Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: BCMWkvfF0D5/Q4UCNBhMev6ZylPvE57Hl0zJbyRxkL0=
Subject key identifier: 69:9D:E8:C5:E0:B0:4E:53:6B:7E:F3:E3:19:65:26:0E:45:AC:83:83
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 0196AE0D9724F59DEFBECCDABE61713A9BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 0472
Signing time: Thu 08 May 2025 04:00:48 +0000
Manifest this update: Thu 08 May 2025 04:00:48 +0000
Manifest next update: Fri 09 May 2025 04:00:48 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: yjr/dyc5VrGpjDMgM1byzv1Pm/9ZTr0oNpGtMTt4riE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:97:24:f5:9d:ef:be:cc:da:be:61:71:3a:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: May 8 04:00:48 2025 GMT
Not After : May 9 04:00:48 2025 GMT
Subject: CN=699de8c5e0b04e536b7ef3e31965260e45ac8383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:a4:c7:80:ec:a9:6f:f8:80:ea:a6:4b:ef:
04:57:52:f2:7b:73:e5:0e:65:ed:ec:be:43:97:1b:
d4:77:24:33:d6:ae:4f:0f:e5:5d:15:64:10:43:b2:
3c:3a:82:04:58:75:cb:cd:5d:97:7e:36:a2:fe:82:
50:8c:73:05:f3:7f:c3:da:4a:cf:91:d7:3d:b0:6e:
c9:9b:ba:1c:84:b5:3c:01:9e:84:65:a8:01:af:a7:
95:db:84:da:a8:0d:c5:cb:21:f7:cb:35:dd:bc:69:
37:26:f5:cc:8d:99:21:7f:cd:85:15:87:92:05:26:
9f:50:13:3b:9b:31:5c:5f:44:58:d8:32:9f:6c:cf:
44:6e:f7:95:c3:ee:c8:63:01:a1:d4:af:ca:f9:4d:
fb:17:97:54:ec:ca:6d:66:ff:2a:6d:8c:e8:78:a7:
af:cf:fb:92:54:32:53:dd:be:c4:4a:77:7b:ad:2a:
ba:69:1e:9d:4e:7c:42:f5:2f:aa:4d:a3:08:e4:45:
fb:58:1e:a4:84:40:30:23:46:fc:3a:15:10:63:3a:
da:5f:23:5f:7c:43:5b:b7:99:33:06:c2:3d:0a:1a:
ba:12:f9:ea:dd:61:2a:e5:40:0d:ba:74:9c:cd:50:
1e:fa:13:87:4e:d4:48:fc:33:60:cd:07:ed:6d:f9:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9D:E8:C5:E0:B0:4E:53:6B:7E:F3:E3:19:65:26:0E:45:AC:83:83
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f6:86:d1:a5:0e:b4:76:6f:e5:2f:f4:cc:24:68:0d:6c:6e:
14:b0:b1:ca:0a:3a:4d:7c:07:9e:42:83:06:7a:17:20:1a:ab:
ba:28:95:8f:30:d9:fd:db:af:3a:97:6e:90:fd:d8:d8:96:08:
b3:91:5c:f6:09:b7:9e:21:dc:b2:36:f5:05:67:77:f5:12:6a:
54:56:a4:91:05:74:8d:f2:12:c2:ea:2a:4c:56:09:cb:de:47:
98:0c:a6:4c:a1:97:78:25:1d:90:43:2a:f6:b1:21:b4:d4:b3:
6b:50:db:f8:1e:af:7d:f0:75:d0:34:8e:cf:34:24:13:1c:d6:
b5:1f:c4:92:f8:d3:ff:b6:e6:f8:30:f4:ff:28:39:ba:25:1f:
80:32:b9:37:a3:22:2c:da:87:5c:bb:f0:26:49:80:73:a1:03:
e7:13:dc:60:61:7e:01:db:18:3d:78:95:f7:f4:99:fa:fa:2d:
ed:a2:91:8a:d3:6d:49:cb:2a:8c:b8:11:11:ac:d0:09:25:a3:
e7:35:c8:70:99:28:81:50:00:08:0f:48:69:c6:33:5b:e9:4d:
06:d5:d3:dd:d9:c6:7d:45:46:95:1c:1b:21:a0:66:43:2f:a1:
78:fe:89:78:97:5b:f7:b1:bf:9c:86:cd:55:20:bb:2e:40:83:
d1:2e:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:35:26 2025 by rpki-client