:47 +0000
Files and hashes: 1: Ui37pni8yZO_R93Vyy6g6ty1CZs.roa (hash: KVFAYIQrtJyTceCsFbCiblO1P3leUs2Y5nLFzfChjkg=)
2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: VkqC2elJbAWjwPwhVc9Ju60xawEQP+5OEGNjwKep/wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:ae:00:cb:61:55:d3:44:44:53:65:e1:20:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
Validity
Not Before: Apr 28 23:00:47 2025 GMT
Not After : Apr 29 23:00:47 2025 GMT
Subject: CN=b0e7ddfdba4c6cc04512b8c0f91336e7d7b21152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:e5:b9:39:ed:f0:56:84:fa:01:e0:c6:fb:
bd:79:de:40:cf:de:6a:64:fb:0c:8d:0a:35:51:ba:
b4:fc:f9:6b:aa:e6:66:c6:10:d9:49:db:0d:e0:e9:
fc:70:fc:ff:8b:fa:97:65:41:14:86:4b:e4:01:a9:
15:ab:f5:b0:44:ef:d8:92:d0:11:34:46:72:ca:6c:
28:61:28:8f:84:57:f8:71:48:82:de:ab:29:4b:4e:
ec:d8:16:ed:5a:b7:92:8b:e4:81:56:c4:1e:49:52:
fd:32:83:5b:0e:65:39:e6:9b:94:e6:1a:c2:38:91:
ef:80:8f:b5:e1:1f:7a:2e:45:16:c3:a2:0a:d2:a2:
91:7e:62:aa:2a:d4:55:ab:f2:18:aa:36:16:8b:09:
79:b8:ae:47:0c:7b:50:45:7e:4f:ab:ed:f1:5e:35:
11:f4:23:79:7f:63:7b:52:81:8e:ac:ab:5f:4a:2b:
c2:e4:35:b6:70:5b:cf:2c:1c:16:3e:e5:65:d2:c6:
b7:fc:01:25:61:fd:ea:04:dc:29:b2:97:0d:cf:19:
89:9c:44:9d:08:7a:2d:90:07:37:1c:9f:d8:d1:f0:
48:c8:6c:a7:e0:de:74:78:ff:fe:10:14:e8:eb:0c:
bd:81:62:f9:e3:4b:f4:e6:9b:86:66:45:6a:3d:98:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:DD:FD:BA:4C:6C:C0:45:12:B8:C0:F9:13:36:E7:D7:B2:11:52
X509v3 Authority Key Identifier:
keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:ff:2f:84:8b:0b:7f:16:d4:e0:b6:b3:f4:84:70:0b:f0:
ad:a4:c7:38:32:56:2b:6d:4f:ba:b3:11:f8:a6:37:4a:2a:57:
fd:1d:d0:93:10:c3:a8:1b:86:03:61:23:e4:86:59:43:d7:52:
0f:e2:07:29:40:11:3f:a7:eb:4a:ce:3b:19:f4:77:1e:19:a7:
65:f9:b7:67:da:43:ab:32:84:0a:b6:61:68:7a:dd:17:18:17:
d5:60:90:88:fa:9c:b5:f2:c8:b0:d2:e6:09:de:50:86:59:25:
fc:cb:13:67:d9:d3:0e:9b:e4:db:8a:16:e4:a2:54:5a:1e:b6:
b7:bf:6d:a9:75:b4:6a:3e:5a:41:52:61:f5:60:a1:da:bc:be:
09:1d:19:35:3b:40:5b:52:95:7e:10:b7:90:ce:c1:25:f4:24:
c6:88:97:39:3c:28:34:77:00:63:82:c9:fb:f6:0b:56:18:17:
98:54:26:7f:77:c8:39:e9:05:70:b1:41:80:fa:08:26:ca:f1:
86:e0:e7:f8:6c:76:b5:dc:87:f1:4c:51:c8:12:f7:9d:0d:7d:
1d:9a:fb:31:21:b4:2b:60:b9:47:e2:b9:2c:3c:d9:a6:67:b6:
79:b4:29:b2:58:61:fc:08:48:d3:34:17:80:c9:56:e6:15:9d:
e6:47:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:51 2025 by rpki-client