Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: nMjT3FHgmHtVg+LEmV9HHuPCLWHLX0YXJ0MIzWAcvmU=
Subject key identifier: F9:12:AA:BE:60:64:85:59:5D:05:7F:0E:8C:3F:8E:BE:8A:3A:21:C1
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 01964D46DC3BA6556A73DE55854438A98B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0BA3
Signing time: Sat 19 Apr 2025 09:00:11 +0000
Manifest this update: Sat 19 Apr 2025 09:00:11 +0000
Manifest next update: Sun 20 Apr 2025 09:00:11 +0000
Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: QKYJbMgfyVdx+sMZDqgi0BFKXXsmxpGuNAMd+top9kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:dc:3b:a6:55:6a:73:de:55:85:44:38:a9:8b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Apr 19 09:00:11 2025 GMT
Not After : Apr 20 09:00:11 2025 GMT
Subject: CN=f912aabe606485595d057f0e8c3f8ebe8a3a21c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:e7:c7:86:83:69:51:22:a1:b0:ce:c5:16:
33:7c:25:8a:7a:13:7a:79:8b:fa:56:d6:fe:63:05:
e8:40:53:bf:9c:fd:03:66:9d:6e:99:6e:bc:96:72:
22:6d:88:d1:da:1a:42:54:74:59:56:46:dd:c6:65:
e8:4d:f1:42:57:72:7f:b1:52:68:98:01:2a:9f:62:
93:18:bf:2d:33:1a:f2:b2:51:7f:ac:f6:32:af:58:
0c:bf:ba:b8:f6:a7:6f:e4:be:ee:6b:9b:ee:6f:a0:
17:f9:69:82:d0:aa:39:0d:51:8e:ac:78:eb:35:b8:
cb:57:5f:59:e8:55:b9:db:f1:40:ed:8a:d2:c9:2a:
3b:57:55:8c:41:40:25:43:23:72:50:14:fb:5d:c5:
f1:08:e8:20:56:c7:90:be:92:bf:eb:09:88:2c:7a:
33:30:ba:56:3a:1d:d9:64:c9:04:12:8c:47:ee:de:
23:84:27:e3:a2:75:4f:a2:c6:d1:62:ac:d8:c1:6a:
d6:0f:9e:4f:24:0c:cd:82:1b:89:f2:70:65:06:7b:
9f:01:dd:36:6e:28:8a:98:74:37:fd:0e:e5:5d:02:
b4:d9:20:97:da:a9:13:1a:be:2e:4a:7f:fa:98:40:
64:1c:a4:f4:69:9f:6d:7d:2d:7a:2e:cf:a7:87:86:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:AA:BE:60:64:85:59:5D:05:7F:0E:8C:3F:8E:BE:8A:3A:21:C1
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:63:e2:4f:bc:b0:7e:a5:4e:28:95:ee:38:80:28:b5:ab:97:
01:ff:11:9a:ba:37:c2:3f:00:2b:0c:c0:4b:79:49:18:b1:3d:
eb:fc:c9:97:19:ef:53:4e:e8:e4:6e:2c:48:b6:dc:5e:08:dd:
cf:8d:c2:95:25:8c:f0:5f:06:09:ad:88:ac:fa:09:de:59:27:
fa:1c:73:0f:81:d1:ec:06:36:5f:ea:31:71:65:6b:4a:20:c1:
2e:b2:23:10:f5:aa:20:da:73:ee:f1:24:bb:03:a5:b1:d5:60:
2a:67:dc:c9:da:69:02:9f:c1:05:6b:76:c3:e0:ad:ab:17:8b:
0d:8e:24:ae:a6:bd:3e:33:ca:b3:66:a6:9f:b8:6d:40:71:0f:
9f:a7:34:79:39:4e:e5:45:df:e0:26:11:ba:46:1b:1f:71:27:
65:22:81:8d:c1:19:02:d7:42:68:80:73:36:13:86:51:ab:d2:
68:8b:e8:7b:21:6c:7d:82:49:fd:51:f8:2b:f5:41:7c:ed:22:
80:ff:f7:74:b7:9f:a1:59:05:6c:a5:9f:27:46:88:14:ce:e8:
cc:dc:a6:0b:4f:ba:08:d9:cb:1f:b4:fa:67:42:83:26:c6:20:
d4:87:10:de:0e:09:8b:9f:73:4a:e3:f7:6a:9d:4e:77:7d:6c:
c5:df:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:10:01 2025 by rpki-client