Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier: WIwZTdLZL9spy9Utx2+SHc6jTY3X+J0EjBbSB2ytJMM=
Subject key identifier: 8C:0A:6A:02:52:B0:08:8A:3C:17:97:9F:83:76:8B:90:BB:3B:1B:C2
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01960DFB1706D8CEB565FB2AB669E1CB3E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number: 4C
Signing time: Mon 07 Apr 2025 02:01:21 +0000
Manifest this update: Mon 07 Apr 2025 02:01:21 +0000
Manifest next update: Tue 08 Apr 2025 02:01:21 +0000
Files and hashes: 1: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: qWuHg162BxEkqUWJE0/ufpCv5lPoS3ByjMWq/z4XWKY=)
2: mOMofnwSDO1E_H1bLJd1El5aHMU.roa (hash: sehcH5h49oZDTQIRRZYvpCR3qhsCb+BcFwEIEdp5jcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:fb:17:06:d8:ce:b5:65:fb:2a:b6:69:e1:cb:3e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Apr 7 02:01:21 2025 GMT
Not After : Apr 8 02:01:21 2025 GMT
Subject: CN=8c0a6a0252b0088a3c17979f83768b90bb3b1bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:f8:eb:47:45:9c:ad:51:e2:05:77:ce:cf:
fd:43:56:0e:e0:3a:8f:ad:1f:ec:17:ef:ab:21:fe:
76:1b:6f:1d:14:d8:3d:1e:cd:84:a4:68:80:96:08:
85:f3:44:9f:03:16:79:83:a0:bf:12:0b:5f:44:72:
53:ac:06:b0:97:2e:0d:6a:65:8d:f3:00:43:b4:e3:
f4:07:cd:bc:e0:07:49:fe:cf:3d:9f:df:98:17:45:
10:8e:13:5d:01:df:90:a1:6b:57:40:b4:82:da:f0:
d7:68:97:66:f0:e9:b3:44:d4:ae:93:d0:9c:85:9d:
75:d8:78:ca:34:24:87:c2:1c:f1:5d:62:b6:ca:d6:
ae:d9:c9:68:f5:32:a3:ba:92:9b:9b:d5:d0:14:3b:
65:b9:54:2a:ef:84:4c:32:61:9f:52:30:1c:a6:f8:
e1:d0:73:dc:59:ac:b7:ec:42:c8:10:ad:33:9c:3e:
32:a5:00:f5:00:be:01:9e:f8:aa:08:71:d7:60:fa:
03:37:ab:ba:9f:56:a0:69:71:5f:20:33:42:29:6e:
aa:8b:ad:11:fe:aa:81:66:0e:5c:a0:3a:fe:a7:9d:
df:34:4e:50:fc:8e:ff:9a:eb:bf:98:66:67:d4:68:
16:4e:9d:e6:79:2a:2d:e2:fb:fe:4c:0f:72:82:94:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:6A:02:52:B0:08:8A:3C:17:97:9F:83:76:8B:90:BB:3B:1B:C2
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ea:52:1a:07:da:c4:70:7c:ad:90:98:e6:ec:bf:ea:28:01:
a2:21:fa:72:16:bc:71:f2:ba:2e:a9:ae:fa:b3:8d:46:a7:26:
48:3b:c8:b7:90:ff:1e:ca:97:25:b9:f6:d8:82:07:a1:b7:f7:
67:5b:21:99:cb:84:f8:f8:30:c9:40:20:df:d0:55:c0:e8:7b:
b3:76:6f:1e:d7:b3:09:75:ba:39:35:da:70:14:45:b7:de:cd:
7e:99:f6:a3:80:50:93:26:71:6c:a6:46:47:11:cc:cf:21:0e:
12:05:9c:a4:aa:8e:a2:c6:25:a0:1e:92:c9:f4:89:3c:ea:9f:
83:c8:d8:85:ce:00:bf:04:d2:20:d4:dc:93:00:dd:6b:41:74:
bd:2b:52:e4:f2:97:0a:0b:2d:9d:43:6f:5a:ce:7f:f0:22:01:
da:89:7e:ed:76:b6:08:9a:6c:42:2f:3d:3d:93:db:d6:26:98:
0d:a2:94:ea:27:b4:f8:e7:96:6d:cb:80:af:a7:b8:7a:3e:4c:
68:22:23:71:73:f8:91:88:3c:a3:17:fd:9f:d0:0b:d5:a5:56:
a5:1e:9f:5f:5d:32:ac:75:e1:8e:19:4e:b8:a4:80:9c:42:38:
bf:09:5c:dc:da:a6:57:7c:59:35:81:89:4c:40:84:68:ec:15:
e4:da:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:02 2025 by rpki-client