Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: MVMa7XCKlIM0zWIXAX783sO2YN7Wm3Y0/p+5Qcx1bIg=
Subject key identifier: 75:35:DE:F0:82:4D:05:62:0D:1E:02:74:4D:A4:FA:45:50:4D:CB:B9
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 01964A46B13A070564CCB2196E9209317F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0907
Signing time: Fri 18 Apr 2025 19:01:08 +0000
Manifest this update: Fri 18 Apr 2025 19:01:08 +0000
Manifest next update: Sat 19 Apr 2025 19:01:08 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: GImb6ybQO3gxCC61hfg/h5BDVssPgfl5tXVe0dv8SQk=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:b1:3a:07:05:64:cc:b2:19:6e:92:09:31:7f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Apr 18 19:01:08 2025 GMT
Not After : Apr 19 19:01:08 2025 GMT
Subject: CN=7535def0824d05620d1e02744da4fa45504dcbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:97:aa:2d:e3:20:7b:86:be:cf:b6:d3:51:
97:cd:cd:f0:30:4c:f5:e1:75:1e:1b:53:ab:f8:41:
c5:cf:ef:61:89:d1:d8:9d:08:c2:67:f1:22:b3:fa:
56:6c:9f:89:f9:dc:fe:f4:41:55:48:ca:d3:c2:ea:
42:70:9e:05:05:fb:8b:5f:a9:d6:e7:7c:ad:1f:f4:
37:9b:3e:3f:01:5d:24:e6:a4:39:ac:f1:b8:4e:24:
a6:33:ec:3f:20:9a:1e:6b:36:63:c0:1c:2b:f3:e7:
fb:c5:19:fa:a5:06:11:66:a2:bf:f8:6d:57:37:63:
78:24:9b:42:ad:4a:e6:53:8c:bf:11:38:ad:f3:ef:
49:72:4f:35:3d:1c:51:38:ed:47:cf:2a:a1:a0:3d:
c8:82:09:65:19:ce:1d:5a:32:ed:d9:2a:dc:8f:30:
66:1c:23:d5:b3:37:43:a1:89:92:52:ba:06:87:a3:
31:43:f2:5c:08:6f:a3:db:b0:6d:a2:04:bb:10:a8:
79:d1:fe:4e:0f:16:28:22:35:06:91:cc:88:5d:b0:
2c:60:7e:04:70:af:36:6f:21:46:5d:64:99:e8:56:
70:50:62:0e:bb:b2:9a:2f:2c:98:f4:bc:fa:19:7b:
e7:bf:ee:6c:0a:ef:09:04:12:3e:e8:b8:fa:03:72:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:DE:F0:82:4D:05:62:0D:1E:02:74:4D:A4:FA:45:50:4D:CB:B9
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:d1:f8:59:cf:66:13:ed:d0:7a:3b:37:c2:50:2c:6c:65:
49:44:d5:7f:4f:09:fb:a4:f4:b6:d3:cd:02:3c:27:38:d4:64:
a1:7a:6d:43:31:35:1b:b2:49:2e:d4:38:9f:8b:8a:28:c0:89:
8b:f6:e4:15:f1:02:07:6c:3d:ae:73:e1:66:38:df:03:0f:21:
2e:48:f8:af:8c:78:c8:f7:9f:1c:ea:a7:77:a7:1a:45:b7:d2:
43:70:55:b8:80:00:9f:ef:ac:80:89:5f:f3:0e:74:d9:e3:c1:
72:ae:45:0b:c0:39:25:04:f4:f6:9e:41:c2:dd:31:2c:ba:ca:
2f:6c:df:d5:6b:e5:45:17:20:7c:d0:56:13:56:bd:7d:28:bd:
98:95:12:78:50:06:54:bf:47:03:cc:18:97:83:15:5b:42:4c:
8a:74:ab:ba:84:6f:bb:74:99:b3:12:54:96:46:cc:ae:24:19:
d0:87:8a:61:db:80:64:ca:bf:7d:6b:b5:df:10:9b:b0:01:f2:
9d:02:93:9d:f9:bd:dc:1d:28:31:54:25:f7:10:0a:7c:ea:22:
11:60:4e:e2:bb:36:4b:5e:e3:44:cc:63:0b:cf:94:9e:9f:b8:
a9:36:f1:11:85:1e:82:1b:58:ae:c9:34:b2:75:2f:6f:a6:f5:
91:05:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:00:38 2025 by rpki-client