Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier: f40O1qNJ6KNe6cdc+KdxRbup4yLjyJ0GBsU4Y1kh1ec=
Subject key identifier: B1:FC:8C:B3:69:92:FA:B2:D8:BB:A9:5F:4F:B2:42:DC:03:C8:46:00
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 01967F0F3ADC51592EBBCF518D2852C89BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number: 14A4
Signing time: Tue 29 Apr 2025 01:00:26 +0000
Manifest this update: Tue 29 Apr 2025 01:00:26 +0000
Manifest next update: Wed 30 Apr 2025 01:00:26 +0000
Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: 9iCn6I1Zo5dcna/6F+1L4vV24tyZ3kG/920N8MlDqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:3a:dc:51:59:2e:bb:cf:51:8d:28:52:c8:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Apr 29 01:00:26 2025 GMT
Not After : Apr 30 01:00:26 2025 GMT
Subject: CN=b1fc8cb36992fab2d8bba95f4fb242dc03c84600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:95:7b:11:07:03:16:22:6f:53:8b:10:91:
01:9f:65:9d:ec:6b:48:f0:26:a5:00:e4:0a:38:ce:
d2:9d:2b:10:43:b7:d8:1b:72:37:95:6c:23:b2:7a:
36:90:ef:7f:5a:6d:f1:b0:34:1b:90:3c:a2:bc:32:
59:eb:af:d4:88:8b:cd:66:08:ce:c9:90:8e:a0:82:
26:61:1e:d0:80:36:91:77:c0:09:31:c9:da:0b:84:
d6:da:ac:99:36:ab:23:4a:cf:44:eb:26:eb:28:58:
a6:9a:1e:96:5c:8e:dd:c6:a1:c7:f0:52:30:0f:f9:
18:e2:d7:39:b3:b2:1c:0b:79:da:52:13:1a:1a:c1:
f4:e7:07:fc:31:d4:fd:2b:6e:23:fc:4b:ab:3b:12:
a1:7a:3e:af:6a:e0:39:2b:ce:a4:43:af:36:7d:32:
75:95:0d:2e:4c:d9:90:7a:28:d7:21:1f:dd:09:51:
48:86:86:20:e9:22:9e:6d:38:2d:a7:ce:a6:87:07:
5e:26:3a:1d:87:fb:6e:67:6a:d8:ab:58:4b:9e:29:
ec:61:73:8d:3e:67:9e:16:0a:f9:79:a6:50:de:aa:
f8:2d:57:fe:cc:d1:e7:3c:e2:91:1a:c1:d5:ff:b1:
a1:a6:63:34:f9:78:55:32:86:f6:7b:8c:a1:fb:28:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:8C:B3:69:92:FA:B2:D8:BB:A9:5F:4F:B2:42:DC:03:C8:46:00
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0c:5a:05:19:34:3b:66:f6:a4:b4:aa:20:6d:29:3e:5d:19:
d7:3a:f3:02:ae:c7:f0:57:5c:45:8e:e4:af:03:6d:1b:a2:4a:
69:46:8d:32:8f:a8:2d:80:20:2b:f1:31:ed:0e:dd:23:2a:a7:
d5:2e:13:bc:03:00:f2:d5:10:b1:dc:47:49:e1:54:e7:c1:81:
43:eb:d0:da:81:4e:89:01:eb:64:af:74:6f:77:dd:d6:fc:82:
32:dc:55:31:d7:63:b6:02:00:17:67:06:bf:e7:11:65:41:68:
09:b7:5b:cc:54:e4:f6:43:42:f6:30:8d:bb:4b:4a:98:27:23:
6f:f1:b6:8f:92:b7:81:1d:80:36:87:4d:2e:0a:4d:4c:d4:c3:
db:6f:45:d6:b5:7d:2f:46:ad:02:b2:b4:9d:bb:b2:c9:c8:8b:
0f:19:ed:f9:0a:80:d7:20:88:47:f5:85:5c:e5:43:a3:e5:50:
17:07:02:6b:b0:a5:66:9d:cd:ab:bc:a5:f7:d9:f4:5a:f9:ca:
ab:42:39:26:b5:8b:3a:3d:5d:a4:01:de:85:68:57:fe:bc:4f:
eb:2b:a9:a5:16:80:de:bb:0d:82:da:17:8f:48:1a:b9:4d:bd:
c8:63:ff:84:d1:67:d3:9a:36:fb:b6:e6:e5:b7:59:9e:2a:90:
40:a3:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:42 2025 by rpki-client