
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: /X1X6BVpVboyFLhwrPwVGqAySWg8TQJI2BRzMvkJkSw=
Subject key identifier: E3:D4:A0:87:23:56:01:4D:0E:9C:B3:1B:40:A3:2D:84:1C:0B:0B:82
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 0196C87220491154FE7DDB9F3FDE1510DC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 0E36
Signing time: Tue 13 May 2025 07:00:44 +0000
Manifest this update: Tue 13 May 2025 07:00:44 +0000
Manifest next update: Wed 14 May 2025 07:00:44 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: kQGvUhmTfJuiHemfQLpq7Rti90Y5ozwu7fsq7BQTRt0=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:20:49:11:54:fe:7d:db:9f:3f:de:15:10:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: May 13 07:00:44 2025 GMT
Not After : May 14 07:00:44 2025 GMT
Subject: CN=e3d4a0872356014d0e9cb31b40a32d841c0b0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:86:5f:09:06:71:d6:ff:56:e2:04:a3:6f:
3c:f0:b3:d6:84:d6:5f:c6:43:7c:9f:e1:09:54:a7:
40:cc:f8:9b:d8:6a:60:2f:d5:50:ec:e4:5f:ac:9f:
d6:6a:08:6a:27:0c:cf:af:63:a4:b7:b0:68:67:20:
b0:f4:8d:6d:c2:90:7b:ff:83:57:80:6d:b3:01:5b:
e9:57:e1:4b:0b:3f:a2:0a:98:39:f2:41:89:93:fd:
cf:d6:96:3e:73:c6:84:b7:75:a1:97:ce:30:e2:d7:
f9:da:4a:3d:e4:8f:c6:db:27:82:3d:f6:02:de:69:
95:a0:13:91:17:ef:7e:f3:8b:22:5e:b8:57:bb:4b:
31:11:dc:f7:4d:8e:0e:3c:71:14:08:46:80:d9:79:
a1:eb:e8:b3:aa:2d:08:26:75:0a:e6:84:af:00:26:
b7:2b:eb:69:05:f7:05:d3:9c:e4:5b:53:24:70:44:
89:e4:06:3a:f0:27:9b:b4:cc:b4:9a:83:1f:d2:7f:
53:74:07:58:17:10:43:f5:61:9b:c3:be:8f:d3:16:
d6:6d:85:b0:83:30:81:a9:07:3f:9d:c9:6b:30:9b:
10:13:b8:b1:9e:bf:52:16:92:3c:63:54:84:2d:db:
9c:6f:75:1b:1e:ca:7c:f8:31:7b:ba:6a:4a:3d:4f:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:A0:87:23:56:01:4D:0E:9C:B3:1B:40:A3:2D:84:1C:0B:0B:82
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:2f:bf:ac:c3:42:2a:3f:5c:4a:37:12:eb:81:84:35:a9:
33:09:66:38:eb:c8:fa:b6:2a:c3:d3:89:c3:81:fa:69:99:ce:
94:55:a4:33:e2:6a:1e:56:2f:45:4f:19:82:d0:45:4f:31:cc:
77:a5:6b:a8:45:25:13:9e:4b:e7:e8:d6:18:4b:45:bc:69:87:
66:b3:91:76:8d:f8:11:e2:b6:7f:6c:26:af:b3:4c:26:77:88:
f6:4e:7b:b7:8a:c7:03:c6:a4:e1:3a:8d:a0:b0:17:93:22:7a:
ab:9c:26:49:f0:cb:44:47:f3:54:1d:6a:64:7b:05:98:db:80:
25:4d:70:39:f9:27:0d:ea:dd:db:75:02:90:e9:1a:64:91:ef:
9e:21:18:a8:ce:55:99:84:03:ba:4c:e8:91:34:76:c0:72:c0:
4e:52:31:9c:96:0b:0f:59:2b:e0:80:40:46:24:f3:0a:0d:3a:
30:5e:38:33:88:60:cf:eb:4e:8c:3f:60:d3:29:72:0d:a9:e1:
30:db:96:54:b2:2f:fa:80:11:78:4a:6e:66:d9:6c:c8:1e:ca:
d2:20:ad:d4:17:6e:8c:dd:4d:3d:09:57:dd:80:c7:c2:2e:82:
de:31:21:a9:cf:f0:9d:f1:17:4c:0b:25:02:5c:82:65:ca:fe:
e6:70:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:25:20 2025 by rpki-client