Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: lYCYx5tJiBEXUDrAEmzBxrDTJRNMZCa6w4ahUps+qFw=
Subject key identifier: 34:6C:BE:09:8A:53:B1:51:C5:B4:EC:28:AD:D1:EA:38:61:D1:52:CB
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 0196BE92E0EF327DDEB865925A31E032D799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 09:00:18 +0000
Manifest this update: Sun 11 May 2025 09:00:18 +0000
Manifest next update: Mon 12 May 2025 09:00:18 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: N0DZB3/l+SSMc+VLHb2d9AaCDP5cwdmr06WJBj+TQUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:e0:ef:32:7d:de:b8:65:92:5a:31:e0:32:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: May 11 09:00:18 2025 GMT
Not After : May 12 09:00:18 2025 GMT
Subject: CN=346cbe098a53b151c5b4ec28add1ea3861d152cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:b5:4b:77:1f:77:07:71:be:6f:e6:e5:84:
25:c0:25:91:ca:3b:eb:5b:1a:7f:26:4b:c7:66:16:
0a:23:62:6f:97:72:e4:a6:19:ec:98:ea:72:bc:3d:
30:8c:d3:bf:c9:f3:39:e7:8b:c5:fd:db:87:44:2f:
e9:75:7c:48:48:3a:8f:e8:2d:c3:63:20:66:9a:ae:
f2:7b:82:69:6c:9c:67:96:df:b9:58:0d:7d:42:68:
a5:12:b2:d6:cd:90:fa:71:1d:0f:07:fd:7d:d1:59:
40:c8:4b:2f:44:f7:ed:c1:60:bb:47:0c:37:06:ff:
18:91:cf:fc:9e:83:36:be:ca:ad:a5:6b:23:90:b9:
62:73:0f:79:e4:83:6d:cd:af:f2:b6:d5:7b:a3:ac:
23:ed:68:31:d9:31:c0:8c:b6:91:05:97:7a:a7:15:
16:c6:54:ba:97:cd:c1:59:c4:ad:2b:a9:e8:74:2b:
9b:8c:a8:b1:7a:59:13:8f:47:2e:42:e8:e4:a5:5d:
90:f6:93:e2:21:60:28:35:9e:77:03:b8:6f:27:8d:
1e:a7:5a:d8:66:05:9e:8c:6b:81:06:b7:8c:2a:d8:
a0:40:94:b2:62:42:59:46:2a:4d:e1:00:7d:75:73:
f5:55:49:56:58:00:46:51:84:2b:75:da:d3:1e:c8:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:BE:09:8A:53:B1:51:C5:B4:EC:28:AD:D1:EA:38:61:D1:52:CB
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:05:35:76:93:4a:fc:e7:77:9e:b7:bc:65:07:03:95:9a:1d:
eb:c1:53:62:0f:75:63:9a:67:61:7b:b1:92:b9:25:71:19:47:
69:d3:7b:dc:69:e8:d1:a6:83:f2:52:91:08:3f:f2:b5:0e:d2:
71:13:14:89:4d:84:e2:aa:3f:f0:b6:9d:68:0a:32:d8:08:1b:
93:5b:6d:25:e0:45:53:0e:be:b4:41:cf:d1:a1:50:94:48:80:
28:db:36:ef:0a:12:8d:f4:ec:47:1e:e3:1b:58:82:df:19:89:
a9:eb:58:9b:39:78:94:37:a7:5f:9a:a8:1d:83:05:2a:3a:e9:
22:e5:d3:80:66:e9:e1:32:56:b3:a1:d9:e1:ab:f9:9a:3d:7a:
62:d1:6d:f8:2e:40:f1:ce:36:92:76:a0:84:14:6e:ed:ad:d6:
41:d1:af:76:79:87:6c:ed:92:35:18:99:12:f1:e0:c7:ff:9f:
28:35:ac:ce:a7:bf:f9:b8:f3:f6:ff:70:87:62:9d:a8:f0:ac:
3a:77:3f:76:cd:0a:1d:0d:e4:5c:fb:63:17:d5:8e:6d:de:0f:
dc:0b:e5:6c:07:2d:a0:2e:fc:92:c2:d3:dd:23:5e:6f:8c:cd:
06:ce:27:dc:00:38:ad:cb:7b:47:29:2c:81:1d:5f:c9:0d:7f:
e3:63:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:57:47 2025 by rpki-client