Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: q0ffyHf9iXNYBN56glL/IK0cYaVUcrIc9WCYPdY6qyc=
Subject key identifier: 89:11:18:A7:3C:AC:EB:74:1F:B4:DB:7A:0A:E5:F0:C0:D4:C3:EB:84
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 0196B22114FDB9FDED1AAB028700E151E2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 08CD
Signing time: Thu 08 May 2025 23:00:34 +0000
Manifest this update: Thu 08 May 2025 23:00:34 +0000
Manifest next update: Fri 09 May 2025 23:00:34 +0000
Files and hashes: 1: CK5OwOiGaEqVwo-YKnguP745KMY.roa (hash: A/BEklrCD+whYVqSqE4ctRcYYnzQ35ctbU126Ujt5AA=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: rlK41LdIuzvKC2TgslUaKKpZw5jcbytAuFTnYbpC0Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:14:fd:b9:fd:ed:1a:ab:02:87:00:e1:51:e2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: May 8 23:00:34 2025 GMT
Not After : May 9 23:00:34 2025 GMT
Subject: CN=891118a73caceb741fb4db7a0ae5f0c0d4c3eb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:08:1d:94:06:6a:1d:5f:4f:ae:b8:85:bb:
11:e8:3a:c7:12:3f:11:b3:ef:90:f2:40:a1:90:05:
df:d7:a7:80:dd:b8:f4:3e:c9:18:2c:57:e6:3b:5b:
da:fd:8d:cb:a4:3e:f4:54:4f:76:9f:1d:06:87:da:
03:a7:ab:9b:a5:51:c6:5b:4e:df:8d:81:88:12:92:
a2:9f:33:46:4d:5c:4a:32:d8:88:4c:56:8b:54:e3:
b4:de:13:5a:ab:2c:c2:70:3d:f9:5b:7e:93:ab:45:
4d:c8:4e:47:ff:6e:98:55:0d:d7:dd:bc:30:48:f7:
f2:e8:4f:22:01:f9:b9:66:7f:df:03:df:fb:5c:4e:
a8:a5:9a:76:75:eb:d0:da:70:94:2b:51:67:20:20:
0e:0f:72:82:64:1b:2b:cb:40:21:2e:90:94:46:42:
fd:81:82:3a:21:51:87:0c:9f:17:d7:09:ff:fe:17:
1f:a9:d0:76:b8:c0:9d:ed:f2:ff:05:35:33:28:fb:
55:a8:8c:2c:6f:42:80:90:df:5f:60:b8:60:fb:56:
ef:4b:97:7d:be:de:54:17:87:48:7b:83:b2:be:18:
97:00:1a:33:75:e6:3d:ea:65:db:58:7b:4a:ce:42:
3a:ec:3c:cb:02:52:af:09:9a:4f:fe:b1:12:50:c4:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:18:A7:3C:AC:EB:74:1F:B4:DB:7A:0A:E5:F0:C0:D4:C3:EB:84
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:1f:e6:60:6f:98:1c:89:f7:ac:56:2c:b5:42:ab:02:12:
52:5d:5d:b2:40:c8:f8:21:8e:ad:73:03:cb:ff:1d:34:84:8b:
0b:05:3e:1d:60:42:59:9c:a8:2f:ea:6b:6e:bb:9c:ec:d4:57:
46:18:82:c8:4b:8b:65:1e:bf:ea:4c:07:30:24:f7:52:11:be:
69:37:5f:85:1c:96:5d:2f:82:7a:c5:53:ad:65:8c:fc:1f:78:
4c:71:df:91:13:22:96:93:75:be:d8:6b:1a:bc:e6:e1:0f:73:
b7:29:5b:ca:42:2b:de:af:b6:64:54:f2:f5:25:aa:51:11:dc:
15:f5:ec:e1:a5:db:fc:4a:0c:1f:d4:c5:3a:57:d9:d4:d9:25:
59:6d:8d:5d:33:b3:a0:47:44:3a:fe:0d:a3:e0:56:60:ff:ba:
bf:d1:d9:2e:31:28:49:dc:a6:ce:eb:5e:91:e8:23:90:62:74:
43:23:56:da:74:dc:23:f1:13:84:66:ae:33:e9:f1:86:13:3c:
d4:fe:ca:10:2b:d1:37:f4:10:52:c8:9c:69:b6:0e:f8:5c:2d:
27:8e:19:4c:ca:d8:48:8b:a0:96:54:c2:ab:cf:e9:c7:94:6b:
e1:cd:de:96:ba:78:c4:ef:2e:71:1b:46:6c:7f:48:1b:26:6c:
a7:75:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:25:05 2025 by rpki-client