Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier: y/w3Hk6A1OvDPDRdL78VMmlCzRcIxARY31QWAu201aY=
Subject key identifier: 03:C6:8B:22:71:82:E4:FF:80:9D:6D:10:5A:5B:AA:A2:58:55:CE:2C
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 019656B828E6C7842CCC5E9B6355DAC83B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number: 150B
Signing time: Mon 21 Apr 2025 05:00:31 +0000
Manifest this update: Mon 21 Apr 2025 05:00:31 +0000
Manifest next update: Tue 22 Apr 2025 05:00:31 +0000
Files and hashes: 1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: uo+7O4ICtHTu9ZKWEfNwD6PaXuRauvekKpsxIfRKkxU=)
2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:28:e6:c7:84:2c:cc:5e:9b:63:55:da:c8:3b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Apr 21 05:00:31 2025 GMT
Not After : Apr 22 05:00:31 2025 GMT
Subject: CN=03c68b227182e4ff809d6d105a5baaa25855ce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:5d:a1:58:9d:e3:1a:2d:3d:96:94:17:96:
10:b4:c7:42:54:62:be:a9:0c:00:31:16:94:47:83:
5f:48:64:59:22:e2:4f:6f:58:32:a7:f0:33:11:f4:
f5:f2:93:9a:9f:74:96:e9:23:12:ca:51:56:a4:c3:
e5:29:18:59:58:cf:d6:e6:5a:a1:22:77:f2:ac:71:
7d:f9:c6:f8:87:e8:4e:7d:52:5f:65:eb:0d:da:64:
dc:61:09:60:73:82:87:f3:22:67:30:15:84:3b:11:
7d:0c:1e:5f:0b:07:68:b4:f6:88:0f:01:ea:70:27:
38:78:46:fa:a9:56:f3:a7:bb:1a:3f:07:91:26:53:
3e:b7:23:fb:b1:bb:9a:c1:a0:55:44:04:86:92:18:
19:61:af:25:fd:77:05:b3:24:cc:07:f4:fd:b3:65:
1b:e5:71:f0:70:57:af:c2:7e:c4:8b:53:1e:59:ec:
f0:53:18:08:17:0c:99:ee:4c:54:fa:36:75:04:39:
21:1e:da:f3:b9:20:9e:80:9b:7c:26:97:4a:d3:90:
a1:61:bd:13:88:e7:ae:c7:eb:df:1b:94:89:99:d9:
67:5a:2d:3e:d2:e0:0a:60:86:7f:10:42:12:d2:3f:
32:ba:92:4d:ad:9d:67:5c:82:ba:6b:9a:bf:83:f5:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:8B:22:71:82:E4:FF:80:9D:6D:10:5A:5B:AA:A2:58:55:CE:2C
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:04:ca:3c:c7:fc:fa:b7:cd:d1:3d:f6:b8:5f:61:94:d8:
47:da:10:cc:f9:80:2a:c3:62:68:8e:56:53:f9:42:33:b8:44:
3e:d7:45:7d:05:ed:10:7b:12:3b:d3:ba:0b:69:9b:08:95:48:
58:49:a4:55:0f:24:73:35:de:04:ff:03:b0:f6:4b:c1:f7:cd:
a1:0e:12:b2:63:d7:03:32:37:52:3e:e6:9a:50:d0:46:c3:2d:
03:0f:ef:0d:d3:53:06:12:68:89:c6:79:ae:d3:a6:27:48:72:
28:0b:d6:ea:99:12:e2:1e:b7:f2:56:d4:e8:d5:f2:b7:d4:7e:
71:db:12:ab:3a:3b:dc:ae:bc:6f:b2:ae:8f:1f:02:fe:4a:c9:
e5:21:a2:50:d9:6f:6a:33:1b:ae:9b:60:ef:44:14:97:f9:42:
6a:a1:45:72:ad:45:53:b9:80:9f:51:40:e8:8d:34:03:df:1f:
16:9c:1d:d6:73:46:74:f2:e7:e3:ab:92:c6:ec:68:f6:c1:cc:
b4:cc:b2:ce:47:b2:a8:cf:64:95:9c:dc:7f:e0:ae:a5:3c:39:
3c:0b:f6:d5:8f:af:0e:ff:9f:67:5a:f1:1b:6a:24:72:12:b6:
39:a4:73:22:c1:71:56:96:5e:b2:c6:68:16:f3:70:b7:51:74:
ae:ef:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:01:05 2025 by rpki-client