Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier: p0u6H4dtCPyFz3ZhPK5jayK2Zf3QxOr3dpKSWrlC5zg=
Subject key identifier: D6:A7:8B:2F:ED:74:6B:3C:5C:2A:F1:EC:5B:A6:D8:50:D7:2E:B6:49
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 0196BC0056420BBE6F2872AE18229657F8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 21:01:00 +0000
Manifest this update: Sat 10 May 2025 21:01:00 +0000
Manifest next update: Sun 11 May 2025 21:01:00 +0000
Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: LM+CLIwtJvDEng+UAa66ZoXd+pVTWjwWOFOkmGrsJSY=)
2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:56:42:0b:be:6f:28:72:ae:18:22:96:57:f8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: May 10 21:01:00 2025 GMT
Not After : May 11 21:01:00 2025 GMT
Subject: CN=d6a78b2fed746b3c5c2af1ec5ba6d850d72eb649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:e1:f2:dc:5a:68:7c:31:ad:76:a3:52:3b:
03:d5:6b:a0:24:fc:c4:c3:80:0d:3f:f7:0e:af:70:
a5:07:27:a5:6c:1e:8d:32:40:df:99:23:3d:7b:29:
97:bb:7e:08:72:79:1e:0b:4a:53:d8:3a:88:70:c2:
a1:6c:e0:b5:94:55:18:2e:d3:4a:a8:51:5e:1a:b5:
f2:3b:cd:28:81:b5:ae:b2:7d:f7:34:b5:96:c6:61:
4d:d5:73:c1:0f:bf:8c:4d:54:46:08:48:ce:83:9a:
95:9a:31:c1:cd:4e:0e:fd:42:9f:0a:b7:78:56:77:
4b:d8:22:fd:ca:67:da:1b:d6:10:2b:64:1b:91:51:
3e:8f:e6:7d:3e:99:cb:3a:5e:52:5c:d2:d8:21:5b:
86:53:15:8e:04:b0:5b:73:c9:93:37:90:b6:03:75:
40:f8:a6:e4:57:3d:63:f6:ba:39:e9:9d:28:63:1f:
a1:b8:ee:42:44:fe:68:05:6a:9c:60:5b:27:0f:bc:
4a:23:de:ed:ba:c0:00:5e:2b:f1:0a:07:bd:d7:1b:
25:28:4f:ea:74:50:84:94:53:cb:4e:c7:ca:ea:75:
32:d1:1d:3f:92:18:56:08:f2:05:4d:ba:f9:27:41:
55:44:56:7c:aa:63:65:0e:63:6e:68:b9:b3:af:68:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:8B:2F:ED:74:6B:3C:5C:2A:F1:EC:5B:A6:D8:50:D7:2E:B6:49
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b4:a8:c3:4e:29:fc:ae:ab:a7:93:1c:c5:76:33:d7:fe:6e:
6d:2c:e7:3c:b8:eb:ae:e1:9e:14:04:2c:fb:47:8b:95:ce:77:
9f:13:ef:3c:80:dc:8f:d5:00:12:60:d7:a2:83:ac:78:76:55:
d6:16:d3:11:91:57:52:0f:31:ac:39:db:fa:ca:6a:f1:f4:21:
b7:8f:ee:f6:58:e0:aa:fb:ac:f5:81:00:0a:7f:55:d1:e9:99:
ca:aa:2a:bd:21:75:48:5e:e5:4c:d8:65:06:8f:8f:d4:73:fa:
56:01:41:96:3e:b4:58:90:5c:78:eb:c1:69:d8:26:19:b8:da:
b0:a2:a9:c0:4c:35:6a:18:70:be:b9:43:97:bf:d4:f4:95:6c:
51:e6:2a:4a:9d:07:a5:73:92:db:31:31:aa:ac:1f:d4:b1:51:
09:c2:07:3a:e9:4f:61:a8:7b:88:64:09:cb:fd:40:7b:24:5d:
62:0f:df:3f:94:72:16:86:e1:20:38:d3:fd:3a:df:76:a4:03:
7d:1f:c3:3f:ab:d5:c1:d2:3b:7d:a6:d7:92:90:2e:48:b2:67:
52:72:59:03:e7:1a:78:40:e6:af:76:ac:16:06:17:91:2f:98:
22:f5:44:ab:6c:78:a3:7d:c5:56:d3:c0:57:00:3a:15:a2:d5:
95:a5:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:11:21 2025 by rpki-client