Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: NyMLU/5tK00rYNDBGiKLtIQjIWuFJn2+a6R62RYb3Ko=
Subject key identifier: C2:EF:D5:F4:3A:F6:9B:28:8A:E4:42:8E:9B:22:91:80:29:28:4F:8F
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 0196A2ADB9C6FC8C65B1E8670E9B0FE06409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 02B5
Signing time: Mon 05 May 2025 23:00:16 +0000
Manifest this update: Mon 05 May 2025 23:00:16 +0000
Manifest next update: Tue 06 May 2025 23:00:16 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: tJFxFkHuObKQHKyt8KO+J1Hn2md4vMs6BArNTA3HaDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:b9:c6:fc:8c:65:b1:e8:67:0e:9b:0f:e0:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: May 5 23:00:16 2025 GMT
Not After : May 6 23:00:16 2025 GMT
Subject: CN=c2efd5f43af69b288ae4428e9b22918029284f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:27:b1:69:de:f9:7e:41:94:82:0d:d1:8a:
62:4b:cf:47:f5:34:30:e8:a6:ce:cb:dc:1f:54:d0:
ee:7b:e3:13:ba:40:c4:c9:40:f0:c1:9f:88:c7:17:
0b:f0:af:93:a9:29:d9:4a:9a:b0:77:3e:5b:25:c0:
87:0b:9c:36:39:fc:29:8c:97:d7:e6:bf:fd:ac:19:
8e:1f:d3:c6:5f:84:9d:ca:54:2a:b9:17:71:e0:2b:
38:b2:4a:71:88:4e:95:2b:98:0d:5c:cb:4e:3c:46:
6c:fb:88:a8:64:de:f5:d2:a2:c1:18:67:2e:bc:97:
fa:bc:da:4e:29:fa:74:16:45:f7:03:54:f7:cf:10:
2d:88:47:de:17:e2:86:73:ea:4d:ef:26:bf:e4:eb:
67:b1:78:cf:53:13:ae:39:79:80:dc:9a:bb:de:a7:
26:fa:7a:0c:17:ea:44:ad:ce:91:9b:3a:55:de:29:
7a:6a:c1:14:48:2b:fe:48:cf:c1:bc:f2:20:33:28:
74:01:dd:1c:21:df:4e:3f:f5:bc:7c:ad:9c:bb:65:
83:0d:fd:5a:c3:7c:81:d2:17:c0:78:af:4f:22:97:
77:7f:9a:2a:8d:55:fe:70:35:28:e1:27:d5:e7:c0:
75:01:6e:3a:cb:42:50:b3:e8:07:4a:f0:e6:7b:a6:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:D5:F4:3A:F6:9B:28:8A:E4:42:8E:9B:22:91:80:29:28:4F:8F
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:32:e3:85:38:22:d0:a3:78:85:3b:77:66:3f:4e:19:3e:cc:
85:94:8d:2f:39:84:07:ba:94:a3:13:35:cf:72:8f:26:5d:fe:
bc:06:e4:67:14:25:e7:b1:c7:76:1d:2c:ab:70:f4:b5:a0:44:
42:4f:e2:8b:6f:94:a8:d3:92:14:b1:34:39:50:d3:f6:13:a0:
e0:08:a3:40:6a:4f:91:de:cf:90:71:ff:36:48:a1:b4:b4:42:
0c:76:99:fa:90:21:83:d1:c1:01:62:41:1c:6a:66:8b:93:74:
9f:d6:32:3e:76:a5:5c:3f:5d:e5:b2:f2:41:44:a1:e7:5e:62:
e5:1a:9e:c9:b4:3f:0e:de:45:cc:26:1c:06:13:b2:55:7d:c0:
4c:b8:76:bb:4f:c6:24:8f:5d:b3:11:c3:99:66:d5:bf:af:39:
c5:14:4b:31:7c:a7:97:8c:5e:58:8d:b8:f3:49:c6:b4:e9:5c:
a5:48:7c:db:5f:80:8a:cf:b5:98:f4:10:f5:7c:44:4b:50:c1:
7a:34:ad:eb:fd:48:16:22:bb:5e:3c:c7:f8:3f:a6:16:3f:59:
49:a7:af:95:d4:ab:99:8f:1c:89:0d:86:80:a7:3f:73:90:6a:
be:1a:7d:b3:61:6c:7f:1e:ef:99:c7:cb:af:d9:14:11:f9:84:
b1:cb:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:11:59 2025 by rpki-client