Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: GFj5VO/T/t3V7XQmo09rv0kzo92OkQo8BjlFAHcomRY=
Subject key identifier: 90:D5:AB:7B:6A:79:F7:53:E6:14:53:45:F4:82:C1:21:BA:0C:CB:1D
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 0196A19B8DCC0C5250B09B0D90F82D1DB1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0652
Signing time: Mon 05 May 2025 18:00:48 +0000
Manifest this update: Mon 05 May 2025 18:00:48 +0000
Manifest next update: Tue 06 May 2025 18:00:48 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: QctRuxQph/zSdZY0+yVSUSWy+z26hi5Fx5YWNFcW1hk=)
2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:8d:cc:0c:52:50:b0:9b:0d:90:f8:2d:1d:b1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: May 5 18:00:48 2025 GMT
Not After : May 6 18:00:48 2025 GMT
Subject: CN=90d5ab7b6a79f753e6145345f482c121ba0ccb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:b6:65:98:17:88:79:54:43:c6:4d:7c:1e:
1d:5b:ab:67:d4:5f:bf:a2:b6:38:f6:d9:a4:6b:3a:
3f:b4:1b:06:1d:e0:c7:bc:01:27:c7:0d:c5:bf:f4:
45:12:1e:5b:f2:c9:c2:8a:aa:13:39:04:8f:c4:fd:
1b:43:8a:f8:11:e8:da:d7:a6:e2:36:6a:35:00:7a:
52:73:51:46:6c:09:44:63:ae:5e:0a:e6:71:d7:53:
5e:29:5a:b6:85:b6:a5:5e:eb:83:7f:8e:a5:92:a1:
22:68:42:ee:a8:68:7a:36:73:99:fb:8d:8f:5a:e6:
0e:52:2c:71:47:8f:65:d8:72:a3:ec:10:ae:ee:9f:
ae:21:c3:40:20:c5:1c:c2:4b:03:9e:50:60:43:13:
b0:bd:1a:5f:dd:49:34:e5:6e:b5:5f:16:31:65:ba:
6e:9c:c7:48:68:32:f5:3c:aa:b0:2a:ac:3d:c6:6c:
42:fa:38:9f:a1:cc:4a:ce:4a:62:00:9c:31:b4:a2:
5c:d8:f9:15:fa:93:f3:f1:90:0a:ed:8b:b9:a7:41:
a8:6b:3d:49:5d:b5:1f:b8:70:b8:7f:db:b1:6e:35:
ed:53:c0:fe:90:43:00:8e:a2:c5:51:8d:ec:c3:64:
89:86:b9:18:80:cc:d5:e5:14:51:a6:a8:42:92:6c:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:AB:7B:6A:79:F7:53:E6:14:53:45:F4:82:C1:21:BA:0C:CB:1D
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:12:61:7f:fb:3c:eb:54:67:a8:5d:38:70:4b:05:bf:3c:4c:
b6:0e:2c:bb:42:7a:6d:41:94:61:86:08:31:0d:db:81:ae:d5:
e8:4d:d2:66:aa:15:0a:a4:af:90:37:30:16:62:da:fc:9d:bc:
c8:da:f5:93:e8:78:81:8b:fc:90:28:08:3c:78:74:d6:4d:6e:
43:15:17:8d:7c:f7:9d:45:12:ff:b2:28:84:a9:7a:41:68:3f:
7e:df:0b:bf:97:cb:4b:09:69:3f:48:e6:53:56:06:bf:82:f7:
9b:59:d0:c8:fc:2d:ba:87:5d:72:bf:f5:2b:a8:9e:bf:99:e1:
ce:3c:6c:65:cf:b5:0f:c2:6a:23:06:d7:aa:52:b6:ab:0b:e0:
4d:b3:1b:26:0e:aa:5c:be:cb:20:e9:c2:db:8f:6a:27:5f:49:
5c:37:06:08:3f:c0:ff:1e:5e:29:60:6b:04:78:8a:1e:b2:13:
4d:90:d6:88:a4:2f:c4:7b:23:c6:0e:a3:b0:61:23:2e:59:9d:
f4:2c:19:de:4f:b3:88:0c:dd:66:c3:2a:a9:c8:2e:4e:fd:7d:
b9:0c:5b:99:23:b8:a1:36:1f:67:40:f9:61:ae:eb:6d:a6:c7:
56:3c:39:62:83:00:75:56:98:26:60:dd:7f:ac:2e:a0:72:34:
4f:b7:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:31:05 2025 by rpki-client