Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: XdOlOJjIbtswwr9BJ7EJ/rop8HIl3eoNXVo7E+4KnNQ=
Subject key identifier: 75:84:1A:AF:B3:FD:0B:99:3C:16:72:F4:9F:9F:D2:F9:6B:A0:74:5B
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 0196C3F098AE2EB06AD3A858D4A86A7A92AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 0250
Signing time: Mon 12 May 2025 10:00:46 +0000
Manifest this update: Mon 12 May 2025 10:00:46 +0000
Manifest next update: Tue 13 May 2025 10:00:46 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: iPokGlVxC642jCsKLaKk+2ovjMjjbtXm47fCYgyx0q4=)
2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:98:ae:2e:b0:6a:d3:a8:58:d4:a8:6a:7a:92:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: May 12 10:00:46 2025 GMT
Not After : May 13 10:00:46 2025 GMT
Subject: CN=75841aafb3fd0b993c1672f49f9fd2f96ba0745b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:90:ab:16:c4:40:52:e6:c2:13:2d:8f:40:
5a:1d:db:c7:1d:3d:59:80:b8:f5:ad:10:cc:08:8c:
7a:10:58:ab:c6:64:b8:48:1e:77:3f:af:3a:62:71:
9a:3e:60:61:96:49:9e:06:f7:aa:e1:d9:a6:06:2e:
63:e0:3e:f8:19:68:1b:fc:54:39:e1:7e:76:16:5c:
a2:cd:3c:35:2b:db:2e:d0:99:04:04:6e:f9:a5:12:
7b:e7:51:64:84:ae:eb:cf:ab:67:15:91:2f:13:47:
c6:9d:c0:b7:72:e7:64:6c:17:9f:25:6e:73:7a:b9:
ff:a6:e6:a5:c0:b2:9a:0d:3c:94:5d:99:bb:e6:e0:
91:d8:13:a6:74:83:b4:36:e3:63:86:20:2e:45:45:
50:ad:cd:85:35:c1:01:36:5f:e9:ba:f2:8b:fc:6a:
63:8d:df:15:87:d8:9a:26:b4:1a:36:38:77:66:36:
a3:bd:d3:3a:e0:16:79:93:71:bb:10:07:03:e6:e3:
1a:54:a4:bb:9e:ed:71:b6:7d:25:2c:e5:f5:3f:c2:
e2:f9:2c:e9:e1:19:83:90:bf:c7:9d:d4:57:37:d0:
23:33:33:66:92:42:b6:67:52:94:29:96:94:43:e3:
c2:8d:e9:b2:fa:90:50:5f:14:6e:dd:79:8d:08:11:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:1A:AF:B3:FD:0B:99:3C:16:72:F4:9F:9F:D2:F9:6B:A0:74:5B
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:76:be:a6:5a:ea:33:4d:6e:db:fb:ec:f2:d7:8f:3d:6f:
e2:93:04:51:35:61:d5:3d:c3:a5:e2:66:32:9e:07:61:95:47:
4b:3a:21:dd:04:40:f7:80:01:4e:ba:c6:1a:16:f8:06:20:29:
37:da:d0:02:dc:1b:4c:f6:2c:3b:2e:6f:b4:a2:37:e3:66:42:
68:9b:18:eb:17:95:00:fb:46:e0:10:00:6a:9f:e4:ec:ba:d8:
28:45:8e:8a:20:84:c4:53:19:80:d3:f9:d9:92:62:fb:5d:7e:
91:ab:41:9d:5d:ed:90:14:fe:7f:50:de:6d:02:fb:61:16:31:
07:df:27:13:d9:7d:a5:a0:05:bc:f6:36:ce:1d:a0:6b:a8:e1:
ba:95:a6:19:15:91:d2:d6:99:e6:ae:8c:df:57:c3:bd:dd:c4:
50:75:d9:7c:6e:70:e0:f8:bd:00:fd:83:96:fd:e8:9e:35:18:
fc:50:c0:c1:9a:f6:07:b1:27:d8:72:6b:18:fa:96:4d:f4:0f:
bf:75:ac:7e:ac:37:a9:5f:42:9a:d3:e7:62:78:ed:22:3d:80:
5c:9d:c6:d0:02:8a:8e:fe:6f:c6:8c:4b:f2:9c:48:5c:0e:9a:
b0:fb:44:45:bd:8c:9e:f6:cf:e7:48:6e:a1:3f:a2:67:61:56:
6e:2c:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:32:50 2025 by rpki-client