Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: q+v7jiYQ7RY94mSeHdDgZXQsYqchbBuxP7M4tor/nzM=
Subject key identifier: 50:24:F6:95:E6:F0:41:A6:5C:C2:00:B0:EF:32:D5:C1:26:D3:0F:78
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 0196A2E578C119C5120869699AD5E8F78E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 0466
Signing time: Tue 06 May 2025 00:01:09 +0000
Manifest this update: Tue 06 May 2025 00:01:09 +0000
Manifest next update: Wed 07 May 2025 00:01:09 +0000
Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: pZ43Yggsks0gXup4b/GHIlcBfDpKj5LJSfLXprIgf3U=)
2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:78:c1:19:c5:12:08:69:69:9a:d5:e8:f7:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: May 6 00:01:09 2025 GMT
Not After : May 7 00:01:09 2025 GMT
Subject: CN=5024f695e6f041a65cc200b0ef32d5c126d30f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:40:5b:d0:a3:48:24:97:21:87:cd:ea:b9:
d7:d9:37:a6:a8:ce:fe:83:55:78:9e:60:50:66:bc:
6c:97:b6:85:76:27:61:53:20:ca:6b:29:2b:9d:e1:
87:15:74:02:10:73:a3:17:86:c9:9f:da:ec:79:39:
99:98:fd:5f:28:0a:cd:d9:5f:fd:23:aa:f2:ed:95:
68:2e:73:50:8c:96:33:c9:f6:97:90:df:02:91:f3:
cc:7c:3d:a3:e2:8d:1b:f6:40:e3:dc:43:9f:f4:2f:
54:b5:c0:b3:de:b1:f3:21:5c:03:9d:d1:a4:eb:d4:
6b:4e:64:7a:24:7f:d6:65:23:41:b4:c4:ff:1c:97:
b0:37:85:d7:db:47:70:05:f6:cd:ae:86:8c:0b:b7:
bc:3c:e1:b3:03:f3:3f:b8:ee:87:aa:84:ab:52:df:
3d:c8:8c:9d:72:01:8f:fa:8c:75:f4:e5:4d:b6:21:
09:e9:ae:59:71:4d:1d:85:eb:a6:ad:28:ce:3e:e1:
d5:2a:ca:cb:e8:a2:4f:e1:57:7f:e0:9d:df:2b:a2:
78:2a:e2:3d:ae:1c:a9:c3:1a:56:f4:87:2a:72:0f:
be:40:4d:dd:1a:ec:ba:9e:38:e9:49:39:20:ab:15:
e8:08:80:82:a7:17:11:59:7b:bd:81:aa:23:01:f2:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:F6:95:E6:F0:41:A6:5C:C2:00:B0:EF:32:D5:C1:26:D3:0F:78
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ff:0d:1b:c7:5c:33:ac:f2:98:62:1c:ae:e7:e9:8e:8a:3f:
ac:82:7f:24:23:8d:26:43:12:d6:34:5b:e1:7e:9e:72:5c:6a:
e2:bd:60:19:30:bb:97:2f:fc:5c:4b:69:f8:5d:2f:28:d5:79:
10:ca:0d:ea:a1:73:3b:5a:d1:be:69:6e:85:f4:a6:55:69:81:
b7:3d:4f:6f:cb:c2:52:78:db:2a:af:5a:13:28:ec:85:c2:f7:
0e:53:f8:e7:10:44:b4:cf:9e:c6:dd:ef:78:8d:38:b3:b6:b4:
53:be:db:00:1e:68:22:7f:5a:fa:a7:3c:ae:58:f2:05:86:7e:
20:9e:63:56:4c:d3:74:92:d0:50:8b:0b:98:43:36:6e:38:00:
eb:93:cf:1a:3e:4f:ec:bf:ad:6c:93:43:cd:4d:5f:f6:77:db:
e9:47:fa:2a:bd:5c:87:a2:5e:d7:d7:6e:49:29:a0:e8:03:d4:
75:1a:12:7a:b1:49:b5:e5:43:b8:c0:ce:7b:a7:05:7a:0a:57:
69:c3:9c:51:94:3c:53:3f:33:19:8f:cf:ac:65:f1:4c:f0:04:
d2:af:e5:7a:65:0d:96:7d:35:0d:7f:5e:56:b9:64:d7:ed:98:
5f:de:a0:8d:b7:78:5f:cd:4e:88:f3:33:9c:59:0a:cc:73:6c:
a7:3f:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:00 2025 by rpki-client