Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: kALZ0fQTXoxwCet6DJ5vMQ+5op3U3a0j1eirnGE8WhE=
Subject key identifier: 88:96:C5:0B:29:9D:29:86:A2:36:5E:DB:65:C2:E4:93:2E:DF:D7:EC
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 0196CC859F3BEB3A4C225BFAC0CB87649740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 044F
Signing time: Wed 14 May 2025 02:00:31 +0000
Manifest this update: Wed 14 May 2025 02:00:31 +0000
Manifest next update: Thu 15 May 2025 02:00:31 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: xyw8uo2zxvxq80bH1fv5Le/CDWx5BMNTiDZM/GrnLqY=)
2: r0qME3D6vnHPgW7FfIJR7qyiR6U.roa (hash: +N7ZuBvhriEjaq14DPYwTSmD1pr2ezeFoDJODymMVSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:9f:3b:eb:3a:4c:22:5b:fa:c0:cb:87:64:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: May 14 02:00:31 2025 GMT
Not After : May 15 02:00:31 2025 GMT
Subject: CN=8896c50b299d2986a2365edb65c2e4932edfd7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:f4:b5:08:01:aa:1c:71:a7:b6:f8:1e:59:
48:72:e0:2b:d0:30:fb:1d:1e:8e:3e:ab:74:d8:05:
58:7d:53:75:8a:56:e2:c1:bd:32:2b:f3:16:40:f7:
7b:2c:d4:bb:79:4b:1f:f2:a2:48:2f:81:e9:9e:ff:
c2:fb:a4:b7:4c:2b:f8:e3:cc:d8:5a:79:37:e9:60:
7d:fe:1e:45:75:f9:4e:c0:32:3b:a1:1b:1d:1e:0d:
8e:34:ea:7e:37:4e:f0:57:bf:2c:03:b3:bb:26:5d:
d5:33:49:55:8c:97:78:5c:88:ff:fa:5d:49:87:b3:
b7:49:a2:31:46:6a:d0:85:81:c4:94:7e:d2:b8:9d:
56:e9:65:25:d7:a3:e0:a3:a3:3d:4d:80:3d:64:d9:
00:3a:0b:e0:55:b9:dc:ca:7d:00:65:63:13:d6:b7:
a3:d0:14:57:f3:54:96:28:27:41:26:12:8f:18:bb:
02:e4:98:f9:3e:40:11:75:49:37:68:33:4c:c0:9e:
06:5d:75:63:7f:fd:f1:b7:f8:de:b3:1d:e5:ab:20:
95:66:c4:a7:26:72:5a:86:a6:15:e7:77:97:5e:db:
77:81:7c:40:f2:d1:2e:c5:8d:f4:ca:4c:c0:a8:6e:
79:bc:7c:92:f0:73:ae:ec:e8:34:3c:a5:83:9d:75:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:C5:0B:29:9D:29:86:A2:36:5E:DB:65:C2:E4:93:2E:DF:D7:EC
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:70:84:1a:41:67:be:a0:ba:19:95:56:21:24:7a:dc:51:
44:2a:41:39:bc:c2:64:37:71:30:12:42:aa:10:64:25:0e:3c:
c5:51:6e:14:4a:fc:2a:f2:36:46:2d:1d:4e:f7:ed:5b:05:2f:
de:a3:f8:99:75:84:2d:0f:f8:9f:3f:b2:f6:10:2b:af:b3:22:
9e:66:81:83:60:4f:75:3d:e8:18:a7:f1:b7:9d:18:0c:17:1a:
ff:9a:7e:27:de:f6:00:bd:d8:21:21:4e:0c:7e:d0:72:33:6a:
82:3d:6d:7e:a9:a0:3f:a2:9d:33:4e:b8:32:d0:85:0a:37:72:
cc:97:24:e4:98:49:42:b8:0b:15:29:48:34:d9:83:e4:7c:57:
a7:e0:7f:40:f3:8f:3d:9a:50:83:d7:2f:c8:e4:fd:95:b6:f0:
6a:cb:0c:5c:d1:e5:2d:44:7a:80:59:2e:56:f9:a7:8e:6b:a8:
c3:65:c6:0b:bf:ba:6e:0f:2f:3b:d2:ea:3e:7b:92:5d:10:2b:
72:0b:8b:05:50:f9:60:dd:72:b6:a3:b9:ed:82:09:1a:ed:97:
a0:3b:46:16:18:73:30:6b:39:c1:52:3e:98:24:0f:e7:20:36:
c3:9c:12:88:4d:c0:10:37:91:87:2a:b7:8c:56:40:7d:0a:ce:
0e:6f:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:37:13 2025 by rpki-client