Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: 2NeaQ0PrZ/EDx85hGfDBjt1L4MZKaHVGoruDmPM4nzA=
Subject key identifier: 32:76:7E:6C:BC:D6:19:81:6E:50:9D:3F:F8:2B:9F:DC:F4:7B:3A:EB
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 01965D2803146FFE1C3E8517BD71B0099EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 014D
Signing time: Tue 22 Apr 2025 11:00:25 +0000
Manifest this update: Tue 22 Apr 2025 11:00:25 +0000
Manifest next update: Wed 23 Apr 2025 11:00:25 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: eEYuntRZTOBS6H+4LleJOX0q+8U0Ot1q+wY+hGX2UxA=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:03:14:6f:fe:1c:3e:85:17:bd:71:b0:09:9e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Apr 22 11:00:25 2025 GMT
Not After : Apr 23 11:00:25 2025 GMT
Subject: CN=32767e6cbcd619816e509d3ff82b9fdcf47b3aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:93:85:16:28:d2:44:34:fb:ab:28:42:78:
90:ca:17:e9:39:e7:73:39:5a:20:c4:ed:22:f0:57:
61:68:51:99:9b:e5:26:73:b8:35:ea:9f:d2:d7:d9:
06:89:ed:e3:4a:5f:dd:81:b0:92:4f:01:72:ad:7f:
c5:84:d7:a1:09:74:b5:06:ac:fd:a3:28:b0:32:ca:
98:f9:b0:98:99:6e:f8:7d:12:50:fa:38:c5:3f:a3:
8c:17:8d:4a:4a:c5:2a:9c:17:52:16:2c:9b:a3:ef:
b8:27:0d:6a:b8:94:35:51:f6:e5:a4:c3:1f:76:67:
6f:65:15:16:a3:bf:6b:4c:f4:f4:f5:14:42:b1:1f:
8e:2f:87:8f:98:90:9d:57:7d:93:97:30:6c:84:62:
41:21:a4:e0:2c:6a:81:16:14:07:39:9e:d2:43:16:
40:51:ca:20:fd:30:46:64:ec:eb:0e:a7:46:4b:b2:
21:a0:42:46:0c:06:a7:da:c7:56:f7:d9:18:cf:5e:
6c:b6:a6:1b:a2:12:b0:56:d7:85:15:58:63:29:0c:
4d:c8:27:a6:93:3f:cb:f1:a6:77:b3:61:7f:e1:cd:
b2:50:2d:b2:d3:cb:50:9a:ed:96:0c:e1:b0:aa:13:
7c:f6:92:7c:d2:5d:03:a3:6a:2a:7e:7e:53:2b:77:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:7E:6C:BC:D6:19:81:6E:50:9D:3F:F8:2B:9F:DC:F4:7B:3A:EB
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:89:84:18:f9:a3:85:8d:7f:6f:85:5d:84:9d:6f:6f:83:3f:
5c:05:1f:ae:0e:11:72:4a:75:bd:35:3c:9c:02:62:76:b5:35:
b8:d6:8e:38:ad:7a:69:2f:cd:ee:c3:f5:60:45:79:af:ee:92:
1b:85:c9:c0:17:c6:c5:25:19:ad:22:30:9c:87:80:51:69:e5:
88:cb:c6:c0:5e:6d:c7:4a:4f:10:56:5c:0f:af:d7:25:99:cb:
23:a2:08:b3:79:57:6b:e4:20:cf:bf:53:b2:a5:de:b7:46:3f:
88:b6:93:dd:0a:de:9a:cf:ba:dc:da:07:5d:de:41:5d:92:1c:
fc:02:88:36:f1:cb:fc:31:88:22:13:81:20:bb:dc:fc:b4:f8:
49:03:da:bb:ee:de:ab:c8:29:d1:75:30:f9:dc:e9:c8:c0:af:
11:ca:74:a9:c2:6c:95:3d:3d:40:4d:b3:8e:43:f4:51:e9:66:
84:32:d4:63:66:7b:38:b3:f2:8d:dd:b8:02:cd:b4:3e:5c:a5:
95:c5:82:a8:01:f9:9c:e1:da:cb:bc:c1:a0:72:cb:a1:86:9e:
e5:b8:0a:0b:d2:ec:ba:a4:cd:be:f7:eb:43:cf:89:3f:c5:62:
7f:33:f5:54:5f:f9:86:3e:5d:17:17:2d:e6:ab:f6:e8:66:42:
b0:b6:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:05:06 2025 by rpki-client