Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: BH+prUn0rWx3nz7WPuT+WXi8hV+ttQepcxKGc0rz2RQ=
Subject key identifier: 82:7E:39:B1:02:23:BB:96:7F:58:AA:A8:7B:90:8B:8A:7E:59:CE:03
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 01963FF9B8F7713C664A25A12ECCE0413042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 064E
Signing time: Wed 16 Apr 2025 19:00:52 +0000
Manifest this update: Wed 16 Apr 2025 19:00:52 +0000
Manifest next update: Thu 17 Apr 2025 19:00:52 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: 7oqNVqJSxigjApZhF5bj2pM42Xy4r3tCvn1E/1qUh7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:b8:f7:71:3c:66:4a:25:a1:2e:cc:e0:41:30:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Apr 16 19:00:52 2025 GMT
Not After : Apr 17 19:00:52 2025 GMT
Subject: CN=827e39b10223bb967f58aaa87b908b8a7e59ce03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:18:76:f0:eb:53:c1:2e:46:1a:44:d7:b9:
4e:c4:98:f5:23:74:7a:21:be:24:11:89:17:46:a7:
98:6a:12:17:97:c0:15:8c:a5:54:0b:4c:68:a9:c3:
5c:f4:63:65:97:15:49:bb:45:90:62:9f:ea:de:ea:
f2:58:67:bf:50:60:54:14:3d:ef:23:73:f1:0f:c8:
3b:f6:89:31:51:46:81:1f:fb:09:5d:8c:94:f0:f1:
c3:cb:ac:64:15:47:de:fd:18:2e:78:18:d1:9c:a7:
c8:47:c1:51:e3:80:8a:2f:1f:21:a3:2d:c8:ac:11:
f0:2b:ad:3f:73:e3:42:b5:18:0b:05:91:14:b1:2d:
ed:0c:6e:eb:35:3c:b2:a4:9c:52:60:57:a5:59:f3:
30:ac:38:e8:04:cf:b2:ed:8c:c3:ee:25:e5:75:e9:
ee:a8:80:b6:9a:7a:60:81:70:87:41:93:df:f0:bd:
77:5a:0e:21:6e:3f:04:9b:88:4f:5d:59:8b:de:0b:
50:66:89:2f:bf:f6:7f:f7:b2:a2:c7:73:04:00:d8:
05:12:fa:b9:96:4b:90:dc:24:a7:d8:b6:46:e9:31:
1e:2e:ed:8c:05:aa:70:24:d7:e7:8b:1a:ab:fc:a6:
cb:9a:65:bf:ed:cd:37:da:78:83:69:69:f5:29:a1:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:39:B1:02:23:BB:96:7F:58:AA:A8:7B:90:8B:8A:7E:59:CE:03
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fb:4c:06:dc:14:5a:11:55:69:51:8d:26:e6:9b:ff:db:b2:
06:51:18:0c:39:8e:f5:e0:46:a5:e5:07:f6:ec:09:fb:66:6c:
18:17:0a:a3:cd:6f:0e:49:55:db:0c:55:fd:34:3b:fe:08:e2:
44:7a:05:94:49:ac:d4:01:62:69:36:bf:4d:2a:9e:06:96:a1:
83:7e:e2:74:db:d1:37:35:be:62:50:9f:1b:35:e5:35:68:9c:
b0:46:1f:50:fd:41:cf:ee:6c:92:2f:57:6b:60:a3:01:e2:ed:
96:cb:92:1f:e9:15:d9:47:91:0d:b5:5c:25:47:ef:97:a3:3f:
9c:f8:b7:89:a9:6c:0e:ec:6e:da:20:67:9a:36:9a:45:3e:dd:
43:70:5e:2b:b9:db:98:33:26:aa:b8:91:f3:77:09:a7:87:01:
c2:10:8d:22:af:32:fa:d6:cf:3e:09:de:d8:e0:9c:14:a4:cd:
b7:dd:aa:d0:c3:ad:48:17:7d:3a:b7:46:93:97:7b:59:65:2e:
e8:30:e2:67:52:40:99:90:2c:dc:24:6e:ad:31:9e:c8:ad:cd:
82:f0:c1:7c:f2:74:de:0d:74:ab:5c:a9:c6:d2:b9:b0:fe:81:
bb:af:11:73:92:52:2d:c6:b5:31:a7:98:b1:d2:50:c0:93:db:
a3:85:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:00:25 2025 by rpki-client