Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: PSVRAl+Z7KF/+DxNEiY1ryBJRLnmU5PWY0T4Ek7fVlk=
Subject key identifier: 95:EC:1F:23:9E:EB:CC:54:A4:97:A2:53:F4:24:53:12:A4:6E:C4:3D
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 0196B9A367D5B77163029E8B44FD05A0332B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 1412
Signing time: Sat 10 May 2025 10:00:15 +0000
Manifest this update: Sat 10 May 2025 10:00:15 +0000
Manifest next update: Sun 11 May 2025 10:00:15 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: 6FZlGNmgJEvBuPr+NHm9G2ADRZn2nxumrGgStrSIxJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:67:d5:b7:71:63:02:9e:8b:44:fd:05:a0:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: May 10 10:00:15 2025 GMT
Not After : May 11 10:00:15 2025 GMT
Subject: CN=95ec1f239eebcc54a497a253f4245312a46ec43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:5d:f3:b5:12:e0:4f:e9:65:43:31:97:da:
be:41:de:26:b6:60:e1:53:25:19:f9:a8:4a:ab:81:
de:b9:db:b3:5b:51:1b:37:ee:49:50:44:f6:a2:80:
42:42:4e:8c:a2:95:5a:21:d1:c8:d5:f8:e9:1f:1b:
1b:95:f4:a9:bd:a9:95:58:51:a2:3a:b4:3f:e2:07:
6c:65:a4:f9:46:31:5d:14:df:1d:81:64:20:85:5a:
b3:f0:0b:0c:e3:45:f2:87:8f:7f:eb:a0:99:df:4b:
d5:b4:ce:8c:86:22:c9:ea:0b:d1:ec:53:ce:11:6f:
4d:44:dc:b9:3a:4d:18:19:8c:12:b8:66:27:c6:31:
c0:8a:d5:36:6c:96:d7:b2:66:2f:4f:b1:d6:31:0b:
06:8d:38:bf:2d:a8:04:8a:12:06:1e:09:07:c5:11:
c0:99:67:ed:ae:bc:40:a7:2f:1f:14:db:70:c7:47:
5f:8f:a9:a9:a8:1b:73:39:6e:d5:f1:61:10:ba:3a:
5e:8b:64:6e:6a:61:54:f7:a4:cf:95:cd:da:ce:87:
27:d4:ae:a7:39:07:e2:07:51:ad:69:ec:2e:73:f3:
a3:60:90:7d:e2:06:7b:62:3f:b2:b2:ab:ab:ce:24:
86:a0:52:87:35:44:b9:5d:1a:e6:65:9e:48:f6:43:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:1F:23:9E:EB:CC:54:A4:97:A2:53:F4:24:53:12:A4:6E:C4:3D
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:53:1b:60:4f:bb:fb:a1:87:a8:b1:58:17:b2:84:e5:0e:
94:44:0f:ad:d3:bf:69:88:36:65:02:57:37:0f:d7:e3:bb:ef:
50:27:a5:70:63:6a:a1:08:14:c8:33:d6:d1:bd:16:da:cc:29:
b0:f5:4c:a4:60:cb:ca:0b:45:6a:50:09:b9:d4:a4:cd:f4:db:
3b:e5:04:dd:9e:01:cc:39:7d:78:a9:87:cb:73:8c:e3:e9:2e:
4d:b4:58:4d:50:e3:00:3b:7c:bc:d7:38:6b:c0:3d:52:b3:98:
23:9a:68:8f:7f:8e:66:b1:c0:29:81:0b:3b:ed:d2:fe:56:d6:
b0:26:05:8e:5e:22:a4:03:9d:32:1d:06:e1:8f:a4:12:28:38:
22:0c:0d:bb:a5:18:c4:8d:02:3a:b5:9d:19:2e:1f:96:6c:4b:
0e:83:0f:67:d0:e6:a9:10:06:4d:05:a2:5f:ff:80:06:18:ee:
1b:16:d4:10:b7:04:f1:e9:37:19:fd:b3:21:97:4d:84:c6:71:
04:27:41:ef:e6:64:8c:b3:32:8f:6f:3b:5c:7d:16:03:1a:17:
d1:17:bf:71:86:bb:80:e2:1d:d7:32:53:07:da:5b:32:3b:5e:
ef:42:47:97:ce:6d:bb:40:84:7e:f0:f9:b8:25:bc:51:c7:d2:
eb:ea:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:19:48 2025 by rpki-client