Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: FJkZM4l542szbs/kKGKet0FZmZGhC0UAtBUXecgJ+LM=
Subject key identifier: 06:6A:C9:A6:36:1A:34:81:6D:7C:47:1A:7D:68:36:3B:C8:0D:41:38
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 01969F08134255461D42704A448086B4EB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 0E9F
Signing time: Mon 05 May 2025 06:00:28 +0000
Manifest this update: Mon 05 May 2025 06:00:28 +0000
Manifest next update: Tue 06 May 2025 06:00:28 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: t0nERoeI7IM6BalV0K9gALiOuVwq4iEoM8bpmbEtR/c=)
2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:13:42:55:46:1d:42:70:4a:44:80:86:b4:eb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: May 5 06:00:28 2025 GMT
Not After : May 6 06:00:28 2025 GMT
Subject: CN=066ac9a6361a34816d7c471a7d68363bc80d4138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:6d:61:0f:0f:7e:15:17:ea:f4:ce:9c:e5:
b4:a2:95:80:4d:19:bb:0f:12:80:17:0c:c4:89:ce:
5f:d1:be:f6:4f:f3:59:e9:63:59:0f:a8:68:96:6f:
72:27:fb:54:8c:09:1d:48:fe:75:6e:a1:48:d6:5d:
bb:0f:ce:5e:53:f0:98:2f:54:40:84:25:3c:c5:b2:
b4:65:f0:d6:76:5c:22:36:c4:82:95:75:e3:43:86:
5e:58:14:00:20:0b:95:e5:e0:43:17:2b:43:d0:fb:
35:d9:bc:e7:05:62:a3:4e:d4:6c:7a:1b:0e:40:fe:
e9:f4:a6:68:a4:3f:a4:2d:a2:4d:3f:40:de:06:fc:
e1:d6:4a:da:25:45:75:d8:48:5e:af:f1:bc:3f:b0:
c5:a1:90:29:86:83:8c:96:29:2e:f8:a5:d7:5e:d9:
81:c4:8f:9b:e7:d8:0b:e9:70:56:30:92:02:96:ee:
23:b8:37:26:6b:57:b9:54:2f:b7:85:9f:5c:07:5e:
c9:a5:d2:e2:10:b9:8c:8d:e0:7d:35:71:62:c6:d8:
63:e3:87:9f:c6:7d:0f:55:ad:1f:9b:9b:be:4f:4b:
98:36:0e:14:c2:73:09:f1:ed:9d:d7:08:38:09:5e:
63:91:aa:65:73:b3:2d:57:68:ee:f0:d0:fd:1a:90:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:C9:A6:36:1A:34:81:6D:7C:47:1A:7D:68:36:3B:C8:0D:41:38
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:87:64:a7:1d:29:77:9f:09:63:b7:fb:e4:f0:57:8a:aa:
78:d0:6d:3d:ea:d3:22:82:d7:dd:89:0e:71:c5:02:c2:b6:04:
5e:67:4b:f0:87:f9:6a:31:50:18:a8:a4:ad:31:09:27:fc:8d:
c5:56:76:c7:65:8c:9e:a3:a8:37:c1:e9:de:0d:8d:d5:09:d9:
0c:e5:7a:27:f7:b3:8a:58:04:67:5c:37:87:33:6f:c8:7b:21:
6f:49:89:dd:a6:29:d3:b6:a6:41:0b:8d:66:24:16:1e:d1:a3:
ab:3d:36:b0:02:7c:3a:4b:02:b8:00:37:ee:d9:14:b2:21:dd:
91:3c:d1:a5:6b:56:3f:0c:e4:e8:70:ee:5c:06:6f:be:9b:17:
b7:3f:4c:db:e6:d0:ca:46:8f:44:e8:32:6d:cc:e6:50:8b:59:
36:e7:6e:a9:5c:11:0d:92:5b:40:da:6d:c7:01:21:57:5c:41:
50:78:6b:3e:9f:06:dc:ce:2b:7a:43:dc:45:b1:6b:51:01:2b:
d8:7b:52:80:63:f4:76:40:4a:7c:b9:b0:81:be:fe:c8:14:c4:
eb:88:4b:35:fa:e8:1d:8a:6d:d6:70:1d:e4:4e:56:d6:99:cb:
ef:ef:b2:0d:5a:e7:1d:c9:f8:f2:2b:20:5e:be:bd:f0:b6:58:
1f:4e:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:23:59 2025 by rpki-client