Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: w/uGBjMj1StO4yKLINCKH8XILUbPc1BFtZX7fcYe6KM=
Subject key identifier: E0:63:C8:D2:09:A2:95:BE:B2:EE:91:BC:ED:8A:74:72:AB:55:C7:57
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 0196594B98ADBD1E93BC596C930AB4DE5816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 124D
Signing time: Mon 21 Apr 2025 17:00:48 +0000
Manifest this update: Mon 21 Apr 2025 17:00:48 +0000
Manifest next update: Tue 22 Apr 2025 17:00:48 +0000
Files and hashes: 1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: MQr0GoUX2n5i0tePFAzdkIVw9RRlk5CzMP8qEYirDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:98:ad:bd:1e:93:bc:59:6c:93:0a:b4:de:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Apr 21 17:00:48 2025 GMT
Not After : Apr 22 17:00:48 2025 GMT
Subject: CN=e063c8d209a295beb2ee91bced8a7472ab55c757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:e2:32:74:e6:ad:f5:4d:1f:13:ce:75:bb:
dd:6c:fc:f8:79:68:c3:a6:2a:fb:e0:4c:b1:02:a6:
5d:30:d5:2b:72:54:57:a1:9a:39:99:94:81:a5:66:
69:f2:66:71:fd:fb:02:55:84:d4:5e:d4:b1:a7:f3:
66:45:37:de:86:45:72:90:7b:db:7a:ad:9a:a7:38:
96:53:0a:05:6c:b6:05:50:c0:ad:09:1b:e9:bb:cc:
a9:c7:d6:2e:9f:d1:a3:99:68:9d:a6:f0:27:b9:c1:
45:12:1c:c6:84:18:23:8b:34:79:c9:a0:f1:a9:f2:
1e:e2:b6:58:3a:a1:40:24:f6:37:91:22:73:09:8d:
c2:2f:15:99:c1:d9:43:af:a2:a0:ab:a1:6f:e4:14:
c3:9a:19:6f:06:7f:77:32:ba:10:b3:f7:a3:03:37:
5d:1b:77:2c:f6:12:c8:c0:67:29:10:bd:10:a0:63:
83:41:81:33:2c:a4:a7:d3:ae:e0:48:27:7a:70:e3:
69:a7:80:95:64:e9:56:73:ce:e6:17:ee:ee:66:dd:
b4:b8:7e:1d:7b:64:9c:77:7d:d2:11:4c:c8:a7:0a:
55:1e:c9:0a:94:9a:26:d9:5b:74:79:28:3e:7f:02:
43:8f:e1:9e:1b:b3:00:58:de:c0:af:1f:6b:e0:4f:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:C8:D2:09:A2:95:BE:B2:EE:91:BC:ED:8A:74:72:AB:55:C7:57
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5b:ea:a9:67:18:90:71:06:a3:68:6a:1a:3f:81:35:59:c1:
f1:ae:71:1a:95:c4:59:5c:14:86:d8:f4:26:11:f1:c4:86:78:
69:53:eb:8e:68:8f:b2:e8:c7:d3:8d:3d:a2:59:04:a5:f9:5f:
05:51:40:a7:fe:6b:07:26:96:26:69:c3:bd:93:ef:fb:62:b0:
3f:a9:d6:04:dd:be:5a:98:56:06:8a:c4:03:ee:e2:02:e1:9f:
39:63:45:6e:9e:4c:62:80:21:60:4e:1f:23:49:18:e4:5a:d3:
65:39:63:49:36:bf:23:7a:e7:7c:5c:b4:72:19:72:48:73:ec:
cc:95:54:4e:20:28:7c:5b:de:2a:e5:70:e0:cf:78:40:b6:79:
40:25:84:6e:62:bd:3c:31:51:94:9e:7c:5c:0d:c3:41:fd:1e:
80:5e:3b:e5:f1:2c:a1:99:ef:3b:7e:93:a7:00:9a:5d:95:f5:
45:a4:40:14:fb:e7:5b:37:7c:d8:95:ea:06:71:41:7e:b8:e4:
d6:72:5b:fd:a3:a2:a8:95:b9:b5:88:9e:e4:61:cb:c8:be:a5:
36:b2:80:c0:6a:6f:f0:f4:32:0f:fa:2c:fd:8d:5f:f1:61:a8:
3e:dc:d8:00:df:6a:4e:05:57:75:39:5f:2f:b6:56:ac:c5:fb:
9b:53:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:31:44 2025 by rpki-client