Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: 4b4P3F6y81I+klKJ5pTHFpWx1cbtniiyTX+s5fn27pk=
Subject key identifier: 4B:75:70:ED:BB:0B:E5:8B:F6:17:10:DC:79:A9:86:F0:47:02:49:90
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 01967F0F2BA3E120E598F04E07F9AB1E712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 01:00:22 +0000
Manifest this update: Tue 29 Apr 2025 01:00:22 +0000
Manifest next update: Wed 30 Apr 2025 01:00:22 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: JdgFL3KscOH5a5XG0WyUhleqJ9X3WwCPeeeIxOxiChY=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:2b:a3:e1:20:e5:98:f0:4e:07:f9:ab:1e:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Apr 29 01:00:22 2025 GMT
Not After : Apr 30 01:00:22 2025 GMT
Subject: CN=4b7570edbb0be58bf61710dc79a986f047024990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:24:23:ec:da:92:d0:92:36:27:04:c7:e4:
0e:ad:6b:ac:b5:74:d4:a4:2e:74:29:bc:37:ab:d8:
4d:e5:43:15:74:6e:22:9c:f7:7d:75:2b:2e:a9:cc:
b1:83:0f:78:09:4c:fc:d5:4e:80:c0:f9:fe:83:b3:
cb:20:e0:32:5b:20:bf:e4:57:3c:1f:ed:d4:4a:e2:
4d:6d:a6:ad:03:d2:c4:1a:80:ae:05:05:bf:9a:da:
af:a7:3b:31:19:d1:39:4a:2d:b6:8d:81:f9:4b:fa:
c8:c1:7a:ce:05:6d:e2:be:a4:d8:9f:a3:60:91:5f:
99:7a:fa:9c:18:7b:ea:17:e6:6e:00:bd:9e:ce:57:
b4:e9:8c:10:bb:21:2e:ba:a0:7a:97:fb:f5:bf:1d:
45:61:33:d6:d9:af:89:66:eb:46:7b:83:63:5f:42:
66:23:bf:aa:ff:cb:43:67:d6:be:d6:5f:2f:20:79:
00:2d:9c:5b:21:5f:0c:7d:1e:01:83:79:40:79:b8:
56:a1:f8:4b:4e:ef:75:2e:bf:dc:ff:a2:fb:8c:0c:
60:0a:48:59:42:9f:5b:a9:f9:41:b9:a0:44:92:ad:
0d:94:4c:50:04:49:39:2d:40:27:fd:62:7e:b4:e1:
12:e6:96:3c:c1:90:0d:26:e0:cb:cc:34:c8:72:70:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:70:ED:BB:0B:E5:8B:F6:17:10:DC:79:A9:86:F0:47:02:49:90
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:21:bb:2f:b4:e8:fe:a1:31:e9:90:28:40:ab:10:ab:23:
6b:86:7a:f9:4b:3e:a7:f7:76:50:24:d1:f4:50:ba:f5:85:06:
69:e5:22:55:ec:d1:ed:85:e6:e9:02:87:71:f4:e0:74:8e:f6:
40:33:89:80:47:2d:54:37:1c:17:2d:ba:1d:70:e3:d8:02:7a:
6b:1c:25:07:79:d5:eb:ba:dd:15:b3:2d:8b:5e:07:b2:94:38:
25:bd:bc:bc:aa:cb:5a:e5:88:77:8a:c5:46:4b:6a:43:4a:17:
a9:c8:4a:4d:5a:c8:1c:0e:53:1a:bf:4b:34:37:3a:24:7c:b4:
e4:e5:03:26:9c:33:ec:18:19:e7:d5:34:bf:c6:85:1b:3a:66:
c2:f2:ed:4d:5b:2f:43:89:c4:c4:dd:7c:6e:b7:0b:8f:cc:4c:
ea:a9:44:46:59:03:10:f5:0d:e7:56:9e:0a:37:af:67:3e:30:
96:52:c0:23:b4:db:c7:c0:18:8f:cf:df:d3:9c:bb:0a:81:66:
6a:f3:9a:55:6b:ec:6a:f9:0d:0b:93:6d:ff:68:f4:12:de:84:
74:5f:b7:75:ff:36:7b:28:f6:21:ba:9c:db:4b:a0:ba:09:51:
35:37:08:97:b2:3b:0d:d6:76:a6:35:51:df:a6:2b:4b:bd:c8:
27:6c:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:43 2025 by rpki-client