Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: LXu/ruz5X/VaAfZZGhSxc3oCwWdNbmjSSeGhieW/uM8=
Subject key identifier: 0D:6D:C0:16:5C:C7:81:C5:A5:49:D9:0D:B8:B1:F2:BF:C6:6A:B7:33
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 0196B333EA0C4AD411E1A719C7154BB0F22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 125E
Signing time: Fri 09 May 2025 04:00:45 +0000
Manifest this update: Fri 09 May 2025 04:00:45 +0000
Manifest next update: Sat 10 May 2025 04:00:45 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: qEpT7PC/jEwEMo3lLVTK4N81/+0m++KzK817H5cNylA=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:ea:0c:4a:d4:11:e1:a7:19:c7:15:4b:b0:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: May 9 04:00:45 2025 GMT
Not After : May 10 04:00:45 2025 GMT
Subject: CN=0d6dc0165cc781c5a549d90db8b1f2bfc66ab733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:73:37:01:09:84:1c:b7:c1:97:0c:c1:f8:
05:b7:47:16:7c:dc:11:82:bf:03:e1:7a:16:a3:d2:
ea:69:f8:f4:9f:3e:10:f6:e8:37:f7:c4:0d:1f:55:
f9:65:9d:0d:ea:cf:10:fb:0e:23:2b:3c:98:9e:d3:
ad:bd:a8:32:6f:ab:95:72:0d:52:b4:5f:4e:67:2b:
a8:9d:90:99:f5:23:68:dd:87:ba:fe:e1:ac:a4:d2:
ef:28:e0:32:c0:91:57:74:d2:88:ed:f5:b4:6e:32:
7f:d4:58:48:91:08:bd:be:58:4e:25:40:b5:e7:f1:
56:7b:cb:50:03:3c:51:51:28:9a:66:c5:7d:be:72:
28:d3:b9:5f:48:77:b6:9f:d6:b1:b1:15:7e:bf:08:
f5:9a:c1:f8:b9:b5:b4:45:da:7f:de:1d:f3:5f:df:
ed:23:d4:dd:53:8d:fe:e9:62:f6:ba:99:fd:b9:d9:
fa:00:f1:19:e1:8c:92:43:c5:41:03:0c:53:d4:de:
53:50:18:76:cc:1b:03:a5:8e:e3:0f:06:e7:4b:3c:
d8:be:76:3d:4b:75:66:d3:9a:63:05:a1:82:6f:db:
c9:7d:27:b3:ae:30:14:49:4b:92:fb:76:0b:89:40:
6f:a8:a5:b2:88:b0:16:d3:ff:33:0b:10:57:98:4e:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:C0:16:5C:C7:81:C5:A5:49:D9:0D:B8:B1:F2:BF:C6:6A:B7:33
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e1:58:f4:8e:87:27:63:28:ce:70:8c:27:44:ae:a6:57:f9:
d1:cb:13:da:20:06:69:c0:24:b8:27:96:66:2d:52:f0:ea:85:
15:a8:15:a3:f5:d2:fc:cf:e7:a0:c4:3a:34:46:1f:ea:8f:8f:
6c:6d:b0:24:82:64:ac:07:2b:0b:84:0e:66:10:c7:27:65:63:
20:da:c6:0e:2f:fe:d8:c9:7e:39:60:0e:bb:bb:ef:c0:10:6e:
de:23:9b:e7:78:4d:99:73:f6:bf:00:ea:38:a5:5a:b4:bb:1a:
db:62:12:05:4c:16:1b:3d:f6:de:e6:ec:60:ae:72:20:73:83:
01:fa:25:be:24:99:4b:a2:1f:30:9b:d1:af:39:a7:ef:f2:b5:
a0:4f:0a:bb:9a:f2:d2:1f:39:b5:00:3c:5d:d2:40:21:50:c4:
fb:a7:68:72:8a:e0:05:30:ce:7d:4f:eb:f0:40:76:36:f4:99:
86:ce:8c:42:76:37:1e:52:59:09:00:40:8a:77:0a:91:9d:49:
6d:a9:95:fe:ac:d2:f6:4d:bb:7f:87:63:ca:15:2a:d9:d2:89:
21:65:18:83:b8:45:76:88:03:47:a7:f9:cd:ef:5a:06:86:4d:
2d:9b:a2:4a:18:d1:36:a7:f0:72:2e:93:42:3d:e3:7f:ed:27:
18:95:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:09:57 2025 by rpki-client