Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier: jGMfdWStY+3HDFxQIin1y6z7ftBBvAW6YpXxMAIpDSE=
Subject key identifier: 84:8B:A4:34:CE:CA:BB:E9:C0:88:68:14:D9:76:DA:EE:AE:A3:FF:FE
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 0196BFDD2C381840F50CFE3A2E7486BDF12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number: 04B8
Signing time: Sun 11 May 2025 15:01:05 +0000
Manifest this update: Sun 11 May 2025 15:01:05 +0000
Manifest next update: Mon 12 May 2025 15:01:05 +0000
Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: oXo/bZIv/ugf2lmvz9NRE+fQnnZgNM3AD8vDYCPho1o=)
2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:2c:38:18:40:f5:0c:fe:3a:2e:74:86:bd:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: May 11 15:01:05 2025 GMT
Not After : May 12 15:01:05 2025 GMT
Subject: CN=848ba434cecabbe9c0886814d976daeeaea3fffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:49:1f:28:7e:74:7f:25:33:4e:a2:f8:c4:
7f:40:6b:bf:1d:01:98:91:57:66:6e:fc:53:6e:e4:
43:d7:45:40:ee:39:0a:2d:ca:db:da:ab:f3:69:06:
d3:5f:5a:c4:c8:42:96:46:3e:65:ae:16:18:e3:35:
b2:8a:a9:05:03:6e:a8:40:35:ac:79:8a:fb:bc:8c:
0a:04:65:59:9b:3c:4f:68:62:0f:40:b3:46:05:d1:
0f:3f:3e:77:b5:66:1f:76:69:2f:24:08:f9:05:4a:
f7:d0:d6:20:d8:b5:7d:77:3a:42:75:e4:6d:b3:e2:
08:27:e5:fa:d6:86:69:b6:cc:c4:8e:5f:c2:d7:8f:
88:ee:e3:63:96:79:3d:39:f5:63:c9:17:db:fb:da:
ac:02:38:c3:83:60:f4:14:60:f1:be:0e:5d:12:fd:
a7:74:1c:2a:e8:92:6e:00:8e:6f:11:39:65:a0:c9:
b7:e2:1f:78:ae:f0:a3:95:23:73:56:72:ad:8b:cc:
d8:d5:a7:02:5c:72:b8:f9:f9:15:e5:ae:1f:08:43:
1a:af:cc:93:37:40:23:ae:53:bc:9e:43:50:b0:dd:
c6:fd:f9:96:03:3c:18:a1:6a:41:d4:1a:54:1e:66:
fa:5c:a5:80:11:1e:f5:6b:de:80:98:e8:e6:f0:35:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:A4:34:CE:CA:BB:E9:C0:88:68:14:D9:76:DA:EE:AE:A3:FF:FE
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:62:e8:5b:ac:03:28:bb:13:9a:cc:2e:8b:31:0b:94:5c:50:
4d:2f:2d:52:40:13:00:3c:15:1e:6c:58:83:45:2e:6d:a1:48:
18:96:0e:96:46:8e:ce:5f:56:c6:9d:28:d3:d5:c8:ab:c6:f2:
20:5c:ee:f2:93:6e:6e:5e:17:05:97:c9:d5:13:a0:6a:5b:52:
e9:0c:b3:c3:a5:8d:47:3b:ee:a8:c4:22:22:21:f7:53:d7:08:
94:9e:9f:0b:9b:48:17:1f:7f:b1:f2:58:48:61:fa:06:42:42:
58:ce:99:9f:86:d4:45:97:8e:25:30:e1:75:be:76:e0:8e:8d:
8e:40:10:93:d9:01:3e:1e:81:ba:4f:56:0d:c0:cf:86:66:c4:
cd:2d:b3:d9:06:58:f5:75:0f:e6:b2:a2:8e:71:28:f0:4c:ef:
a9:69:ef:ea:f0:ed:42:2c:08:cd:df:f6:0d:38:83:83:c3:61:
ec:cb:79:be:23:3d:66:c8:d2:2f:68:f1:0a:c7:4e:2d:e1:55:
4e:b4:01:97:24:4e:20:ab:bf:03:e9:0c:64:14:73:c9:a6:3d:
12:b6:ed:ed:55:d4:12:7d:b3:84:5a:49:29:f5:94:21:aa:cd:
a2:fd:68:f2:71:38:a1:85:c8:36:bc:10:fd:b2:95:e0:d9:bc:
17:38:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:06:54 2025 by rpki-client