Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: 9wTxp992SXAU4oJFLqVUr8AhmtpZqNu0jXdK1EflF3Q=
Subject key identifier: 01:60:24:B0:39:0C:2A:7B:52:F4:AE:29:8A:A5:FD:D2:51:4A:CD:B7
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 0196B33398ADE920C2D1C3425706A0948A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 04:00:25 +0000
Manifest this update: Fri 09 May 2025 04:00:25 +0000
Manifest next update: Sat 10 May 2025 04:00:25 +0000
Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: FcyqFtzbxuTBySBlnFw01WTsYKhE1mXX7RsU/Pv0dRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:98:ad:e9:20:c2:d1:c3:42:57:06:a0:94:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: May 9 04:00:25 2025 GMT
Not After : May 10 04:00:25 2025 GMT
Subject: CN=016024b0390c2a7b52f4ae298aa5fdd2514acdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:ef:8d:33:a4:b4:3b:39:4f:4e:6b:bd:c5:
11:1f:73:88:d8:d7:46:dc:0f:0f:47:65:b2:0a:f2:
bd:94:99:66:58:21:df:fb:7a:26:ab:20:45:b0:b3:
bc:60:5a:e3:5d:54:71:f4:78:cd:94:b0:41:26:5b:
80:54:a4:79:b3:42:2a:e6:af:31:dc:b2:10:6a:56:
58:1f:75:04:e4:21:94:ce:d2:b4:88:ff:0b:28:71:
4d:27:8a:49:8b:9b:77:2b:21:aa:40:66:79:c6:ca:
68:41:46:2d:34:fb:10:81:f2:9f:68:9d:30:a4:4d:
f1:91:dc:18:5c:80:f9:12:31:5a:26:6f:16:c2:31:
2a:df:fa:aa:ff:33:d0:70:1e:0d:79:a3:7c:dc:8f:
58:4e:74:47:10:1c:c6:ba:c8:44:dc:00:9f:f3:7b:
65:7e:61:39:5f:fa:45:40:8d:36:3b:13:fe:6a:c2:
0a:83:24:51:b5:35:9d:03:e1:93:68:26:18:72:f1:
7f:2a:32:40:b3:78:8a:c3:66:8f:e2:c7:88:2d:7a:
6c:a4:e7:ee:62:ce:ca:38:0d:3a:69:81:93:08:d0:
4d:59:3d:9f:3c:0c:d6:fc:c1:5a:34:0e:c2:7e:58:
0a:74:28:52:4b:ec:22:6d:55:e6:d7:6b:01:71:e8:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:60:24:B0:39:0C:2A:7B:52:F4:AE:29:8A:A5:FD:D2:51:4A:CD:B7
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:5a:82:23:f4:ad:f0:4a:2b:20:4c:17:fe:67:9c:67:c7:
9c:99:78:43:4d:c0:34:2e:f8:ee:d7:f6:cc:d8:fe:15:14:54:
73:05:3c:a8:59:79:0c:94:a9:b8:97:a8:bd:7e:1d:95:19:9c:
dd:bc:f3:a5:41:b5:ae:7a:53:db:05:51:17:e5:79:ce:29:03:
b5:4c:35:5f:52:55:5b:41:9e:6d:cf:5d:4c:ee:48:df:ff:b9:
bb:b6:d0:47:db:5b:ae:2d:94:84:89:7c:d9:c2:a8:d4:70:3a:
a8:0c:7a:81:04:4d:88:48:6c:0f:17:6c:79:3c:dc:7d:cf:d9:
09:d1:20:82:1d:95:5e:25:fb:2f:c0:0b:19:a9:25:b2:31:6a:
c4:de:2e:5f:ec:e7:96:94:a9:69:a9:b9:c2:d6:02:c7:2b:7f:
9f:31:0c:3e:54:89:cb:d0:f4:15:28:04:a1:ff:98:ed:60:6e:
e1:70:76:e3:f7:32:04:02:95:86:6f:23:e8:74:32:c7:b5:92:
10:ea:03:a7:62:ca:1f:9c:f8:42:5a:ce:66:33:d4:66:dd:d9:
57:08:bb:c2:16:57:25:c5:7a:56:88:df:6b:e2:10:ee:3e:5f:
39:51:52:23:a5:c2:89:f8:7c:81:51:70:6a:b4:6e:d3:a4:2d:
55:eb:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:56:34 2025 by rpki-client