Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: TxIWVdmTsPdIajRvXr//3PlHUAPzBVkdtgcozNNFBGE=
Subject key identifier: AF:D5:FC:12:56:CF:0A:85:79:64:1A:BD:19:AF:6D:C7:75:19:7B:5B
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 0196A31BBC62B4349D0B1850F6FD4542B939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 147D
Signing time: Tue 06 May 2025 01:00:25 +0000
Manifest this update: Tue 06 May 2025 01:00:25 +0000
Manifest next update: Wed 07 May 2025 01:00:25 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: AOIPwvGH1W93Oht2a6h28Xmg3QlZpkQkE/BNf6Gbkdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:bc:62:b4:34:9d:0b:18:50:f6:fd:45:42:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: May 6 01:00:25 2025 GMT
Not After : May 7 01:00:25 2025 GMT
Subject: CN=afd5fc1256cf0a8579641abd19af6dc775197b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:6e:40:dd:5b:59:a6:de:a1:69:31:2e:78:
7f:2f:ee:08:77:23:a4:22:7c:96:ec:15:33:d4:b4:
ad:30:0e:97:07:85:dc:a2:77:a4:93:92:ca:4d:2f:
03:0d:11:d9:b7:6b:91:35:e0:e6:26:81:e5:3c:eb:
5e:40:52:f6:50:63:0d:96:e6:47:56:cd:23:99:58:
4e:38:e9:6e:4c:c3:8e:6d:f6:86:8c:6f:2e:56:f2:
03:d6:10:f3:7c:ca:a1:76:41:ae:20:c1:5c:a3:69:
b8:38:df:9a:ec:19:c4:8a:2d:fa:20:c4:bc:04:c5:
b1:1f:e8:41:57:40:f9:5e:39:d1:e0:91:5a:b7:b1:
af:3c:e3:36:da:55:ae:33:5d:e9:24:a4:50:7a:4a:
b9:84:29:f2:16:55:b8:cc:ae:00:e1:6b:85:bb:52:
35:3a:09:92:82:c8:71:49:4e:06:69:6a:45:3b:dc:
9d:53:22:ab:6f:c3:ba:1c:6b:78:c4:29:dd:39:3a:
9c:30:6a:68:04:4f:18:f0:7a:23:69:73:5f:dc:9a:
74:40:6a:db:47:01:8c:9f:1e:50:3f:b9:a0:cb:1b:
f6:d2:ed:9a:c4:01:25:8e:d1:cb:fa:08:15:32:31:
0c:b9:ef:f5:55:83:13:db:cd:20:bc:83:da:92:7d:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:FC:12:56:CF:0A:85:79:64:1A:BD:19:AF:6D:C7:75:19:7B:5B
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:60:e6:0e:6a:d4:29:9c:29:44:95:0f:a9:45:c0:46:36:
00:61:b4:c9:34:96:55:a1:e4:6e:59:c1:f0:44:2b:e2:dc:e9:
d4:3c:0c:7d:a3:a1:c3:ef:27:ea:eb:56:e9:e5:ed:2e:11:16:
8d:87:26:fd:91:22:6d:72:2d:2e:2d:71:bd:e0:08:3b:39:c9:
24:c4:50:9c:89:ab:09:fd:67:f8:d6:5b:37:48:78:0d:8a:9c:
de:98:53:cf:db:bc:c3:ea:b5:3b:0c:e2:f6:74:49:75:58:12:
17:8e:5b:cb:5c:a4:ea:72:04:d7:78:70:f6:7a:17:18:4d:4f:
e6:fe:14:be:c8:2e:f8:8c:f0:c9:c4:0c:4e:a2:8d:79:c9:1b:
8b:eb:27:84:08:ae:69:f3:f4:5d:0c:95:18:3d:52:ac:ff:60:
cb:c3:9d:38:c8:89:79:af:e6:a6:f5:ed:44:17:f4:de:c0:aa:
fe:1c:d3:53:e2:d1:85:ae:39:a3:7e:e1:ed:b3:91:9f:37:5d:
a5:67:41:3c:b1:69:18:97:27:6e:65:93:28:4e:ed:48:45:62:
90:02:10:d3:3d:7f:ce:2d:58:cd:85:ec:4f:b1:d0:0c:54:8d:
01:bd:8a:ec:aa:89:12:ea:a0:3e:34:ef:b4:de:10:7a:b3:92:
43:0f:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:47:19 2025 by rpki-client