Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier: Tklf66C+0CwhPJnvxq2Ru+vjA8Kx23ZdYfzzDoSJqlc=
Subject key identifier: 18:A4:1B:DE:B3:11:6B:41:0B:7F:EA:01:6E:39:79:6F:92:78:51:24
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 01965B035F767486A00D87B3BFB951BCF31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number: 1509
Signing time: Tue 22 Apr 2025 01:01:09 +0000
Manifest this update: Tue 22 Apr 2025 01:01:09 +0000
Manifest next update: Wed 23 Apr 2025 01:01:09 +0000
Files and hashes: 1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: eJ1B6yi5egzY3qGPDfHuL+pTlqeH9ULkc6ARY2pajFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:5f:76:74:86:a0:0d:87:b3:bf:b9:51:bc:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Apr 22 01:01:09 2025 GMT
Not After : Apr 23 01:01:09 2025 GMT
Subject: CN=18a41bdeb3116b410b7fea016e39796f92785124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:fb:c8:90:c9:f1:c8:0e:43:a7:65:7f:80:
65:8e:e2:4e:ab:ff:7e:20:1d:e9:14:8e:dc:bf:22:
d4:5b:67:af:43:c5:26:49:11:b6:5d:8d:25:1e:32:
76:3a:66:1c:31:6d:37:97:64:24:96:fa:4b:ac:92:
61:5d:21:6d:e9:33:56:c6:2d:3d:c4:44:83:fb:a9:
75:60:cc:80:b3:0e:71:16:9b:a1:d7:98:76:1e:ac:
91:01:77:36:69:2d:5a:73:0d:50:41:f8:09:e1:33:
60:c6:f2:57:72:dd:63:8e:3b:b2:a5:d8:75:be:f6:
60:fc:2a:51:74:af:89:51:85:1d:d9:15:39:45:0c:
0a:ef:a3:a6:11:9f:56:b3:e6:13:e5:d5:3d:29:9f:
3c:8b:09:1c:da:39:75:20:4d:0a:5b:a1:60:07:d9:
7b:c5:bf:9a:8d:fa:5b:3a:53:8a:fd:d8:1c:a5:1c:
35:05:d7:f4:6c:ab:d4:a9:4a:cf:3f:c8:25:55:2e:
c6:f7:d2:32:a2:4d:62:1e:e7:d5:8d:2b:b6:6a:e8:
48:83:58:37:d2:16:c5:39:99:ab:c8:9b:fb:46:6e:
2d:eb:3d:90:51:7c:77:19:20:35:6c:f1:12:c9:6a:
fb:3a:bc:78:41:3e:40:4d:2f:b9:02:80:86:bf:03:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:1B:DE:B3:11:6B:41:0B:7F:EA:01:6E:39:79:6F:92:78:51:24
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2f:da:84:5b:db:19:be:2d:94:41:c7:d7:61:9f:0f:b8:e3:
82:6f:aa:22:b9:e3:5c:7a:4e:c6:5d:9f:b7:41:78:cf:29:ce:
1b:6e:0a:6f:2d:1b:35:c7:1a:6d:69:47:ae:7a:38:3d:fb:3e:
c0:f2:0e:0c:7e:85:ba:0c:09:21:4c:54:e9:c2:be:09:57:73:
6d:a1:c8:30:c8:07:ca:e8:a3:d5:c3:1b:c2:d6:a0:6f:46:bc:
61:6e:79:7d:f4:9b:b0:33:eb:5d:c9:c1:c4:4c:35:f0:35:e7:
41:d9:e7:08:30:aa:43:93:0a:46:14:23:f5:28:67:ae:a9:19:
77:5a:73:a7:40:e3:82:60:61:0c:b6:e7:92:27:8d:b8:15:1e:
7b:3f:ba:f4:e6:b5:dc:47:45:98:b2:1a:4a:ba:42:05:fd:78:
ad:92:a5:35:b8:54:39:38:76:23:d3:ca:fc:e6:51:ff:47:d0:
05:a7:9e:b5:30:53:75:e0:1c:aa:61:98:cc:3b:97:c5:b5:84:
92:5a:9c:c4:e3:d5:da:7d:50:51:af:cb:ed:bd:7a:d4:c3:3b:
20:76:92:75:a5:98:ed:1b:41:26:89:9b:61:84:4c:bc:59:7e:
c1:f3:e4:24:de:d0:63:51:a5:58:49:7e:28:ac:ee:09:52:33:
3c:4e:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:43 2025 by rpki-client