Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: gHc5/oqy3oR3Krwpf01Rb8erOebz4AmZMWgAotGtNog=
Subject key identifier: 21:0C:B8:2B:04:76:F7:40:F3:21:16:C6:A5:39:61:A1:DB:9F:AC:9C
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 0196BB5B2F4DB85B781305B4D62029F23C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 06D9
Signing time: Sat 10 May 2025 18:00:37 +0000
Manifest this update: Sat 10 May 2025 18:00:37 +0000
Manifest next update: Sun 11 May 2025 18:00:37 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: 5oikTlkFkG9f6datfskYAm6gz8BBN2XinqM2Io2bm4I=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:2f:4d:b8:5b:78:13:05:b4:d6:20:29:f2:3c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: May 10 18:00:37 2025 GMT
Not After : May 11 18:00:37 2025 GMT
Subject: CN=210cb82b0476f740f32116c6a53961a1db9fac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:4a:1f:84:84:48:b2:80:02:7c:2e:85:95:
78:c9:2e:dc:2d:79:d9:ee:67:4e:59:de:5c:d9:95:
b9:98:2b:6d:3f:1a:cb:64:23:95:32:76:2e:6f:27:
c1:e4:e1:3f:7d:32:f3:96:d0:99:57:a5:a5:ca:df:
84:0d:21:8f:d9:99:12:f6:2a:62:ad:7b:8e:10:f2:
a3:5d:e7:4c:39:ac:6f:24:1f:01:c8:52:a4:a0:0e:
58:68:52:b4:21:dc:e7:71:9b:c4:22:db:d0:ed:f1:
8e:00:12:1c:50:87:3d:83:29:8c:31:e6:0d:de:ad:
d2:5d:3c:45:fd:9a:8e:a6:62:3f:40:14:4e:42:89:
fc:66:da:1b:70:60:e0:25:d3:2c:f2:64:a9:3b:82:
23:04:06:51:73:ce:dd:46:35:1f:c1:e5:67:44:1d:
cb:24:c3:87:36:46:7d:08:33:ad:9c:a7:49:28:e3:
17:72:d5:31:a6:23:1e:90:90:fa:da:46:d9:8b:10:
a4:a3:0c:35:a2:32:17:04:36:65:2e:f9:f4:55:5d:
27:93:35:d6:85:ce:24:9a:44:05:67:16:93:fe:10:
0a:7c:b5:85:36:a9:3b:3c:88:eb:fa:0a:49:22:cf:
9b:a5:3d:c5:ba:4a:b1:0c:53:90:2c:08:67:11:2a:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:B8:2B:04:76:F7:40:F3:21:16:C6:A5:39:61:A1:DB:9F:AC:9C
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:3c:ef:0c:33:0d:27:0e:49:1e:86:8e:58:b1:de:bd:01:
5c:e4:d8:a5:2c:12:00:33:bd:34:0c:f8:15:5a:db:8e:66:30:
df:43:e4:2e:aa:e1:cd:68:c3:9f:e4:52:43:17:e2:e6:27:0a:
ac:29:8e:da:b3:8f:59:c8:fa:e5:5c:79:b0:c7:03:79:5c:8a:
fa:fa:98:67:5e:b3:bf:58:a1:4d:58:54:3c:53:20:0f:95:2a:
f3:c3:bf:1f:16:86:00:c2:f9:bc:c2:d7:94:85:11:b1:27:33:
67:7d:96:a7:60:42:d5:56:63:85:2a:e9:56:ed:1b:fe:e7:86:
82:5c:13:b4:3b:57:83:46:8e:40:f1:98:fd:c3:14:80:50:63:
db:a8:2f:e1:83:77:97:8b:36:98:b4:b8:eb:11:00:3e:5e:56:
2e:26:41:00:fa:3d:66:ac:15:97:3c:fc:a9:35:eb:65:69:68:
8f:c2:95:36:69:85:56:5c:78:fc:2d:d7:a2:90:f5:55:3a:a4:
ea:3a:a2:73:a0:74:c7:67:3a:4f:87:49:1f:9f:aa:a9:41:93:
fb:a0:56:a5:b8:ed:f4:16:f3:48:b6:a8:94:00:d9:71:25:71:
c9:94:87:03:b6:0f:bb:de:62:1a:81:f0:d0:0e:cc:36:a9:db:
26:28:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:25:09 2025 by rpki-client