Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: NsmDGeIks7BTnr31r8fWVqkHHVImZ0YI5tMvfYxywQo=
Subject key identifier: 56:29:A1:27:AF:2B:A6:69:73:79:18:75:10:07:24:0B:BF:1E:BF:A7
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 019688491D3C861E7FCB6DA98A0942605853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 20:00:15 +0000
Manifest this update: Wed 30 Apr 2025 20:00:15 +0000
Manifest next update: Thu 01 May 2025 20:00:15 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: U2utqFZZtco+uxqs03o2rfzSFlICmsnUAFCuiyG7Dx4=)
2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:1d:3c:86:1e:7f:cb:6d:a9:8a:09:42:60:58:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Apr 30 20:00:15 2025 GMT
Not After : May 1 20:00:15 2025 GMT
Subject: CN=5629a127af2ba669737918751007240bbf1ebfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:d7:59:1f:de:d9:d1:93:c4:e1:b0:ec:73:
3c:c5:79:14:c0:03:35:62:97:d0:45:40:83:24:cd:
0f:8c:0d:c6:bd:bc:ed:53:23:4c:6b:ab:14:e7:82:
57:8c:23:bd:cb:19:7f:78:b1:c6:0a:44:7f:62:eb:
ff:db:a0:c7:70:3b:26:d5:94:76:ff:6a:a6:62:35:
ec:d4:13:2c:33:2e:19:16:cc:31:88:48:8c:6c:26:
6c:cd:08:d9:f6:74:5d:b8:eb:32:f7:3d:c3:ec:7c:
b9:a8:7e:55:b3:1c:f9:58:49:cc:d2:ae:18:dd:64:
d9:e1:6b:66:b5:ea:bb:6b:bf:fe:89:23:89:9e:3c:
8c:53:1f:f1:b8:5f:66:6c:24:51:96:fb:12:cd:5f:
d0:93:7e:2b:87:ee:e0:b0:f0:b1:37:dd:ca:66:44:
9b:8e:ca:ce:f1:f9:dd:9b:18:51:d8:40:2c:bf:9d:
00:ce:9d:5d:bf:8b:35:53:af:e6:ae:70:af:42:02:
f1:0d:fa:f6:4b:95:3a:83:f6:76:2a:ad:21:79:29:
19:e5:cd:4a:ca:5d:83:e3:6b:9a:89:5f:5d:ec:ec:
2c:03:43:dd:de:38:fa:60:c5:39:53:26:c8:ac:9b:
84:c4:57:c6:19:7b:e6:6b:fc:6e:73:9c:7c:eb:4d:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:29:A1:27:AF:2B:A6:69:73:79:18:75:10:07:24:0B:BF:1E:BF:A7
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:9c:74:cf:76:f8:dd:ec:a1:5d:59:5c:24:ec:07:07:82:d8:
5e:a7:d1:b2:e2:e2:86:46:f5:2d:b1:93:51:9c:35:b9:5f:ef:
28:6f:4b:ad:98:3e:3a:2e:d8:de:41:75:f8:a3:c8:ee:58:be:
78:3a:d6:ad:be:9a:5e:e1:1c:d6:35:9a:af:a8:aa:d9:4a:f4:
84:3e:e9:da:63:15:c3:55:20:42:4c:53:db:5a:b9:4f:6f:61:
db:fd:9e:84:20:69:e8:21:6e:60:91:bd:6e:84:47:68:cb:d4:
27:30:68:45:19:ec:b0:49:47:c4:b2:a4:ef:ee:85:24:d1:55:
05:22:76:f6:0f:b1:16:63:96:32:d4:78:13:02:6c:e6:4d:62:
26:7c:2b:20:9e:ee:0c:31:8f:16:fa:a4:99:6c:a6:ef:16:3d:
f5:12:55:9c:9d:e4:1c:55:d3:78:16:d6:a7:89:8c:d7:a2:ea:
a4:d2:49:57:7b:65:27:d6:00:4f:bf:8d:36:a0:47:27:36:c1:
75:aa:ec:7f:39:7b:c5:bb:ea:88:5c:35:2b:d2:0f:c3:d7:fe:
6a:79:11:11:73:a0:4e:23:b1:e7:68:8e:93:3d:07:23:23:33:
42:dd:10:d5:a7:a5:9e:8c:70:5a:65:93:58:c6:d7:cd:74:1c:
19:bb:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:46:49 2025 by rpki-client