Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: wWyjWYeBQLdvP4n2dV+lER7E/1VygEbKEKQGi9vThtE=
Subject key identifier: 8C:34:C3:70:B4:DC:06:9B:94:35:AE:A5:E3:C2:3C:46:AE:CD:78:9D
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0196545C77097B214B10C9C915817D32C4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 18:01:07 +0000
Manifest this update: Sun 20 Apr 2025 18:01:07 +0000
Manifest next update: Mon 21 Apr 2025 18:01:07 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: TV7i2vlo8OqSo1PIA4XzRXfYgSRCYa4mIc/9YgVIuYU=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:77:09:7b:21:4b:10:c9:c9:15:81:7d:32:c4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Apr 20 18:01:07 2025 GMT
Not After : Apr 21 18:01:07 2025 GMT
Subject: CN=8c34c370b4dc069b9435aea5e3c23c46aecd789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:45:65:97:66:2c:06:db:48:9f:1b:f4:02:
66:7a:ff:e1:f2:ac:54:76:1d:9e:ce:20:ed:c0:0f:
45:ca:c8:20:ef:6c:19:20:cf:61:fb:56:3a:3f:5b:
76:1b:80:99:a5:f8:5c:8b:88:80:85:ba:0d:b0:20:
9b:78:00:bc:1c:d9:db:0d:d3:5a:33:dc:7a:00:38:
d9:6b:ee:68:c1:42:9a:b1:9f:59:9b:66:66:ed:1a:
05:2e:e1:7a:0f:e9:75:99:4b:e8:9f:7b:f2:34:08:
62:ed:6f:8e:38:42:ad:d3:6a:aa:0c:cf:5e:71:42:
f7:72:9c:1c:03:70:d3:7f:1b:64:0c:e9:08:b3:4d:
83:a8:fc:f2:d8:3e:5b:6e:f9:bb:3c:a2:cc:51:40:
e2:fd:6a:22:99:29:0f:9f:4d:e9:0e:44:b5:0a:3a:
0d:19:66:86:4c:a5:96:92:6f:3c:53:d4:84:27:72:
ae:52:77:8c:84:a5:ec:77:e1:b8:ac:d1:9a:d0:2d:
2a:ed:d4:b3:48:6e:6b:9b:ee:83:64:30:e6:ef:d7:
2a:c0:7e:1f:a8:c0:37:91:73:ca:cb:35:83:11:0d:
ea:a9:3c:88:e9:b4:6c:2d:1a:cb:50:36:f2:8a:fc:
fb:94:6c:49:81:bc:62:c6:fa:0e:42:eb:61:84:e3:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:34:C3:70:B4:DC:06:9B:94:35:AE:A5:E3:C2:3C:46:AE:CD:78:9D
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:5e:fc:aa:00:99:22:8a:78:1d:9f:1f:c4:da:91:64:5c:
77:6d:ac:e6:6e:4b:0e:4c:08:82:f9:45:97:eb:a3:a2:b0:5b:
96:b8:01:04:eb:06:21:64:af:c0:c1:86:52:97:60:32:70:ee:
a2:83:05:64:9e:b6:50:ef:36:51:2c:ee:4c:62:71:0f:0a:ed:
4b:ae:8b:7a:d1:2e:ef:45:aa:6e:2d:dc:43:a2:78:e4:e7:bf:
38:09:4d:ec:e6:77:02:d0:36:f5:2a:69:69:98:e8:24:eb:7b:
6f:ec:d4:f3:51:5f:23:aa:16:d8:ba:51:66:62:ec:51:01:0c:
7c:59:93:d4:8e:9e:82:06:2b:9d:ec:f3:b4:1b:de:6e:5e:12:
5d:df:e2:25:a4:5f:45:70:82:1b:e8:78:91:90:79:cd:37:24:
63:77:99:18:7c:03:ab:6f:38:4a:65:17:dc:e5:be:f5:40:31:
3f:a4:0c:c2:86:cc:7e:5f:f7:8e:a3:3f:e2:89:9e:13:08:60:
87:1b:ec:a2:67:af:0b:fa:b6:fe:e9:d3:20:ad:90:08:a1:43:
3f:8a:fb:00:77:73:73:dd:e1:6d:c2:07:80:af:46:a1:97:96:
0c:c0:47:f7:f7:58:9b:6e:f8:59:e1:6b:f2:8c:49:de:15:31:
fe:11:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:17:50 2025 by rpki-client