Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: x0ky1mfz9pcDtS+ySdbHnha4PbizrSuQW9mqup2Is48=
Subject key identifier: 87:06:3B:8A:FE:16:C7:DD:9A:B8:20:D3:4E:69:91:89:39:4A:D7:0E
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 0196041C7B2C47B5AEBD124011C54C6B61E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 14D5
Signing time: Sat 05 Apr 2025 04:01:37 +0000
Manifest this update: Sat 05 Apr 2025 04:01:37 +0000
Manifest next update: Sun 06 Apr 2025 04:01:37 +0000
Files and hashes: 1: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
2: UqiuKqTQR1pyHUIwfSaJuTVkwgM.roa (hash: /daQ84/IlyKQccK8HNvLp9yZzU3eH5Tw2SuorEVY8WU=)
3: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: RutgOqwZ3SyYD+9PgDoCoCMwZxMo1EACgqoM6VkiYi4=)
4: hg2Ps6LFSparyJWx3GTYmUPm3pA.roa (hash: QXdyI8bAesp03A33q/sHoHZRnlP3monnDF28zjvU5M8=)
5: uQl0h3i3b202uiSsE2ql_r0wnXQ.roa (hash: RIkzFeAhN9PoylnIf3cZdxJ8xVemWn5y0Bu19U5kI84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:1c:7b:2c:47:b5:ae:bd:12:40:11:c5:4c:6b:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Apr 5 04:01:37 2025 GMT
Not After : Apr 6 04:01:37 2025 GMT
Subject: CN=87063b8afe16c7dd9ab820d34e699189394ad70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:56:1d:96:64:ef:ee:26:7a:ff:ce:80:4e:
24:05:cc:83:9e:f9:4a:07:a6:90:7a:13:42:f4:5c:
42:c0:df:f4:83:ac:c3:6e:17:c2:d6:4d:ff:48:d1:
fd:50:c4:94:08:41:77:14:e7:60:d4:e4:bb:d3:c4:
a5:e7:ca:b5:f0:30:dd:ad:86:d4:89:f4:87:7d:59:
ff:26:3a:92:93:ae:ff:a7:97:d7:8c:41:ae:23:28:
9a:20:20:13:17:5e:c5:11:aa:a6:25:13:06:21:dc:
cf:25:70:97:47:c9:f0:25:b3:13:69:b6:3a:7c:20:
de:33:07:fc:9c:7a:de:44:a0:8f:e9:0f:23:ba:03:
16:49:6c:5b:04:76:50:35:82:4b:40:cf:93:89:1b:
10:33:43:b5:23:85:e3:8a:36:19:40:f7:f4:53:fd:
be:b7:20:dd:30:82:be:60:96:20:a9:62:97:e4:0a:
1e:1f:3f:5d:7c:f3:31:1e:d4:80:31:e1:7e:99:5d:
41:3a:19:c8:b8:f0:15:29:61:8a:58:a8:92:32:cd:
94:06:d2:a5:ba:dd:44:69:27:84:ee:38:d9:8f:0d:
4a:b7:3c:85:59:24:ce:f0:61:65:fb:6b:ed:1b:50:
43:a7:96:77:d0:25:57:2a:57:7b:97:8f:a4:57:5a:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:3B:8A:FE:16:C7:DD:9A:B8:20:D3:4E:69:91:89:39:4A:D7:0E
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d6:c1:02:16:a5:3d:8b:78:70:77:27:40:a2:5b:d1:77:d8:
66:5a:db:55:a0:61:aa:99:6e:9d:a5:f6:a5:4b:66:10:c4:20:
a3:d3:81:02:f7:32:10:0f:8a:64:64:48:86:23:d9:f6:2c:42:
40:b7:d8:b6:c9:e0:b6:66:9e:3f:b9:64:f9:29:dd:15:0c:fb:
88:0f:e0:b7:8e:8c:33:9d:c0:74:4e:29:2e:f4:60:73:e0:b8:
64:24:fc:5e:5e:83:8b:d9:ab:82:2b:32:8b:2f:d5:c7:67:37:
1e:5d:70:63:6c:64:c7:b6:49:02:a8:cb:b4:70:41:ba:94:94:
ca:d8:6b:cc:dd:37:f0:31:9e:83:40:7a:cf:76:af:0d:83:25:
0c:f8:3f:d7:7a:d9:4b:49:70:5a:05:a3:c0:54:93:76:62:66:
6b:89:75:8f:dc:9e:fa:de:d3:40:c1:ed:e0:98:85:44:9e:5e:
1b:f2:48:80:be:a2:74:a6:24:df:27:9a:2c:65:b4:8c:94:2a:
a1:86:83:69:43:95:0d:8f:32:1e:bb:bc:bb:cc:06:ff:28:d5:
88:4f:78:7f:a5:da:fc:e4:78:04:56:31:c5:9c:37:c3:fc:67:
c1:7c:4c:eb:1d:99:fe:b1:ba:cc:8a:25:70:ef:70:d1:53:a6:
ae:3a:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:20 2025 by rpki-client