Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: Lgo1FUpfekwyxCGokADTZC01GSIBVfzWOWkAj0+Nklw=
Subject key identifier: 5A:00:AD:FD:25:1E:22:8F:07:CA:F9:D2:39:88:5E:EB:0E:B0:D7:14
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019677FB9CCA819505B31B62704F0EA48752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0CC0
Signing time: Sun 27 Apr 2025 16:01:40 +0000
Manifest this update: Sun 27 Apr 2025 16:01:40 +0000
Manifest next update: Mon 28 Apr 2025 16:01:40 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: ds90nlSAdzM+IDUKtZmlXXbhRwF1KTXuZZKA6HWNlwo=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:9c:ca:81:95:05:b3:1b:62:70:4f:0e:a4:87:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Apr 27 16:01:40 2025 GMT
Not After : Apr 28 16:01:40 2025 GMT
Subject: CN=5a00adfd251e228f07caf9d239885eeb0eb0d714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:ad:9b:7e:77:34:2d:fb:63:f3:fe:64:c7:
f2:38:41:02:f9:e7:09:48:25:59:aa:0e:2c:fe:40:
1a:53:e6:73:bc:ee:3c:6b:10:45:6e:74:8e:9a:36:
be:00:4f:c5:04:86:cb:88:f3:06:3d:5c:c9:27:de:
d0:4c:bf:29:46:cd:d5:cf:75:cb:b8:40:87:c6:a4:
e9:d0:dd:d8:d9:bd:56:6b:94:38:7d:6f:6a:7e:7a:
36:30:d2:21:d4:4d:a3:10:96:18:37:e0:e4:fa:8b:
bd:e2:b3:a8:3d:03:9f:2c:0a:18:13:1c:da:05:60:
36:01:4f:1e:be:17:c5:2d:68:fd:eb:d5:71:ee:89:
9d:8e:1f:45:af:c0:04:36:be:09:02:a8:b5:4a:c9:
43:78:cb:2b:53:95:f0:0f:5b:2f:0a:70:e4:44:52:
59:7b:65:70:91:2b:61:e3:18:0c:7b:e0:73:12:c4:
6c:aa:0c:a0:44:54:57:3c:5b:8b:34:7f:59:85:e2:
ae:71:82:5c:f1:00:1f:6a:ad:36:cb:0e:0b:7a:f5:
0d:47:58:fb:fe:eb:80:db:bf:b0:19:dd:0f:77:8a:
6e:11:f8:5a:8f:59:a6:96:b9:9d:ae:8d:db:31:5b:
6c:91:eb:09:89:7c:8a:49:fd:8e:1f:f2:9c:55:f2:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:AD:FD:25:1E:22:8F:07:CA:F9:D2:39:88:5E:EB:0E:B0:D7:14
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:0d:f3:93:82:4d:74:ed:2a:2e:67:ee:2e:78:b4:61:23:
af:f3:83:ed:28:73:ef:85:a7:4a:4d:48:82:72:06:53:2b:fd:
89:bb:88:df:4b:fe:50:60:cf:e7:6d:02:d8:13:21:94:ce:81:
ec:9c:f1:62:8e:30:45:2e:fc:74:64:4f:7a:ea:73:fd:69:bc:
38:5d:96:54:ae:c7:eb:55:c8:3b:d5:b0:45:35:67:1c:c3:dd:
5b:3b:57:58:c2:83:57:92:a3:62:b3:58:b7:01:b1:25:c3:c8:
95:c9:64:0e:91:53:84:d8:08:ef:12:02:38:5d:51:f3:e4:21:
b7:b0:6f:3c:1b:36:13:66:c6:8e:a9:92:e2:b9:aa:68:8b:93:
16:31:28:4d:5b:a0:ee:1e:8c:e3:5b:5e:62:7c:19:7a:7e:ca:
2b:cb:1f:f6:1c:e0:a2:d5:f9:4d:c3:23:4a:37:f7:06:86:13:
73:70:6f:72:35:9d:1f:4b:36:7a:4e:d7:90:8a:5a:97:b4:c6:
cb:e5:8c:9e:3a:ec:9f:f7:22:8c:c7:5f:5a:15:62:c7:bd:1a:
55:72:fe:33:ce:7e:61:af:96:5f:19:c7:67:c9:89:2c:6b:f0:
c4:4d:9b:c0:0c:6b:e0:bd:fc:29:9c:4b:f0:62:58:84:23:33:
ea:14:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:16:05 2025 by rpki-client