Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: gawqjWVCELXwOPeMuAFrzK0hvEfJ4/HP/tBy2yhW/s0=
Subject key identifier: B2:5D:75:B5:0D:D0:63:4B:7D:BC:9B:AD:F1:D0:CF:57:2B:FE:7D:F2
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 0197C75D610F0E1C64C31AEC158A11949A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 0592
Signing time: Tue 01 Jul 2025 19:01:15 +0000
Manifest this update: Tue 01 Jul 2025 19:01:15 +0000
Manifest next update: Wed 02 Jul 2025 19:01:15 +0000
Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: cMGWp44lv35RthTVVnK0dsa0bmSh84U05XMbR7w3TEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:61:0f:0e:1c:64:c3:1a:ec:15:8a:11:94:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Jul 1 19:01:15 2025 GMT
Not After : Jul 2 19:01:15 2025 GMT
Subject: CN=b25d75b50dd0634b7dbc9badf1d0cf572bfe7df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:33:ed:3f:54:34:ce:93:58:8e:92:33:3b:
e7:84:3f:b5:cb:99:09:8b:3a:cf:59:a6:5e:9e:e8:
18:82:32:db:c8:da:64:70:7e:07:4b:50:35:27:45:
5a:58:c7:3d:eb:a1:a1:93:4d:59:b5:67:bd:be:5f:
2b:0e:d1:8e:1c:a8:8c:2b:a0:3f:90:b1:c4:f9:58:
6f:a3:5b:34:b3:1c:d9:21:bf:77:3a:e3:db:bf:50:
e3:dc:cc:fc:65:6c:f3:76:b9:a6:4c:98:98:dc:6a:
31:a3:0d:cf:c9:9a:55:c2:3a:e4:26:70:16:56:19:
24:b5:a9:f4:ab:44:bf:71:5f:38:4d:b5:7a:6d:cd:
53:eb:8d:11:fe:bb:8d:65:ec:e5:80:fc:e1:06:9d:
6c:93:fe:e5:1c:e9:5b:e1:b3:85:f1:8b:84:2f:a1:
12:0a:2c:0c:e0:40:59:40:2f:ed:9a:51:f9:0a:4d:
97:9b:0f:b3:fd:62:59:52:81:a7:9d:0a:ba:1d:1e:
99:28:30:af:de:e7:c1:09:24:57:7e:c5:0d:bc:00:
08:90:bd:46:2b:ef:42:4f:d9:9b:79:da:7b:4c:54:
19:dd:f0:53:e4:62:b3:fc:42:47:6b:c5:f3:82:7a:
f3:e7:71:5a:30:43:9e:f1:6e:be:bf:d3:14:60:d5:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:75:B5:0D:D0:63:4B:7D:BC:9B:AD:F1:D0:CF:57:2B:FE:7D:F2
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:93:1f:f7:fb:8c:4e:7b:2e:6b:6b:7f:23:c4:c4:99:58:0f:
00:1a:b2:15:d3:d5:c5:d3:81:27:40:93:b1:00:24:64:ad:2e:
ec:a7:13:74:2d:03:be:43:39:34:b4:2c:cf:44:88:3a:0d:a4:
cb:77:33:c2:ec:ba:3a:4b:49:62:7c:a0:e6:ae:af:24:3d:0d:
0f:ba:a1:90:fd:0c:88:90:ea:cb:6b:df:b0:a0:19:0a:e6:0d:
61:c3:47:cb:55:fd:c0:f6:bb:f5:68:d8:c0:14:e7:c2:fc:01:
53:e4:5b:c2:ce:6b:c9:35:de:25:5d:87:02:46:a4:85:2a:fc:
61:b9:f3:ef:49:0b:f1:cc:e4:3b:d8:b9:62:f4:23:80:a7:da:
be:d1:d0:01:2e:8b:0f:31:fd:21:37:76:d5:b4:8c:29:1a:b3:
33:28:1f:66:e8:5d:6d:23:2c:5e:db:21:1d:d9:3b:7a:8b:6d:
b5:3a:dc:80:ec:81:36:62:7e:92:ef:85:90:6d:a3:b8:c5:d0:
17:1d:97:47:4f:40:5c:a7:b4:1e:ba:f4:31:71:c9:44:b3:e8:
39:b9:85:63:3c:9d:46:18:6a:f6:b2:85:87:7b:82:95:39:f5:
69:c4:ad:80:73:19:fa:7d:d8:f3:31:56:23:60:4f:07:ec:0b:
79:e2:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:22:12 2025 by rpki-client