Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: qK+4B9lIuN0S2t/pm6r/HPsqTTLYjN4KF6eHlND2lgQ=
Subject key identifier: FA:89:44:A3:79:31:78:7D:26:46:5D:9E:EC:9F:9A:95:7A:69:6C:03
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 0196C2025D6565C8F262C9E1A32BDA298BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 0FD6
Signing time: Mon 12 May 2025 01:00:56 +0000
Manifest this update: Mon 12 May 2025 01:00:56 +0000
Manifest next update: Tue 13 May 2025 01:00:56 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: L1HiFq947Y9SE5y92PyJzjBRKNysFBLK2pO93FrBbQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:5d:65:65:c8:f2:62:c9:e1:a3:2b:da:29:8b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: May 12 01:00:56 2025 GMT
Not After : May 13 01:00:56 2025 GMT
Subject: CN=fa8944a37931787d26465d9eec9f9a957a696c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:da:c4:e4:8b:fc:55:9b:42:17:fe:97:e2:
9f:42:0d:ca:a2:54:4a:56:3d:16:61:29:02:86:a9:
ee:cb:57:6c:8c:a3:88:70:17:a8:dc:0d:9b:fb:4d:
41:9f:3f:5a:ea:b7:f4:63:cc:bb:16:04:f1:08:d6:
fe:58:4f:f1:8f:de:91:c0:d6:f4:d2:11:74:df:27:
82:c1:ca:2a:2f:12:fb:80:3d:96:c2:2c:21:dc:bc:
9c:1c:6a:e0:39:69:d5:61:ee:ee:f5:c5:86:cc:41:
3c:82:a3:0d:70:91:ab:47:8b:1c:1c:ac:90:df:e2:
a6:4e:f7:57:c6:42:91:56:39:6c:45:42:9f:5f:77:
0f:61:2b:3f:54:08:4c:1e:77:37:25:83:41:9d:11:
cc:3f:b8:c4:a9:07:7e:e1:5f:6e:bc:2c:6d:54:08:
11:47:d6:65:62:f2:4e:bc:6c:9b:22:7d:2b:24:4a:
38:da:e4:2a:eb:e6:07:11:df:6b:1c:6c:8d:da:c0:
8e:c6:65:95:a0:1f:53:2d:d3:30:d3:24:37:4f:27:
79:8d:c1:72:b8:c1:b9:90:dd:e2:f3:a0:c0:26:4d:
08:4b:47:bf:7e:24:20:a9:f7:e4:65:c2:b9:c4:12:
38:c1:28:52:54:1f:b5:7e:f4:f4:1e:f6:47:5a:3a:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:44:A3:79:31:78:7D:26:46:5D:9E:EC:9F:9A:95:7A:69:6C:03
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ba:dc:89:22:ee:22:e2:0b:9d:d9:c1:09:e3:7b:f3:23:69:
31:d2:fa:49:cc:a8:53:e3:93:ba:99:92:1a:df:64:11:82:25:
58:32:b5:86:7f:d4:fa:e6:b0:d6:68:21:40:45:30:43:1e:5f:
54:6b:36:a4:e8:a8:e3:f5:28:66:4c:8d:3b:14:93:19:84:b5:
7e:9c:f3:44:9e:2e:02:ae:53:fa:70:5d:f2:d2:fb:aa:68:c3:
21:41:2c:e6:d2:18:41:64:cd:e7:bd:0d:f8:cd:0f:5c:40:44:
28:9e:b3:99:32:72:c1:98:6c:cc:ab:4d:9e:48:f9:ac:ae:d9:
91:77:f3:0f:06:86:12:f0:9e:ee:13:50:8d:49:05:06:30:a4:
e0:91:61:f9:8d:ec:b1:c2:3f:d1:fb:b7:c2:4c:1f:c9:33:bc:
1d:ff:e2:8e:58:6e:d4:b1:43:40:dc:4a:09:04:02:53:23:75:
d7:4c:08:c1:58:a6:45:e1:52:62:76:bc:8f:a8:02:9f:91:38:
a9:ec:b3:cf:63:26:d0:57:62:ea:d3:e9:6e:c2:6e:93:e5:55:
93:1b:19:95:3c:f1:d1:bc:e5:cc:35:a5:d3:12:d5:c0:d4:c4:
78:58:d2:75:a5:34:cf:db:ad:e1:ee:0b:de:2c:11:b2:ec:7a:
a8:db:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:20:38 2025 by rpki-client