Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: 2CKf9TA22UbyQ+21k3h/u05+Zey9pvDlLvquN5GKN8U=
Subject key identifier: 17:A1:6F:3C:78:4C:F2:46:BB:4F:39:15:36:79:6B:CA:C5:D0:62:96
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 01965EA8E40CFC60A43AA4EBA87B774A1EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 0471
Signing time: Tue 22 Apr 2025 18:00:48 +0000
Manifest this update: Tue 22 Apr 2025 18:00:48 +0000
Manifest next update: Wed 23 Apr 2025 18:00:48 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: YWC1bvr3mC8JMIGHofkygqpisVy6puVNDJEnW1hY9Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:e4:0c:fc:60:a4:3a:a4:eb:a8:7b:77:4a:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Apr 22 18:00:48 2025 GMT
Not After : Apr 23 18:00:48 2025 GMT
Subject: CN=17a16f3c784cf246bb4f391536796bcac5d06296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:e8:46:01:7a:56:e3:0a:89:b0:e0:8e:c7:
7b:8f:e0:17:64:3c:6f:f5:0a:3c:f0:0b:bb:b5:73:
da:8d:33:6e:cf:f8:4a:74:07:79:61:f6:c3:3a:ff:
11:66:02:08:65:80:7a:d6:86:c8:76:01:3c:91:b8:
b6:a8:27:18:55:71:c8:cb:b4:71:6b:c4:89:0c:80:
2c:97:b2:16:25:77:96:cc:01:07:fd:f4:77:cd:a6:
7a:7d:35:aa:6b:1b:f7:2b:44:d8:77:38:e2:92:73:
6f:52:cd:3e:4a:65:54:c9:d0:ec:4b:ed:54:ef:42:
e3:4e:a7:37:4d:6a:2b:cf:6b:f1:bc:14:1f:e8:1b:
48:e3:43:f5:27:81:79:0b:2c:4e:e4:11:7b:d9:2c:
4b:a5:2b:a3:ee:10:f9:78:2e:57:ec:0c:2a:93:96:
4f:c2:32:f8:b0:02:ed:38:9f:61:9a:e9:27:ec:fa:
cd:d8:18:bc:33:34:5e:ca:20:e1:71:d4:c1:93:3c:
d0:59:c4:7c:c4:1c:b1:08:1e:b1:b3:be:1e:d2:93:
f9:c0:88:78:b3:04:56:c2:61:e1:7a:a7:03:33:54:
50:cc:67:77:ed:c1:af:18:1b:cf:f1:9f:3c:7d:e0:
db:40:5d:06:92:69:81:55:38:37:76:62:b8:f2:cf:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:6F:3C:78:4C:F2:46:BB:4F:39:15:36:79:6B:CA:C5:D0:62:96
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:94:fb:79:7c:36:19:70:f0:f1:b9:6c:62:a2:51:01:e4:
99:16:c2:5d:63:54:06:fc:0a:26:5e:0b:0f:c7:91:16:f2:a6:
40:0c:ce:85:17:ed:b8:41:5c:12:ca:75:0a:e8:cd:ac:76:73:
69:c9:d1:aa:09:e1:8d:dd:42:64:1c:94:4a:eb:3f:18:07:2c:
90:bb:44:eb:a2:bc:7d:25:fa:1a:d9:57:2c:2d:ff:e5:e1:4c:
5b:0b:74:16:20:9a:1e:4c:95:9e:0e:6c:26:51:85:6e:85:1a:
cb:18:ec:f3:dc:f4:12:f5:d6:3e:e0:c0:ca:92:eb:e5:34:b1:
87:2a:27:88:63:d1:8e:c6:47:1e:2a:6d:a3:ac:43:13:97:fe:
01:1a:95:af:09:4c:30:e5:ac:b9:a3:bf:17:8b:5a:f5:90:42:
3b:b7:f9:6e:4f:c8:f2:5f:4c:64:2e:c8:d0:1f:f2:33:59:b3:
5b:e0:bc:eb:c2:21:3f:ee:c1:f2:64:0e:a9:c4:8d:83:54:f9:
8a:a3:31:c2:02:14:b2:0c:17:73:a8:f3:4a:07:04:15:bc:04:
54:17:85:65:f0:1a:e9:ac:07:9b:81:10:8f:23:3d:60:26:20:
e5:b2:23:87:55:2e:d4:90:fa:7a:8e:a5:85:dc:36:49:cb:d8:
d1:ab:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:05 2025 by rpki-client