Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier: TlUVpjq3BnjVX/zs2KQylbB0TLxgUlICA2RW0jnuzYc=
Subject key identifier: F0:74:04:60:F9:91:DD:0D:CE:5F:B8:B7:65:8D:FF:D3:D3:96:84:35
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 0196B3A1BDF4F7A3AFA5D34477AECA70F4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number: 0D8A
Signing time: Fri 09 May 2025 06:00:43 +0000
Manifest this update: Fri 09 May 2025 06:00:43 +0000
Manifest next update: Sat 10 May 2025 06:00:43 +0000
Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: XJ3t852JVIoITJjf8JUzHpIxGzMSljUWKod4FISpRVY=)
2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:bd:f4:f7:a3:af:a5:d3:44:77:ae:ca:70:f4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: May 9 06:00:43 2025 GMT
Not After : May 10 06:00:43 2025 GMT
Subject: CN=f0740460f991dd0dce5fb8b7658dffd3d3968435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:11:b6:53:5b:fd:19:15:aa:26:03:77:d0:d7:
fa:d6:66:b2:bf:8b:d1:73:cc:4c:cc:be:ff:79:a5:
50:fb:d7:c9:79:f2:51:23:49:3b:ad:e5:fa:a2:6c:
59:1b:62:6c:fb:0a:99:6b:2a:1c:0a:84:1b:80:c1:
30:34:1e:9d:f4:3b:cf:90:1d:9a:41:e7:c0:3b:e5:
2a:9d:63:f5:56:f4:4b:f0:4a:84:15:19:0f:34:bb:
cd:cf:ad:01:47:b9:bb:b6:b9:f6:81:2f:75:54:62:
91:63:5d:e4:20:9d:ad:54:fd:c4:f9:20:96:bc:42:
9c:d1:eb:f7:e2:12:2f:bd:e0:cd:fe:b4:76:9d:1a:
9a:09:9f:41:96:a3:8a:96:dc:6d:75:4e:53:2d:26:
42:df:ba:1f:36:7e:af:70:1e:00:e8:0b:72:cc:69:
76:6e:39:c3:25:db:e7:ab:9b:48:50:c6:62:e7:d2:
26:66:13:24:36:1d:27:35:33:47:43:1f:5e:83:7a:
f2:f4:ef:1b:4b:4e:90:71:c4:b0:53:b2:90:0f:91:
14:b4:ff:aa:27:83:0e:3c:91:af:c2:2f:32:d5:bb:
72:ab:e1:67:b5:4b:bd:c6:85:10:62:7c:31:d4:91:
c9:36:d0:9f:d6:43:53:e5:64:85:37:b9:87:9d:56:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:04:60:F9:91:DD:0D:CE:5F:B8:B7:65:8D:FF:D3:D3:96:84:35
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:db:2f:0c:6f:1a:3e:78:81:cd:4b:4f:f6:3f:96:8b:9c:b8:
f5:cd:f1:85:89:da:2a:21:89:cb:5d:10:16:75:b4:2e:82:ef:
c5:4c:40:00:f0:2b:fe:ee:be:5f:c9:14:0e:e9:12:cf:0f:80:
de:29:60:8f:6b:23:3e:5c:cf:60:0d:38:b9:f2:f3:fe:72:45:
83:c5:57:fc:a7:3c:ad:69:50:59:16:88:cd:f3:28:86:2d:97:
c5:9c:c0:99:b7:f4:ab:8b:5c:58:ae:6e:db:6f:06:b0:50:ea:
ba:a8:0c:18:6d:df:d9:0b:45:14:57:a9:0f:73:83:a7:49:9f:
dc:82:e4:c0:9d:3e:38:41:3f:6d:3c:49:5c:73:29:da:c3:26:
22:0a:72:f7:2a:70:18:88:24:36:a6:d8:e4:52:82:d1:ce:e9:
63:88:c1:1e:a7:ae:d8:8f:0b:06:d7:3a:ea:ca:0a:f6:8e:b0:
57:b9:da:b9:c1:30:3c:3e:12:9f:15:ab:1f:49:b6:55:7f:03:
18:42:e3:19:00:05:d2:02:82:fc:26:3e:d0:aa:b5:df:5d:11:
19:21:ee:47:1b:1f:2e:93:be:b6:bd:64:09:2c:f3:9f:bf:e0:
b3:ec:03:cd:a6:e6:ea:f0:99:2f:3d:45:19:59:5d:d2:22:87:
15:0e:1d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:48:55 2025 by rpki-client