Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: FzF/bxwIf4c/9nv+UY0N49U0GkVqWbO2w/nkIzHYkDk=
Subject key identifier: 62:5B:7A:00:27:CC:8F:B6:72:7C:10:51:95:9B:5D:93:44:39:AB:CF
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 01967BD7D4B68354F10290851535F7FBF6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0B80
Signing time: Mon 28 Apr 2025 10:01:04 +0000
Manifest this update: Mon 28 Apr 2025 10:01:04 +0000
Manifest next update: Tue 29 Apr 2025 10:01:04 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: AnMQ+0KRhxiVvx/qASp89vxekTyMu8Pli/LehX/SCw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:d4:b6:83:54:f1:02:90:85:15:35:f7:fb:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Apr 28 10:01:04 2025 GMT
Not After : Apr 29 10:01:04 2025 GMT
Subject: CN=625b7a0027cc8fb6727c1051959b5d934439abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:65:91:89:00:88:ab:50:8d:26:c2:fe:c4:
cd:7e:b3:21:ca:09:0b:45:ff:41:e8:1d:59:49:ce:
87:b2:6a:ff:c7:39:ba:dc:a1:cb:7c:82:cb:83:80:
25:36:d8:1a:0e:87:b1:11:45:44:fa:7c:e5:be:d0:
3e:51:2f:b0:f3:33:9e:42:5e:4d:09:a4:c6:5c:c0:
11:e4:20:70:30:37:bd:35:96:0b:ae:d4:aa:93:c8:
02:ef:7f:7b:08:a1:c2:56:91:13:48:d4:28:85:57:
54:3c:89:ee:fd:de:bf:05:87:72:eb:5c:11:94:5b:
86:42:44:47:15:10:85:b0:3d:2e:57:de:a9:c7:93:
40:2c:76:65:22:55:e3:aa:f9:2d:58:c6:7b:32:ed:
e8:49:dc:e3:26:77:78:9e:8f:3f:c8:d1:a9:28:5c:
36:73:80:b1:6b:7c:d9:2f:1c:da:6a:a3:63:db:72:
d7:64:a1:0a:25:73:ec:37:c0:4d:da:fb:0a:6f:36:
c8:aa:4e:83:c9:9f:6a:eb:0e:dc:d7:0f:0e:ce:73:
16:41:f4:ef:b1:a5:21:17:88:21:d4:36:6c:2f:f4:
0d:1a:fe:c5:b1:d6:e5:45:da:12:64:b5:31:26:c1:
b0:c4:1f:db:9c:fb:bf:2c:9e:ae:3f:46:d2:bc:66:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:7A:00:27:CC:8F:B6:72:7C:10:51:95:9B:5D:93:44:39:AB:CF
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:26:af:09:1a:23:ae:2e:83:6f:75:04:b8:59:d3:93:5f:
bf:06:e3:9c:06:e0:01:6c:69:f6:13:94:5a:24:89:4b:cd:07:
1b:b9:25:bf:ad:21:5f:e2:76:01:46:07:cd:ae:91:bc:ad:fb:
fa:79:05:c7:bd:44:04:f6:ce:20:5c:ef:e1:77:46:f8:f6:cc:
70:49:66:99:c2:2f:08:f6:b1:0b:b0:66:54:bf:8c:45:2c:48:
84:ce:59:d8:3c:51:9d:d8:d4:8c:4f:9d:38:34:2e:df:97:d2:
e4:23:c5:96:1a:18:e9:e1:fa:d4:91:2e:10:37:6d:9f:ca:ae:
13:ac:75:17:d1:ab:39:b0:cc:41:6e:c3:de:a9:23:ba:26:da:
f3:e4:e0:a6:4c:78:aa:c6:6a:78:28:7d:c2:d8:46:f9:3b:a8:
44:2f:d1:97:df:8b:dd:c6:3e:ff:6b:9b:47:80:61:4d:17:04:
71:41:d3:9d:45:95:38:44:0e:ee:02:c5:5f:d2:ad:30:70:78:
f2:fc:39:4d:9a:e0:55:23:28:9f:0f:00:2b:36:ad:f6:3a:1f:
2e:f3:e6:d2:75:1a:77:34:93:e9:a0:cc:89:e3:df:84:3f:13:
91:d0:07:93:13:55:89:e9:19:c4:36:9f:4e:19:77:d1:59:83:
3a:e9:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:09 2025 by rpki-client