Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: 0egwczGgPsb06A9E1LOSmofC7rv63L1S2hqEgmIfR7k=
Subject key identifier: 67:2A:45:6F:AC:D3:FB:C1:5C:04:04:AD:10:E8:2A:D6:F1:0B:24:A6
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 0196A2096A6265FC5C84A00675F7D1E696DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 20:00:48 +0000
Manifest this update: Mon 05 May 2025 20:00:48 +0000
Manifest next update: Tue 06 May 2025 20:00:48 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: 5eR8j/6c3AfjlrfeYtldScioJROnfR0K04ZW6xACTLU=)
2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:6a:62:65:fc:5c:84:a0:06:75:f7:d1:e6:96:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: May 5 20:00:48 2025 GMT
Not After : May 6 20:00:48 2025 GMT
Subject: CN=672a456facd3fbc15c0404ad10e82ad6f10b24a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:75:0d:47:97:e9:e1:2e:bf:61:09:0b:91:
5e:e7:2c:83:67:b1:ec:96:35:61:8c:d0:f6:9f:2d:
88:cc:0b:69:b9:7d:6d:46:88:c2:7e:82:48:1f:4a:
90:0b:94:d4:63:83:ae:5b:f3:69:00:91:42:b4:08:
11:c1:c3:c6:5f:9a:b3:aa:aa:72:30:be:ac:c6:f8:
2e:30:98:26:37:7a:9d:3d:d6:c2:bf:44:61:ef:57:
2d:4b:c5:21:d6:15:8e:aa:a0:36:62:bd:45:b3:c5:
a3:66:03:8f:d1:c0:d2:8f:e5:a5:3a:fd:7d:3f:46:
46:79:7b:17:01:7c:b1:78:ba:4f:75:2f:1d:14:85:
88:ce:fb:ee:63:96:48:38:b4:83:cb:81:7a:53:89:
3b:cb:63:0d:3a:ea:db:ff:39:80:a7:2a:d1:66:84:
a0:dc:b4:57:6b:df:1a:3f:0b:f8:2f:5f:ec:aa:02:
cf:24:cc:f7:19:90:3e:53:44:2d:43:4b:26:71:15:
bd:86:e3:d9:2d:6d:d4:30:ab:08:4f:8d:4e:7c:71:
b2:51:86:35:1c:c6:b7:75:e7:d0:18:fc:7f:eb:ce:
fc:69:d7:f8:9a:af:06:62:2d:71:37:06:e4:fb:eb:
55:b0:80:dc:d8:13:1b:35:99:dc:a4:64:a5:56:f2:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:45:6F:AC:D3:FB:C1:5C:04:04:AD:10:E8:2A:D6:F1:0B:24:A6
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:03:db:b1:dc:6d:ac:92:17:be:6f:c8:c0:63:3b:03:45:fe:
cc:bc:68:09:1f:b9:f5:33:46:04:dc:c7:41:35:d2:29:de:5f:
9f:59:f2:ca:c5:e0:26:9f:88:8a:d1:0f:f9:be:bd:f5:92:d0:
da:89:5e:8f:cc:fb:28:21:44:b1:c4:25:65:e5:db:01:31:2e:
14:6c:a0:b8:26:0f:a2:81:15:1b:00:92:fe:6f:33:84:10:93:
eb:80:a2:24:cc:68:ad:47:3b:8d:1b:01:ac:68:79:6f:fe:cb:
fc:bb:97:0f:ce:5f:81:1d:b4:8b:44:13:29:da:af:c4:de:4b:
07:4b:e1:8a:3a:db:b4:44:a6:e0:e8:46:0c:32:3a:c9:73:30:
9d:58:6f:e4:85:2c:e5:f5:4a:09:62:15:8e:7b:fc:03:86:af:
57:6c:17:01:e8:95:69:46:39:16:c9:c7:36:0c:08:88:b4:90:
8b:05:d1:9f:5a:bc:2b:9b:15:28:6b:85:b1:e8:f5:e2:45:38:
07:3a:0e:b2:68:35:ac:22:31:49:60:c8:92:4d:82:1d:ae:3b:
67:d4:49:d0:22:25:92:8e:30:31:ff:d3:44:e0:c7:f6:bc:91:
cc:38:e7:b0:eb:bd:1d:de:68:64:db:97:cc:bd:f6:07:6f:12:
eb:c2:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:34:22 2025 by rpki-client