Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: 54/tFXUw2aNq0X7E+MtzRqfz4bPX+ecPVhJ3LgkLycc=
Subject key identifier: 8F:A1:6D:07:69:77:47:55:15:17:34:53:12:84:F5:81:FC:0C:1E:5E
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019628969357ADDDE2C593C66867F7F52E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 14E6
Signing time: Sat 12 Apr 2025 06:01:18 +0000
Manifest this update: Sat 12 Apr 2025 06:01:18 +0000
Manifest next update: Sun 13 Apr 2025 06:01:18 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: LkQRlImH+ciovv3+6HHQGRz+VNDcU73EQL3BDKtBr9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:96:93:57:ad:dd:e2:c5:93:c6:68:67:f7:f5:2e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Apr 12 06:01:18 2025 GMT
Not After : Apr 13 06:01:18 2025 GMT
Subject: CN=8fa16d0769774755151734531284f581fc0c1e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:d7:e1:1f:ed:fa:0e:a7:9c:1a:98:14:dd:
cc:bb:34:02:e8:65:8f:03:2f:45:55:4e:50:06:f8:
27:c1:f3:c1:44:97:42:df:03:81:bc:40:da:69:ee:
1c:31:49:da:b1:be:b4:f1:17:cb:f0:b3:86:f8:15:
01:66:51:a3:0b:ea:02:02:52:8c:73:74:d8:92:57:
11:73:7b:e0:a9:90:1a:57:77:cd:e9:b9:75:0d:41:
fa:73:e0:03:0b:82:1c:98:12:64:8e:78:f9:79:5d:
70:6e:d6:7a:87:5c:97:8e:ce:f4:0d:bd:44:2c:01:
46:6e:cf:e1:30:11:e7:9a:d6:f6:1d:67:c4:a4:b7:
60:78:58:55:e9:db:c3:d9:72:aa:e8:2d:f6:bb:be:
42:68:a9:0f:72:2b:15:5c:b4:ea:50:cd:7b:86:3a:
05:ab:e5:66:0a:72:99:77:6d:fc:a4:72:2e:93:8f:
06:6c:eb:b2:8a:9a:56:1a:be:25:9a:3a:4c:8e:cd:
e0:f2:12:22:af:4d:2e:c3:1c:18:b4:11:e6:16:cf:
cc:26:8d:68:0c:49:fe:2e:6d:cc:de:25:62:ec:18:
36:88:b4:fd:55:30:9c:27:7d:38:95:32:18:54:87:
17:1d:4f:02:8a:15:e5:ad:43:b0:34:63:bb:55:b0:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:6D:07:69:77:47:55:15:17:34:53:12:84:F5:81:FC:0C:1E:5E
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6e:34:80:b3:08:36:bc:27:3d:25:65:83:5e:92:6a:e0:b1:
bd:e4:8c:a4:f2:a2:de:a7:3a:17:23:d2:9f:10:16:be:96:0a:
f8:c1:9d:ab:fa:57:16:6a:7a:ca:33:e5:48:cf:c3:e3:3b:05:
0c:df:ec:13:6e:b7:b6:8e:b8:ec:cc:95:d5:db:f4:90:12:5e:
84:c2:b3:18:31:ad:87:7e:7d:eb:0c:c5:df:e9:4f:e4:ba:c4:
b3:1f:c3:ba:9f:bf:72:e8:25:0a:96:e1:48:82:82:23:0b:06:
0b:41:ef:22:7a:6f:f1:d2:e4:e1:45:95:d1:9f:a2:6a:53:94:
64:99:76:f0:5d:da:4c:be:12:5c:cf:ee:fa:d9:03:95:b6:96:
e2:45:5e:2d:2e:91:c6:db:17:de:08:05:fa:dd:af:4d:59:db:
27:ef:e3:ea:db:68:69:a0:0e:11:cc:ed:a2:dd:22:71:aa:a3:
e3:64:bd:98:30:1f:49:d0:03:2a:62:77:d6:01:66:f2:37:6d:
1c:bb:8b:ce:24:6c:5b:17:ca:ae:9c:0a:07:0f:c1:58:59:49:
e6:6c:4e:ed:db:7a:bf:ba:0a:f5:3d:fa:4b:e0:92:c1:0c:36:
2e:d0:23:2c:a0:df:47:53:da:ba:cc:38:36:e3:08:fd:89:92:
ed:b8:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:22:31 2025 by rpki-client