Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: 4WXm7hfNkukOcGuPhk28fv3gCFPhB18NAqmypjohLaA=
Subject key identifier: 90:09:0D:0D:E0:14:A1:F0:B3:C9:E7:A1:D5:9A:3C:64:B3:CD:81:37
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 0196BD12C8EA36C959FC0354258CAE6D8496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 0506
Signing time: Sun 11 May 2025 02:00:46 +0000
Manifest this update: Sun 11 May 2025 02:00:46 +0000
Manifest next update: Mon 12 May 2025 02:00:46 +0000
Files and hashes: 1: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: uf7LLv+ySHGN2wTVL4xhg3L6u0di7/TwSOnszkKoLCo=)
2: HfhWfm-8JwIIiQYp_iHO4fd3ANk.roa (hash: D9mkb/r3quYRr8SAt68TwHmtLFpg3Gut24nbmI/VIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:c8:ea:36:c9:59:fc:03:54:25:8c:ae:6d:84:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: May 11 02:00:46 2025 GMT
Not After : May 12 02:00:46 2025 GMT
Subject: CN=90090d0de014a1f0b3c9e7a1d59a3c64b3cd8137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:b3:73:02:94:ec:6f:1c:e2:27:43:4e:40:
1f:f0:a7:fd:ae:aa:0f:73:e9:41:e4:19:bb:02:d3:
53:c8:00:97:9a:93:20:1f:37:35:89:3d:c0:8c:d9:
6a:fb:0d:6e:89:d8:0f:54:93:68:45:3e:8e:ef:16:
12:76:9d:0c:d8:65:c9:42:d5:52:c6:08:80:1a:23:
41:c7:87:7a:82:9d:e5:12:4f:58:6d:38:1d:36:ce:
44:59:54:58:91:e2:0d:ee:09:ac:bb:65:e5:32:51:
94:39:d2:20:e1:c8:30:a5:98:ed:be:77:fc:27:23:
5a:b8:04:0d:be:df:b7:95:10:49:83:20:ab:c4:f7:
6e:35:4e:f1:38:8b:af:94:01:8f:f3:22:c3:1c:54:
bf:e7:f1:56:f7:94:f5:10:b0:84:63:98:54:b7:64:
44:18:9d:09:f8:77:a4:66:e3:22:85:4b:39:d8:4c:
d0:1f:bf:56:29:85:3a:7e:8c:f3:9a:cd:79:f4:af:
69:a4:58:22:ce:4f:20:c4:ea:41:68:63:97:f9:66:
17:d6:3d:bb:cc:60:a8:d0:5f:da:24:29:6c:ed:f3:
11:71:fa:dc:e6:90:a1:44:9f:ec:a8:0b:b9:29:22:
7f:82:2a:2a:17:aa:08:a7:2f:62:62:2a:e0:2a:60:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:0D:0D:E0:14:A1:F0:B3:C9:E7:A1:D5:9A:3C:64:B3:CD:81:37
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:41:36:05:1e:0f:9b:e0:9b:44:1d:c2:49:92:ef:e7:26:42:
b4:47:b7:42:9f:e9:c8:33:87:e3:58:10:a5:f0:f8:33:ec:67:
ec:0e:fa:29:ff:be:28:1f:63:1f:8c:ba:3d:56:08:f1:5e:54:
1a:fb:f4:68:49:f2:ee:a7:18:11:06:f1:90:f8:b5:d8:d7:d7:
c8:13:bc:6c:64:b4:bc:7c:d9:d7:dc:85:1c:24:40:b0:30:60:
6f:40:28:42:07:e6:5b:a3:6a:0d:fc:92:7c:63:fb:46:e1:1b:
33:30:11:c1:05:5d:d4:56:fd:ba:ce:bf:78:e9:d4:bb:cb:ce:
62:74:65:72:23:3c:0c:9a:ca:31:4a:b7:9a:c6:28:91:55:5e:
05:d9:ac:12:f9:9a:1d:92:09:db:4e:85:62:6d:a6:3e:f9:dd:
b5:d0:f0:4e:4f:b2:c5:bc:08:61:f5:2f:61:44:1c:0b:4d:b6:
3a:ba:ee:c2:cf:29:f5:11:4c:a5:e5:fe:98:f9:6b:44:26:6f:
72:1d:31:c5:40:bc:bf:64:3e:cc:75:f0:42:fa:9d:c2:81:2d:
47:60:27:4c:63:a7:11:37:b0:43:98:19:0c:55:75:bd:83:75:
85:21:68:03:c2:ef:e0:a6:67:82:5c:19:8d:2c:37:4e:60:7e:
ae:c9:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:14:41 2025 by rpki-client