Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: P2BgxqwyrKARKfTndRYPEul5c6myygbSsvsoKLDFry4=
Subject key identifier: EE:48:55:78:F3:06:66:D9:21:E4:63:77:36:4E:74:B3:AE:B1:E2:B4
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 01965500DDFD0E07E45449F47138702841A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 09F2
Signing time: Sun 20 Apr 2025 21:00:42 +0000
Manifest this update: Sun 20 Apr 2025 21:00:42 +0000
Manifest next update: Mon 21 Apr 2025 21:00:42 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: J5kqDqFIktKLybAH7nngSleamvqn6dZiXQ1PEzXi6Yg=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:dd:fd:0e:07:e4:54:49:f4:71:38:70:28:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Apr 20 21:00:42 2025 GMT
Not After : Apr 21 21:00:42 2025 GMT
Subject: CN=ee485578f30666d921e46377364e74b3aeb1e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:f7:67:31:5c:ae:8e:e7:f6:d6:47:78:23:
bb:99:4c:01:7f:88:ba:5e:a9:6d:40:99:e1:c3:29:
00:fe:2f:59:9b:fc:c8:51:2d:45:2b:b7:bb:94:1d:
4d:aa:fd:09:d4:3a:47:60:62:cc:40:da:64:2c:ce:
58:be:8b:e6:22:44:82:f8:8f:91:f1:4a:e9:62:7d:
62:04:1b:05:af:6e:01:db:2c:f5:5f:fe:ef:fc:21:
ad:58:44:55:7b:8c:f8:47:e9:8b:56:65:8c:d2:0b:
c6:74:45:3e:0b:ad:7e:75:4b:6d:c7:26:9d:1f:83:
44:4e:b0:47:41:a0:a3:0e:ae:2c:b5:b3:3d:9d:1d:
1e:3c:17:ff:dd:77:6d:f2:31:c4:f5:da:ab:4f:ee:
63:12:5c:db:df:e8:f7:b8:4b:dc:61:32:af:17:94:
2b:61:a7:e7:ec:80:9a:49:d6:b3:65:b3:2d:cf:f1:
7d:ba:ff:ce:ef:95:8a:10:fb:06:3a:75:af:aa:b6:
d6:b7:02:12:68:20:68:8d:5f:6c:c5:82:2f:a9:42:
2b:3f:76:01:28:45:41:4c:c7:30:a5:7d:ee:6e:fb:
62:a6:65:89:01:55:06:b5:60:e0:3e:73:8e:dd:23:
32:6e:3d:3c:79:a1:b1:e9:30:c3:52:44:b0:1c:83:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:55:78:F3:06:66:D9:21:E4:63:77:36:4E:74:B3:AE:B1:E2:B4
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:38:3c:24:cb:0e:5c:16:5a:35:71:e4:e3:c8:aa:00:93:73:
aa:85:e4:19:83:85:84:87:95:22:5d:49:41:8b:04:d6:2c:a1:
a4:d7:2c:07:1a:91:ae:55:fd:03:a6:9d:d2:bb:54:9c:08:e2:
e0:6b:76:63:5f:91:b2:fa:cc:81:0f:d0:c3:63:0b:9e:df:40:
2d:f6:43:85:ce:54:0f:c5:7a:f4:8a:38:0a:12:57:34:46:d1:
6e:15:ca:7e:7c:36:0d:1b:8a:30:40:c2:14:f4:7e:ca:ea:07:
76:b7:33:67:ce:bf:70:d2:4e:9d:94:70:df:0a:99:9f:dd:6e:
f6:6d:a8:1e:2c:98:6f:c4:6b:5c:f0:3a:22:5d:d3:5a:0f:cb:
4c:5f:9d:d7:65:9d:5a:77:dd:33:07:2b:c4:16:b4:d7:b2:3f:
28:ac:1d:ed:e8:5c:30:e0:30:b7:71:33:84:a7:ea:61:28:27:
d0:f8:5d:7d:05:a7:bc:64:09:b6:93:4a:9a:07:fb:56:52:c1:
79:6a:70:93:c3:e0:ba:f1:88:93:3c:f9:5a:0c:f6:89:48:75:
5c:98:15:27:32:15:ec:ab:b7:b4:db:df:16:41:20:c9:b4:88:
25:a2:ac:42:12:69:cb:1a:0e:a7:c8:27:c2:1b:63:38:45:2b:
73:ab:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:18 2025 by rpki-client