Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: j43RwASpkXl6Js2o7Yfud59Rx/9xPgS2h4LbPv6J+qM=
Subject key identifier: 45:1B:79:6F:15:12:7B:B1:6D:2C:D4:04:97:6B:A4:DE:DB:AA:D4:C4
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 0196B0696DD5008A180D1920BC544A2281BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 11B1
Signing time: Thu 08 May 2025 15:00:21 +0000
Manifest this update: Thu 08 May 2025 15:00:21 +0000
Manifest next update: Fri 09 May 2025 15:00:21 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: Br37xSSCAmJtLsFA7vbpzzT+383xVwoxE3DWjtE0LGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:6d:d5:00:8a:18:0d:19:20:bc:54:4a:22:81:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: May 8 15:00:21 2025 GMT
Not After : May 9 15:00:21 2025 GMT
Subject: CN=451b796f15127bb16d2cd404976ba4dedbaad4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:bc:5c:f3:63:f5:e2:5b:17:4e:d5:c8:73:
45:08:73:d6:15:4d:75:03:06:f7:61:3a:f6:91:20:
95:07:7a:be:be:ce:42:79:d6:23:0f:f4:6f:53:8b:
57:bd:27:d9:79:8b:e7:d6:4e:b9:93:09:bb:f6:da:
44:e8:18:38:f9:72:79:e0:05:3f:e2:ff:b5:e2:d8:
bb:28:90:c0:3e:b0:77:11:c8:ee:b4:2b:aa:99:eb:
d8:f0:86:cc:81:6d:bb:b2:5c:61:2c:5a:51:7f:6d:
f9:c8:ba:1d:e7:63:a4:40:1f:a6:10:71:26:e1:ae:
d9:fc:71:10:03:72:90:de:0a:f1:e3:ff:db:fc:6d:
5a:88:85:a7:c7:18:a9:a4:ba:e7:96:e0:0b:03:5e:
21:b2:64:34:27:3f:e5:87:84:14:06:a7:53:6b:d8:
ef:d6:1b:6e:9a:21:fd:e0:0d:b3:98:39:33:5f:4a:
93:1d:cc:2d:ee:9a:d9:a2:35:0b:58:6a:a6:5f:38:
ea:a3:16:35:d3:9a:5d:47:e4:e0:22:2c:0f:1c:2a:
04:4c:ae:02:4a:48:30:5e:d3:67:09:03:9a:35:2b:
74:d9:8a:e3:37:cd:20:c0:3f:72:57:d6:77:27:1c:
31:8d:12:35:e8:ec:14:81:b7:1a:55:95:ff:53:94:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:79:6F:15:12:7B:B1:6D:2C:D4:04:97:6B:A4:DE:DB:AA:D4:C4
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:38:f3:db:52:6d:67:1f:80:70:00:54:14:1a:be:c8:db:38:
b7:bf:12:d2:3a:7c:d9:5c:3f:0b:3a:a5:a5:df:ab:26:8b:ba:
4e:e7:ba:15:ad:d1:7b:bc:9e:6f:85:91:de:33:47:48:ee:90:
37:2c:d5:5c:a0:c1:e5:97:7f:81:90:31:93:38:6c:b5:e2:05:
5c:df:f1:9f:26:a9:f0:b9:cc:f6:bd:15:85:d2:c0:82:8a:e7:
0e:9c:3b:3f:99:a2:9a:bc:f5:28:87:60:86:c4:de:79:a8:0c:
57:d3:9b:3c:30:53:3b:0e:16:a1:33:64:2e:3a:54:89:00:9a:
70:84:53:c8:ac:cd:ee:33:9c:c7:a9:29:9a:28:c7:b3:e8:c1:
07:9c:79:05:14:f9:7d:75:a0:c4:70:3d:65:e5:e7:ef:56:52:
0c:b9:45:c8:a9:9e:42:a8:4a:4b:c5:f0:56:27:aa:ed:e0:0b:
82:f0:0d:24:db:fc:6e:dc:3c:cf:97:b9:8a:3a:f3:70:41:d1:
d7:e0:cf:96:8a:48:34:ea:d5:9f:32:52:d4:40:90:19:f6:85:
e9:d4:40:1c:61:9f:23:53:1e:05:3b:46:0a:62:87:1c:6c:77:
f4:46:c5:dd:23:24:a5:95:0c:fe:87:fe:23:6f:d3:7d:1b:b4:
2f:08:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:10:21 2025 by rpki-client