Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: FqrGs8plxT+wzJr4mslrbrbHpXgiTAUbUo9h4c4YiZI=
Subject key identifier: 99:F9:93:B8:15:D0:55:F0:70:C2:53:02:D8:72:C8:74:35:91:B2:C0
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 0196BECA609BFEABAD9F61EECF5AE6EDA3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 0576
Signing time: Sun 11 May 2025 10:00:56 +0000
Manifest this update: Sun 11 May 2025 10:00:56 +0000
Manifest next update: Mon 12 May 2025 10:00:56 +0000
Files and hashes: 1: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: fQ8kvI+Tz/T/m4ppkj9MtY9WkRwL9q0xxqhAwfw9EBs=)
2: ZTIBKgjTaXW_ZnWc7123527kr5M.roa (hash: nKgH3xdgZjr7Kq7o7yKNcoST/uR2S0ghz6FcpqSglbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:60:9b:fe:ab:ad:9f:61:ee:cf:5a:e6:ed:a3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: May 11 10:00:56 2025 GMT
Not After : May 12 10:00:56 2025 GMT
Subject: CN=99f993b815d055f070c25302d872c8743591b2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c2:a7:85:cf:c1:7b:c3:c7:1c:71:c3:bf:a6:
a3:ba:73:e7:57:c3:22:5e:b7:60:10:da:29:7e:f2:
a3:72:43:79:df:3d:2f:b4:2f:73:2f:21:5b:0d:36:
f7:81:e2:cc:45:23:36:de:c0:2e:1d:15:f6:a4:a7:
33:9e:71:75:69:18:b6:3a:88:af:61:a6:38:c6:70:
2f:b8:87:6d:8e:e4:5d:b9:03:f9:56:da:78:21:c7:
c0:32:22:53:02:c8:61:d0:78:86:74:97:cb:c7:cc:
6e:4f:ff:9b:1d:91:20:a5:3d:4a:c7:2d:47:20:c0:
00:9e:8c:be:fe:59:14:6d:bd:8b:fb:0d:0d:01:70:
df:9c:9d:ab:36:42:91:b6:be:1f:13:73:0f:4d:e5:
fb:ab:36:5d:ba:e4:8b:51:01:b6:59:ed:59:de:82:
3e:84:74:1b:8e:54:e6:c3:e7:d1:83:10:54:31:e9:
74:70:49:ba:27:ee:65:a6:71:b9:8d:17:37:64:9d:
74:31:19:77:29:59:d1:c3:9f:41:90:2b:27:0d:c8:
ef:88:9f:0b:58:f4:3e:d9:d4:72:3a:0d:2b:80:a8:
36:f8:c3:00:8c:a7:69:fc:19:0e:ce:29:7f:6e:7b:
c4:88:61:a0:af:1e:26:b1:85:59:0d:7b:0c:5c:3d:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:93:B8:15:D0:55:F0:70:C2:53:02:D8:72:C8:74:35:91:B2:C0
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b2:bf:a7:66:ab:40:50:a5:8e:80:5b:e4:57:ae:e8:c9:42:
f0:18:60:27:30:2d:57:07:03:77:63:cf:71:10:2c:24:99:55:
c7:d6:4b:8b:fa:22:55:ca:03:21:7f:11:23:bd:3e:7d:a4:f9:
4f:c0:39:29:2c:57:82:cb:62:a0:9a:f7:82:3a:10:94:48:65:
54:0d:ed:d5:52:5e:36:78:96:90:95:44:af:8c:0a:5d:27:54:
e3:a8:34:a1:62:01:14:52:08:cb:60:97:64:02:aa:30:b7:d5:
33:4b:e7:39:6e:b1:03:55:d6:c5:d6:3c:a2:2c:1f:7a:af:0e:
4c:db:a7:74:1a:c6:05:9c:4b:ba:6f:a6:24:e4:1c:7d:a7:67:
1c:c1:cc:94:1c:fb:1a:2b:d7:19:8a:2e:1b:7b:15:91:f3:5a:
4d:bf:9f:43:d2:a1:3b:21:6b:77:ad:aa:6d:4d:20:24:90:bb:
af:a3:df:4d:0c:49:44:12:67:00:32:13:6b:25:f4:91:b5:e3:
b6:f9:2f:0f:8b:3e:27:8e:d4:61:8f:ab:fd:f4:2f:3b:ac:3d:
c9:49:62:ed:60:e6:7a:a8:f1:b0:8a:f3:95:de:69:fa:5d:60:
c3:00:6a:56:67:d8:e8:93:e7:26:d7:69:03:39:74:f5:d4:1c:
19:f1:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:42:58 2025 by rpki-client