Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier: 5wjNJsqp/KneUVArAWbaiRi1KQY2e6CYMuYC0l4vzxA=
Subject key identifier: 45:10:59:E6:71:C8:28:7C:51:E4:83:73:66:FE:5F:AE:62:84:A5:5E
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 0196C2025AEAB919BEEB184C8D8B7F04A3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number: 048D
Signing time: Mon 12 May 2025 01:00:56 +0000
Manifest this update: Mon 12 May 2025 01:00:56 +0000
Manifest next update: Tue 13 May 2025 01:00:56 +0000
Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: EKNKfIgkmtvPy/d2V3zxdwgEDy78QqM0b+D4n5FuSPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:5a:ea:b9:19:be:eb:18:4c:8d:8b:7f:04:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: May 12 01:00:56 2025 GMT
Not After : May 13 01:00:56 2025 GMT
Subject: CN=451059e671c8287c51e4837366fe5fae6284a55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:d6:e7:9e:53:21:b9:0e:77:0a:b4:b9:46:
a0:fa:ea:97:b5:8d:9c:54:bd:55:a3:84:1c:de:85:
33:3d:e8:bc:ac:f7:f5:5d:40:1c:a3:ee:2f:5d:f5:
ad:82:76:1e:04:cc:8d:dc:35:5c:0b:03:b7:d3:c0:
9d:4d:87:f5:c2:1c:fd:a9:58:c0:b8:19:52:cf:39:
56:9e:b2:4c:76:0a:d0:40:ea:33:5e:e6:55:a4:50:
6c:75:05:1a:ba:1d:80:5c:d1:d0:2c:dd:36:91:20:
ed:63:c1:2c:91:da:5e:7d:87:de:e2:c9:cd:38:a6:
0d:c8:ae:db:4b:ec:76:1c:e5:c0:f1:cf:2b:04:b8:
d3:1b:2f:f9:e3:7a:8c:34:4d:e8:11:c7:57:21:2a:
3a:97:a5:2c:b6:b3:e9:9c:ef:80:ad:7b:ac:1f:d9:
f7:56:66:96:25:e4:e7:c7:82:b7:0f:2e:ad:f5:74:
4d:be:3c:01:73:43:f3:a3:78:90:65:9f:08:27:f2:
c7:db:e8:4b:16:55:c4:37:3e:65:bf:d5:23:89:cc:
0e:03:aa:33:46:73:75:a5:d3:6a:97:67:6c:de:22:
13:e9:3c:c4:e2:fa:ae:81:96:9b:b8:bf:4a:e3:19:
f7:28:41:f1:cc:5e:38:6a:41:b0:dc:2b:31:f2:41:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:59:E6:71:C8:28:7C:51:E4:83:73:66:FE:5F:AE:62:84:A5:5E
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:71:32:95:68:db:55:f6:23:15:b0:01:d1:8d:4d:a5:77:e5:
2c:1a:5a:b3:03:49:40:b3:33:9c:d9:fe:8c:3c:33:1f:69:ab:
66:ce:d0:e6:f4:dd:7e:17:2d:30:ff:97:bd:d4:7a:02:88:ce:
6e:4a:78:1f:c6:b0:53:8c:9b:50:17:d1:b0:64:cf:ab:ad:4c:
f4:09:4e:77:30:65:d3:de:18:40:a8:36:33:71:38:fc:40:99:
9d:e8:7f:4a:b5:87:e6:a8:dd:61:eb:93:0b:62:be:f7:4c:98:
f0:5a:d7:5f:ae:2c:c2:f5:e4:76:57:8e:ae:51:ab:86:45:fc:
0b:b8:67:c5:81:b2:bc:c2:25:8d:24:a0:84:83:6f:81:fb:5a:
55:66:e8:c5:b4:82:10:81:fb:bf:3f:12:38:9b:1c:be:8a:04:
0a:b7:ab:96:f2:1f:d1:a7:1c:3a:1f:9b:30:9e:29:2d:f6:36:
a1:b4:ba:f0:92:51:7f:35:b4:0f:48:75:22:da:0f:ab:5b:8f:
1b:9f:0c:dc:83:42:df:df:1e:c6:3e:7f:ad:46:aa:26:5f:b2:
b4:87:b0:da:27:bb:aa:c0:20:a1:45:21:df:62:76:c7:b9:a2:
58:9c:98:ed:69:24:d5:d1:7e:9e:5f:00:ee:b4:59:2f:98:59:
09:d7:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:38:01 2025 by rpki-client