Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: SC8egGkJVK0AIAYRu7us79AGfU6Rovy9g0+LQBcD+Jo=
Subject key identifier: 78:7B:D4:65:4F:F2:CC:3C:9B:6C:C8:66:DC:59:27:D1:A8:1F:54:B2
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 01965A2702BD994E4B1F81A4656B99C99808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 21:00:27 +0000
Manifest this update: Mon 21 Apr 2025 21:00:27 +0000
Manifest next update: Tue 22 Apr 2025 21:00:27 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: YFuCJmfgoZaTn537mlvHsQ/kT9f/lblP4yMzjGXK2v0=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:02:bd:99:4e:4b:1f:81:a4:65:6b:99:c9:98:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Apr 21 21:00:27 2025 GMT
Not After : Apr 22 21:00:27 2025 GMT
Subject: CN=787bd4654ff2cc3c9b6cc866dc5927d1a81f54b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:20:47:82:7b:75:76:73:06:ce:0b:82:90:
21:c9:51:4e:0e:12:05:f7:03:20:47:8c:4b:dd:4a:
df:df:ae:d5:38:01:c9:24:a7:54:2a:33:4d:58:d6:
82:fc:d6:14:96:81:b6:f8:af:26:de:cc:4c:7e:63:
4f:51:0e:3a:24:43:67:3e:4a:33:27:9d:85:7a:16:
c3:c0:b5:b3:5c:98:76:cf:7d:7a:db:0e:74:0f:94:
99:12:b8:82:46:01:6c:f1:2f:8b:7b:aa:83:22:ad:
29:a3:76:5d:44:06:2f:e7:0c:39:a5:b8:42:a9:f6:
10:a7:10:90:94:6a:cd:56:fe:90:96:cd:c1:09:85:
ed:7b:de:00:c7:42:96:72:1a:ac:27:67:c7:c3:3a:
e7:ff:93:ed:88:f8:88:93:f5:ee:7a:d6:be:98:2a:
aa:17:fa:14:5c:e5:02:c0:d5:2a:71:a2:31:56:c9:
b9:39:9b:a0:f0:c5:2d:c3:ac:1b:58:fb:dc:fa:8a:
71:a3:42:60:4a:fc:05:a2:d8:9e:70:01:50:8c:d0:
13:5d:9f:b1:fc:9a:49:7e:8a:43:ef:ee:7d:76:95:
da:1d:a4:93:da:5c:8d:02:4f:e1:33:01:dd:bc:f2:
c1:75:9b:a7:87:ef:e2:d5:0d:e6:58:8e:98:b0:18:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:D4:65:4F:F2:CC:3C:9B:6C:C8:66:DC:59:27:D1:A8:1F:54:B2
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ab:c2:f6:7f:2d:5d:02:8a:53:09:f5:18:08:30:dd:29:a6:
73:21:68:c1:0f:3c:84:da:10:3f:97:c8:cd:a4:03:21:32:8f:
a0:c3:85:b9:b7:7c:3b:2e:54:c7:7b:c3:c4:13:11:b8:38:73:
65:ae:46:86:0a:05:79:e1:9c:49:93:c5:d8:02:4f:bc:82:64:
83:4d:44:a8:5b:9b:22:be:bc:04:33:10:73:4d:eb:9b:19:0a:
db:d5:c7:f6:ad:de:08:d2:b6:08:26:f3:41:ca:45:30:7c:23:
71:1a:6f:5b:f9:05:94:ba:2b:ae:80:82:25:99:ef:9b:02:33:
ee:3e:a0:e8:1e:b7:00:8f:be:2c:e8:12:6a:96:b8:a9:e1:92:
92:65:90:59:91:27:46:fe:d6:72:a4:6c:1b:dc:c8:27:71:08:
e6:ad:2a:a9:6f:29:ae:83:9d:61:d1:e4:76:2a:42:cc:6b:1d:
ce:11:63:79:48:a2:c2:2b:bb:42:96:ba:e9:08:3c:40:2b:cf:
6b:d8:d0:da:32:a7:5d:d2:aa:9e:8d:3f:79:17:18:45:cc:82:
86:7e:c8:ae:fa:46:7a:28:41:35:8a:76:d2:23:be:2d:26:0d:
6e:13:30:e4:2d:7f:5f:56:62:9b:09:7b:b2:21:a7:e5:73:9c:
2c:03:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:05:01 2025 by rpki-client