Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: /hazvs3chqiODZDYx2287zXPCazJUQN6AdJ1uRdqDr4=
Subject key identifier: 1C:0C:BD:83:B2:5B:E6:20:EC:08:B1:EB:5B:36:BE:58:1A:16:5F:2D
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 01964C348A3DF06C3AEA7D3B39A6CFFBCC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 04:00:33 +0000
Manifest this update: Sat 19 Apr 2025 04:00:33 +0000
Manifest next update: Sun 20 Apr 2025 04:00:33 +0000
Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: ppt9Wm10CSBOSzg5IiS+j6vul/Sip7M3nIikJDuZxtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:8a:3d:f0:6c:3a:ea:7d:3b:39:a6:cf:fb:cc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Apr 19 04:00:33 2025 GMT
Not After : Apr 20 04:00:33 2025 GMT
Subject: CN=1c0cbd83b25be620ec08b1eb5b36be581a165f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:19:94:66:48:bd:34:b8:22:e6:f2:57:15:
e4:a0:2d:83:54:9c:cd:21:d2:ce:09:20:59:68:e4:
82:f4:42:2f:83:11:b5:5d:e6:a1:67:02:ff:59:da:
e0:e4:5d:76:bf:ea:c4:89:6f:14:e9:92:11:c5:40:
f8:e7:74:ca:3d:4e:a9:b3:b2:c3:b2:8b:da:94:2f:
ae:39:c2:10:15:4d:14:3d:ce:5c:41:b5:63:29:fa:
72:e4:9e:91:2a:d2:1a:5b:a0:b4:1a:b4:7e:38:4f:
cf:20:85:48:55:3e:dc:10:06:9a:30:bd:0b:88:18:
9a:5f:e3:21:ae:c4:f1:11:1a:0d:75:a7:6b:1f:39:
ed:42:ce:83:6a:dd:ff:3b:90:66:ef:49:e7:e7:53:
f4:6e:3f:40:45:54:0c:c4:06:c8:a8:9d:f5:a4:62:
e1:4e:cc:49:e3:42:84:d9:fe:06:e1:92:f6:13:f9:
32:bf:41:56:f1:07:73:c7:f3:f7:a4:0e:92:00:16:
a2:35:5e:9c:0f:f6:69:5b:22:d9:5f:57:d5:f9:f8:
7e:92:db:21:ff:dd:29:9e:74:af:4e:e6:84:83:4e:
b3:62:19:ba:31:00:e6:57:b5:aa:70:00:39:66:37:
c3:fa:15:84:90:0e:a2:5c:74:d6:8e:c4:eb:8a:5a:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:BD:83:B2:5B:E6:20:EC:08:B1:EB:5B:36:BE:58:1A:16:5F:2D
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:1a:70:c5:1b:c0:e2:d6:78:06:6f:47:b4:ea:a6:d5:b4:
41:03:d1:79:c5:d3:d0:89:eb:c3:b1:3b:2a:0c:f8:ad:ed:bb:
06:bf:e0:b5:68:5d:1f:7a:39:d4:f4:b4:e1:9c:30:31:3c:4a:
06:81:51:62:e1:ad:a0:dd:d9:03:80:7c:58:f5:61:f5:cf:75:
56:7f:0e:32:30:7f:da:3f:79:f3:03:55:c2:2f:7d:da:33:2e:
bf:ef:de:97:91:a6:22:83:ff:bc:d5:9a:8c:9e:f8:dd:50:7c:
14:33:89:ca:84:10:48:c5:99:d4:82:eb:a0:cc:8b:c5:76:39:
19:a7:fb:94:0a:75:82:16:9d:17:71:81:71:4a:91:da:68:b0:
50:50:d9:60:ff:ff:c5:16:a5:cf:4f:fa:db:c5:b5:36:17:9c:
9d:4b:9b:1c:89:88:4b:ee:af:e4:05:c3:06:5f:5a:46:3a:3e:
7b:1f:1c:94:4f:98:32:89:d7:6d:ce:e9:5c:cc:c1:03:5a:5b:
b3:ec:c5:36:98:bd:40:0e:2b:6f:e7:50:da:1f:81:59:8a:68:
95:89:2d:f9:8c:f7:c2:e5:5c:06:fb:91:22:ef:f6:33:38:24:
45:ff:22:32:fe:bf:c3:a5:70:19:8d:a5:1d:1a:a9:80:49:36:
a8:58:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:40 2025 by rpki-client