Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: Sy27WFmNZBSZOCLysWUK5+i/uJyWRCyWS7Dq/AzVAH4=
Subject key identifier: 7C:17:3E:0C:0F:7E:A5:97:20:89:14:3E:50:84:81:29:0D:74:A0:B2
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 0196C871B1292B41877E1A30566652BD76D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1252
Signing time: Tue 13 May 2025 07:00:16 +0000
Manifest this update: Tue 13 May 2025 07:00:16 +0000
Manifest next update: Wed 14 May 2025 07:00:16 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: HaRHTuDSXmw+zCqzMrX41Gi/F4aWRIlv524KxQxhQxI=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:b1:29:2b:41:87:7e:1a:30:56:66:52:bd:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: May 13 07:00:16 2025 GMT
Not After : May 14 07:00:16 2025 GMT
Subject: CN=7c173e0c0f7ea5972089143e508481290d74a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:7b:d4:a6:b2:a7:91:39:30:4f:17:02:21:
4a:10:7f:40:5f:1b:8c:4d:c0:b7:11:59:b0:af:48:
b0:8f:7a:e3:ad:44:44:3e:87:70:9d:d9:f5:8f:cd:
03:a9:45:54:37:86:64:be:a0:ac:7d:ef:8d:5b:0f:
8e:14:09:01:aa:ff:87:33:e3:36:53:11:cb:51:29:
d6:47:74:62:52:e8:d6:97:9e:ee:06:13:69:6c:22:
7b:2d:61:3f:04:c8:04:7b:61:f5:34:34:99:83:ff:
39:36:b5:21:54:5b:50:b5:a6:be:7c:73:16:25:dc:
34:a2:b1:91:a9:19:19:d3:2d:67:c4:96:85:c4:c9:
90:a7:a4:1c:d3:78:0e:34:61:87:0c:52:03:3d:8f:
fd:e8:88:e5:8a:b8:de:96:f0:98:12:bf:ff:aa:7c:
1c:74:f4:86:07:ec:f8:fd:be:e4:4f:87:df:9c:7e:
f5:c2:2b:bf:e0:28:21:0b:03:7e:82:48:6b:02:ca:
e0:3e:83:dc:91:5b:0d:a0:4a:8f:28:31:ed:e5:f0:
9b:4d:64:3d:22:56:b1:07:b7:00:af:8b:a8:7a:55:
a1:6f:5a:43:3b:52:55:ed:86:66:fc:de:09:85:0d:
03:86:f9:3a:6a:41:1b:63:74:99:14:ae:ad:ca:30:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:3E:0C:0F:7E:A5:97:20:89:14:3E:50:84:81:29:0D:74:A0:B2
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:34:32:90:4f:7b:e2:08:9e:db:3a:44:7e:04:7f:07:9b:60:
2f:87:c5:c7:3e:e2:09:7f:37:18:75:fa:ce:70:5d:7c:aa:00:
6a:94:1d:f5:6d:84:16:cc:9c:f1:a1:21:b6:e5:1a:19:67:d5:
a5:79:60:db:87:a0:bb:5e:6b:d4:a5:6c:34:56:b2:7c:65:5c:
a1:9e:7d:f3:21:d0:9a:42:ea:d0:96:58:69:a3:9d:1c:d7:44:
ce:7a:e0:ea:cb:22:38:26:94:60:a3:aa:7e:08:98:d1:9c:de:
7a:d5:b9:f0:e8:a5:5b:42:d8:c9:46:87:89:e7:be:a9:c7:4f:
f8:fc:6c:fa:dc:4e:42:8c:38:6f:64:06:87:cf:3d:09:99:a9:
10:5f:61:f0:d0:ba:04:ff:d4:99:42:fb:74:dd:ae:fe:71:ed:
16:52:6f:06:25:38:32:83:1a:a4:ed:bf:97:d2:4f:01:50:16:
87:78:1a:bc:46:42:38:df:71:f8:1e:0e:10:d2:d4:a7:45:75:
3b:10:be:4f:3c:02:31:de:b8:e1:61:41:c0:70:17:8e:91:49:
34:a7:e0:f5:d1:0a:8b:ad:b0:86:e5:da:e1:71:11:ec:9a:bc:
b3:5d:b1:44:dc:ce:de:0c:f9:11:82:3b:79:f1:ca:f8:99:45:
71:13:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:30:01 2025 by rpki-client