Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: JRbvCTq5kHp6tLI+UW7Puf05tMpCaGPh0LCOKmfusiE=
Subject key identifier: 0D:8A:4C:87:86:EF:C8:42:B8:A3:A7:15:D7:2D:EF:29:00:84:6D:FE
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 0196C9848F91D28A3FCAEA1EE60B7653F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 047A
Signing time: Tue 13 May 2025 12:00:30 +0000
Manifest this update: Tue 13 May 2025 12:00:30 +0000
Manifest next update: Wed 14 May 2025 12:00:30 +0000
Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: PWOOp04ZScNjNUiReW3OKUX/Jdz30UhlbjrQkh+8WLA=)
2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:8f:91:d2:8a:3f:ca:ea:1e:e6:0b:76:53:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: May 13 12:00:30 2025 GMT
Not After : May 14 12:00:30 2025 GMT
Subject: CN=0d8a4c8786efc842b8a3a715d72def2900846dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:8f:eb:30:c3:d5:43:4d:81:c8:01:6b:97:
23:bf:d7:d7:65:c6:f5:63:64:2c:05:70:d3:14:05:
cf:70:76:52:01:68:2c:aa:4f:21:2d:b7:1e:91:a6:
c3:31:a0:f7:74:04:4d:fa:5d:19:38:dd:1c:59:69:
39:e5:96:e2:43:de:be:91:54:76:96:05:dc:a2:db:
93:ce:8b:7a:6c:f4:89:5b:30:43:08:e5:b7:d2:8e:
b3:d6:82:05:2e:fb:55:1e:d6:39:bf:35:66:1a:5f:
69:8c:1b:19:0d:18:82:5a:fb:37:87:42:40:3d:a5:
e1:a8:23:6e:2b:52:d5:de:24:57:e8:df:84:16:ed:
eb:55:e7:b8:e4:53:6d:5b:2e:3f:98:89:d2:c1:bf:
52:17:36:de:3d:e3:24:4e:d7:2e:be:03:97:51:87:
5f:30:5b:6d:70:0b:73:48:92:eb:94:55:29:8e:61:
8b:b2:eb:b0:b9:23:02:c4:5a:2e:2b:00:9f:a7:7d:
b8:7c:8d:48:0c:bd:ec:7f:fc:83:f3:c8:87:2b:76:
d6:d2:16:5c:e3:65:a8:10:ce:9f:4a:87:c8:c6:c4:
82:4b:44:97:43:0c:3d:d6:78:be:5f:0a:cd:4b:0c:
d3:a8:75:27:a5:0e:86:31:7b:8d:e1:d9:bc:e9:7a:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8A:4C:87:86:EF:C8:42:B8:A3:A7:15:D7:2D:EF:29:00:84:6D:FE
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a6:72:40:a5:94:06:5a:04:43:04:70:10:68:92:d3:a8:63:
1e:86:03:e7:48:d6:00:e8:39:ed:0b:a9:7a:7f:d5:87:09:8e:
b8:00:2b:5e:da:05:06:97:e3:1b:ec:63:1b:81:6d:b9:da:40:
de:9c:71:e9:f7:2f:a8:f7:f1:2d:c5:85:8e:53:3e:7a:77:aa:
31:a1:b7:f6:8d:57:f1:d5:a3:3d:13:c4:70:b3:e4:5b:4b:24:
90:fc:5b:3d:7c:d1:47:d1:10:7b:61:e6:51:0c:fd:48:36:04:
bc:85:81:db:1c:01:7c:18:cd:57:ea:ff:fb:56:4b:50:dd:1b:
4a:3c:70:db:35:30:2c:d4:c6:6d:09:28:c4:c7:03:d3:19:5b:
47:c3:35:2c:1b:10:a2:4a:f1:9a:11:25:11:53:22:33:02:df:
dd:2d:14:0d:2a:69:4b:f1:5d:ff:79:18:f7:8c:b0:93:3a:1a:
b7:1a:68:68:a1:bc:cb:fe:0f:41:2f:ab:51:c4:4e:93:1b:86:
c3:40:cc:a3:4e:bb:b2:44:db:c6:a3:89:f4:13:91:6b:83:5d:
5c:26:6c:d1:86:99:86:83:ca:c7:0c:34:ab:27:6f:62:34:c6:
44:b3:d5:54:14:54:5e:4d:d4:be:f5:d0:8e:87:5c:b5:39:c7:
08:e5:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:40:33 2025 by rpki-client