Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier: GhUQnsbuged+Qc+Z8IyHnGE7X9JpP3iD3npNiWQEwtg=
Subject key identifier: D5:DC:61:44:79:A4:42:88:1B:91:1E:7F:11:2D:51:03:CA:22:D9:37
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 01965500A8F569A5D60F5E544BA69C2DD2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 21:00:28 +0000
Manifest this update: Sun 20 Apr 2025 21:00:28 +0000
Manifest next update: Mon 21 Apr 2025 21:00:28 +0000
Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: omjf2f0p0vrfUqVV5Qryz0hqcLOhjxmn5+RRfR5wOr0=)
2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:a8:f5:69:a5:d6:0f:5e:54:4b:a6:9c:2d:d2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Apr 20 21:00:28 2025 GMT
Not After : Apr 21 21:00:28 2025 GMT
Subject: CN=d5dc614479a442881b911e7f112d5103ca22d937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:92:ca:60:9e:2a:65:4f:85:16:a7:fd:44:
27:b4:f7:fb:bc:a6:28:5a:54:c4:ce:c9:95:87:6b:
a6:1c:4a:38:af:ac:0d:0d:1b:ce:99:56:32:67:cc:
4c:d0:b2:ad:56:a4:f3:c2:fa:22:4c:6b:64:bc:3f:
dd:c4:88:5f:58:78:d2:d8:36:91:ef:96:31:c1:a6:
ce:b4:0c:30:b9:b5:66:1b:be:23:93:7a:b1:95:9e:
99:0d:aa:a9:bd:f0:bd:69:f4:d2:f3:b9:05:10:10:
11:54:a7:62:fe:ff:d8:2a:f5:64:5d:ef:11:5d:f0:
12:5f:aa:dd:df:1d:a9:47:d2:5e:42:b7:68:77:15:
32:a4:40:f5:a4:33:ec:aa:a4:f3:c8:34:b8:2b:a1:
59:1d:4f:0a:2c:cd:e3:71:7b:9f:b7:5e:a4:0a:ab:
ee:72:f3:e8:6c:21:8e:7a:b8:bd:c0:10:9e:2a:5c:
af:7a:31:85:1b:7b:1b:37:eb:ef:ee:35:f2:62:87:
a2:5a:a9:e5:f0:41:1b:f7:17:da:0a:02:17:6e:e9:
53:5b:4f:1b:7f:48:7e:70:a2:ec:13:78:08:12:ff:
28:f2:0f:8e:bf:ee:c4:0c:ac:0f:87:ee:b8:f2:ba:
c1:45:d4:9a:0e:47:c0:08:b7:f7:3c:34:a9:ad:a6:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:61:44:79:A4:42:88:1B:91:1E:7F:11:2D:51:03:CA:22:D9:37
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:db:4a:df:fa:a7:56:2b:17:6e:2a:9d:cc:a1:36:b1:87:
c7:9d:92:01:73:8e:9c:51:f2:00:6a:07:05:9c:26:70:38:16:
49:fd:07:48:c5:62:ed:01:0e:24:ed:81:9d:dd:45:0c:2b:09:
8a:42:e7:22:90:47:ca:ba:60:b3:4e:53:0b:2a:79:ac:12:5a:
53:00:15:05:64:52:1d:99:45:71:6e:dc:cc:45:76:10:ea:55:
93:f6:09:a0:d2:5e:c3:ba:57:b5:a0:cd:23:6f:c3:1d:af:17:
0a:58:c0:fe:4b:74:19:91:40:15:97:06:7e:7a:71:2d:8b:6f:
d2:07:a5:2d:22:38:7b:b0:f4:0b:b5:d5:72:50:af:0a:5d:1a:
dc:b2:d7:19:8e:00:08:3f:66:ba:c5:e6:02:13:82:32:04:e9:
50:fc:6e:22:77:06:fa:02:57:a5:e5:cd:8a:39:8a:43:c0:00:
5e:5e:c1:25:ed:91:4b:a8:b4:58:94:ee:bf:f2:43:31:cf:44:
4f:50:56:30:18:87:71:5d:af:88:76:63:5a:3e:aa:63:1f:58:
85:3b:2c:ff:51:50:b1:e0:2c:17:dd:de:82:d9:a5:a5:85:ec:
10:82:61:6a:2d:21:40:ac:fc:fe:76:72:15:fb:0f:b6:98:44:
c8:34:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:37:37 2025 by rpki-client