Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: sblLhn356S+TD635f5g38SgFLOmWuv0rizMTOMHrNw4=
Subject key identifier: 6B:6B:B8:1E:28:39:44:D7:1F:30:42:18:AC:5D:F0:7B:68:00:F0:08
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 019655384976D4FB52565F97BB782C8EA058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0C96
Signing time: Sun 20 Apr 2025 22:01:14 +0000
Manifest this update: Sun 20 Apr 2025 22:01:14 +0000
Manifest next update: Mon 21 Apr 2025 22:01:14 +0000
Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: PFe1DvJIA8Mor99/nu5ezPs8ya1euL/iLHusxyuLw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:49:76:d4:fb:52:56:5f:97:bb:78:2c:8e:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Apr 20 22:01:14 2025 GMT
Not After : Apr 21 22:01:14 2025 GMT
Subject: CN=6b6bb81e283944d71f304218ac5df07b6800f008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:8a:ff:e9:b6:bf:b1:6d:85:50:95:f1:23:
c9:06:76:6f:b0:61:be:5b:a1:67:02:c9:a0:e6:cf:
6f:f7:8d:6b:55:f7:c6:86:26:bd:16:95:31:f2:ee:
67:7a:25:ed:de:9b:93:d8:a9:c8:85:34:08:e0:1f:
6e:3e:18:c7:90:3b:78:15:87:88:50:65:97:4f:a2:
f0:2b:18:f5:a4:e6:26:42:73:c1:de:9c:50:88:cb:
01:00:2d:c5:4b:dd:b8:f6:4e:99:ab:a7:4f:a6:f6:
2f:e3:27:e9:2a:98:6e:eb:95:3b:b0:0a:b3:7c:9c:
28:2d:9a:09:c1:b6:a9:fb:5a:46:e4:bf:28:e5:95:
5d:0d:b9:76:24:92:47:5e:99:97:86:be:8b:a5:c1:
a0:80:67:5d:6f:4b:bc:54:ce:6f:a0:11:af:e1:65:
bb:6d:e7:a7:a7:22:60:50:f3:9c:e4:a5:68:2e:a4:
ec:02:98:12:42:5f:de:a4:51:5e:39:51:57:ac:24:
4d:c3:ac:1b:b9:1f:80:83:7b:9f:c0:a5:24:59:0a:
ef:07:f9:23:1b:4b:4a:08:6c:fc:94:ff:b1:b1:2d:
a8:4d:56:d2:6f:ac:c7:9f:dc:b3:29:20:9b:bb:dd:
b7:b4:f2:4f:19:8e:6c:8b:dc:e2:d3:ff:0c:88:26:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:B8:1E:28:39:44:D7:1F:30:42:18:AC:5D:F0:7B:68:00:F0:08
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b9:05:00:26:7e:ef:76:2f:ca:0f:ec:a0:b5:4c:ed:c2:d1:
f7:a8:26:d5:a0:43:c5:20:16:f4:f1:b6:cc:c9:e1:ba:e5:15:
15:8f:ee:8e:52:ec:40:82:8b:32:6d:6e:de:1b:4b:3b:9b:c7:
dd:70:44:9d:0c:1c:0b:28:56:8f:a8:0d:38:d3:ff:be:0f:f2:
fb:17:9e:da:25:31:69:5d:26:6d:df:97:b7:bd:ac:7c:43:a8:
66:a4:1f:76:89:89:47:fa:7e:15:e9:ec:e7:97:5b:04:7e:e3:
d6:a3:f1:dd:60:6e:8f:10:48:1d:5a:5c:0a:1b:ba:97:28:98:
9a:cb:5d:41:c8:d5:41:29:51:aa:8a:1d:fb:33:41:25:b3:6a:
c0:98:46:55:66:6c:2a:49:6b:24:5f:bf:71:a5:20:e5:28:fc:
e4:c9:f9:7b:2b:8a:10:ea:68:4c:7c:da:8e:e4:0b:fc:57:e0:
8d:35:a3:9e:f3:49:2f:80:76:40:06:58:8e:f8:da:73:21:04:
0c:7d:93:b6:16:79:75:ab:41:bd:37:7a:c8:7c:ae:47:9c:ca:
ef:5b:a8:95:7a:3d:d6:20:c4:d1:42:43:38:16:33:d1:73:08:
62:01:59:9e:3e:f2:ad:7b:fc:1f:11:74:40:1e:08:54:c8:c4:
4a:34:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:49 2025 by rpki-client