Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: YJfxzsv03fLEPiOVa6m4GKAdADBZNfKSK1Ebk0klj3I=
Subject key identifier: 34:46:7F:E7:00:2B:89:9E:BD:03:80:27:50:81:BF:65:97:B9:05:AF
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 01965492C4440D33176BB6B2AD9BAF79C91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0A62
Signing time: Sun 20 Apr 2025 19:00:26 +0000
Manifest this update: Sun 20 Apr 2025 19:00:26 +0000
Manifest next update: Mon 21 Apr 2025 19:00:26 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: bAp2RQBdABTXanLwNm1Pue/IB2zNjEe/7bB1Q8CUZA0=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c4:44:0d:33:17:6b:b6:b2:ad:9b:af:79:c9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Apr 20 19:00:26 2025 GMT
Not After : Apr 21 19:00:26 2025 GMT
Subject: CN=34467fe7002b899ebd0380275081bf6597b905af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:3a:a7:52:86:ba:b0:bc:fd:6d:d0:fa:42:
5e:cb:1a:8c:4b:d7:de:23:00:68:7a:ad:2e:48:a6:
1a:96:22:28:5e:4e:ed:17:c6:85:99:fa:9f:3e:fb:
1f:36:d1:22:db:29:8f:6d:cf:01:86:26:88:ca:b6:
65:93:f2:86:2c:c5:ec:f5:e4:7d:13:fb:8e:96:58:
89:e7:1c:33:71:8b:2c:e1:13:35:18:85:e1:0e:5d:
62:19:35:97:0f:6d:9f:5a:cd:b9:82:6b:e1:cd:89:
6b:df:08:f1:30:1a:51:44:9a:7a:c4:8e:08:b9:31:
a3:89:f0:5e:96:cd:47:5c:b3:fd:2b:35:ae:29:ab:
45:75:85:e7:9b:c0:1e:41:a0:92:44:14:d9:30:61:
f0:89:17:34:84:65:a1:ef:ce:9b:83:84:05:bb:aa:
f8:2c:5a:34:04:d5:91:43:e9:c8:88:ae:b8:78:a5:
9c:20:50:64:84:32:87:5e:e8:a2:3a:c0:7b:aa:b3:
5c:53:1a:d5:0a:fb:36:61:60:30:db:2f:c5:86:ff:
01:4e:55:fa:2f:c4:ed:73:e4:9d:66:59:92:d9:d8:
0f:5a:33:36:cb:7f:00:a4:e2:3c:41:6b:a6:ea:aa:
a4:fa:ec:49:fb:cc:59:e7:4b:cf:29:33:ae:c7:64:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:46:7F:E7:00:2B:89:9E:BD:03:80:27:50:81:BF:65:97:B9:05:AF
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:60:f0:0a:53:89:b1:33:dc:88:e5:38:29:ca:3b:9d:69:
20:b2:1e:2d:55:48:ca:e2:6e:75:65:75:cf:7c:a4:27:1a:a9:
eb:39:78:36:4a:5f:e6:9d:63:cb:8d:77:cb:62:ac:d3:0d:fb:
4c:78:5d:7c:40:e4:0e:ed:88:dd:08:57:08:75:29:29:42:64:
5b:81:9f:8e:f7:92:08:c4:1a:bf:73:5e:77:f2:45:b6:69:c1:
3a:a5:49:b8:54:13:40:c6:06:39:49:3f:ba:c5:ef:10:b8:62:
91:c5:e2:bb:6e:f5:20:dd:c5:0a:10:0d:af:b3:e3:ae:8f:ff:
1b:ee:a0:e7:53:db:73:89:75:65:0e:67:2d:b5:a6:73:8c:d0:
17:61:37:80:38:c6:fb:31:91:35:25:db:11:8b:cb:fa:78:12:
bc:59:e4:bf:bd:17:30:f8:78:bc:c2:92:b0:7c:7d:89:03:79:
cc:d0:ac:11:47:be:c7:22:cd:0f:0d:02:02:91:23:4b:d1:f0:
0c:d6:5c:bc:6a:4b:b0:db:7f:86:7e:23:a1:bb:ba:1c:79:b8:
4e:0c:50:f0:09:51:f1:21:e5:54:13:42:8c:4f:ce:03:50:a1:
26:8c:5e:a7:bb:92:63:2d:ed:ce:0a:da:f5:aa:e8:49:c3:15:
98:51:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:33 2025 by rpki-client