Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: msA4aB8FYEhBIDg/nPXtOymzxOCxkE4SXZA7HTxLqeE=
Subject key identifier: 2B:CC:28:19:78:EF:D5:52:8D:86:97:CA:82:89:AE:53:95:51:B0:B7
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01965492D08258B0C0743BA5CFE14C1E6305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 11DF
Signing time: Sun 20 Apr 2025 19:00:29 +0000
Manifest this update: Sun 20 Apr 2025 19:00:29 +0000
Manifest next update: Mon 21 Apr 2025 19:00:29 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: DsWWIjaZpItQ41M77EQwu8YsnqqOMTKDGcHiSOvg42Y=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d0:82:58:b0:c0:74:3b:a5:cf:e1:4c:1e:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Apr 20 19:00:29 2025 GMT
Not After : Apr 21 19:00:29 2025 GMT
Subject: CN=2bcc281978efd5528d8697ca8289ae539551b0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:7e:9f:94:36:e4:15:9b:ae:90:cd:97:76:
bb:16:77:06:df:4a:55:51:fe:6f:3c:97:35:be:28:
84:00:09:21:d3:73:6e:f3:b1:50:78:11:dc:a5:06:
75:df:80:88:42:42:e4:b0:eb:b2:72:fb:a7:f9:22:
9a:8e:ae:a1:7f:fb:52:e7:a9:4b:d3:4e:65:4f:d6:
4f:25:0c:0c:58:97:94:f7:cf:a2:b9:34:db:7a:0e:
0c:cb:02:55:73:a0:af:15:db:1f:4f:82:4b:54:10:
58:b1:b6:bc:06:bc:06:bf:99:29:0a:3c:01:fa:24:
4c:18:04:ed:48:32:e6:2f:62:cd:81:4f:2c:2f:08:
8a:0e:5c:fb:52:14:f1:e3:1c:b5:25:25:8c:c8:91:
1b:55:a3:d0:b5:95:43:ca:04:ad:8d:7b:fa:5c:46:
96:9b:6c:eb:cf:b8:63:45:a2:4f:f1:93:0d:af:d2:
58:11:fe:52:86:75:2f:a2:e8:5a:72:0c:d5:13:de:
f7:b9:6a:49:c5:ef:96:57:41:de:ff:94:3b:d3:30:
3a:99:80:48:c5:b0:13:39:04:95:a4:b6:f8:30:27:
49:d1:a8:23:9e:92:b3:e1:6e:87:af:64:24:7e:c3:
3d:e9:ba:51:58:e5:2e:d8:54:41:0a:00:93:20:e9:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CC:28:19:78:EF:D5:52:8D:86:97:CA:82:89:AE:53:95:51:B0:B7
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8b:c9:92:45:41:7f:8f:65:5c:bf:14:1d:58:07:f3:fd:fb:
a9:59:82:b9:9f:59:49:62:49:d9:1c:e5:ab:a1:9e:4e:11:3b:
75:51:04:26:96:77:05:2b:21:52:05:db:e2:f8:a8:59:36:c7:
16:46:8d:bc:e7:0f:da:04:ab:24:dd:4a:f8:d7:5d:d3:54:cf:
ff:f2:e9:7f:c3:4f:ae:d2:18:30:9c:8d:3a:48:27:ca:5d:fb:
5b:9a:2c:ad:aa:92:43:92:f1:3b:7a:a5:59:85:94:bd:bd:3e:
11:d5:af:bb:22:65:97:ab:13:fe:c6:97:20:48:dd:f5:3c:8f:
8d:63:67:fa:7c:fd:62:3b:7d:00:0c:fe:bb:44:ed:a5:fe:ab:
ae:cb:11:23:98:76:1b:dd:7b:ca:13:55:cd:be:c6:0a:41:3c:
b8:36:e2:e2:a7:c2:37:c4:7d:61:5b:a6:9e:91:a2:db:cc:e7:
a2:2b:8f:d1:9f:e6:f1:b9:ff:db:08:7e:2e:e2:53:b3:e9:57:
31:c9:93:bd:bc:86:ae:fe:0d:f1:2f:f5:be:f9:f4:7f:91:55:
78:d8:e7:be:e0:29:e9:04:c7:3d:c5:5e:61:e6:c5:97:7e:f0:
0c:c0:e2:34:c2:35:54:a6:95:02:fc:c1:6a:d8:bf:ef:cf:ff:
af:d7:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:16 2025 by rpki-client