Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: cLhrfRufXMB1VQOrm+lv11oMxRUbig+EI5lkF8GqSvQ=
Subject key identifier: 5F:88:35:74:A6:EA:E9:C7:18:02:6B:34:7E:D3:EA:C5:30:60:53:86
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0196181050ADF7FC9929E353F963083953F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 042F
Signing time: Wed 09 Apr 2025 01:00:44 +0000
Manifest this update: Wed 09 Apr 2025 01:00:44 +0000
Manifest next update: Thu 10 Apr 2025 01:00:44 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: ZXxhLPrEMMzuekWzmuXtpHoM2uoLNnaqZLwcXE/VYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:10:50:ad:f7:fc:99:29:e3:53:f9:63:08:39:53:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Apr 9 01:00:44 2025 GMT
Not After : Apr 10 01:00:44 2025 GMT
Subject: CN=5f883574a6eae9c718026b347ed3eac530605386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:bb:b7:e5:97:64:55:b0:2f:b8:03:43:5d:
01:a1:d7:ba:fb:31:7c:84:48:b0:33:49:32:6b:c4:
11:0e:7c:dc:27:6e:0e:fe:b7:7c:5e:79:de:5e:0d:
0b:a3:0a:79:31:2d:bd:89:03:ba:a2:6a:19:5b:80:
0e:5f:56:6f:2b:10:17:73:c1:c0:42:d0:29:37:8f:
97:dd:87:4a:ba:b3:28:e2:61:51:10:72:9c:98:51:
af:a0:6f:e7:44:ee:20:44:ef:06:3c:1c:fe:e0:c9:
63:95:95:51:b3:23:91:dc:7a:88:2e:4f:bd:fe:65:
b8:cd:ff:17:d3:cd:19:d8:eb:c3:83:14:bd:e5:b2:
fc:04:cc:20:d1:19:bb:f9:71:81:96:cf:4d:34:64:
be:f6:62:47:2c:f9:b8:0f:2c:ac:08:4a:57:87:58:
52:b4:c5:94:9a:d2:ef:a7:d0:be:4f:c9:b8:b4:05:
0f:1a:85:e9:f3:12:6b:2c:11:98:30:b3:6c:2f:f9:
75:59:a0:75:8d:80:5e:8b:76:b1:e7:91:90:f1:fa:
92:0b:b3:05:d2:f3:d0:f5:fa:77:7b:ae:b0:f7:40:
70:1b:be:87:0b:9d:77:a9:a1:b4:42:46:e1:84:18:
a0:5e:1b:67:01:17:69:18:4a:a9:58:96:3a:11:4b:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:35:74:A6:EA:E9:C7:18:02:6B:34:7E:D3:EA:C5:30:60:53:86
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8d:27:8c:4b:39:d6:56:21:0a:3d:be:ba:bb:5e:8a:c5:57:
ca:f6:29:1a:cd:19:31:5d:96:00:50:6c:da:18:1c:cd:36:70:
1b:9c:91:5c:8b:91:5e:e9:e6:db:c2:eb:60:12:cc:d9:8a:3c:
06:eb:20:32:84:1a:0a:cd:b3:ed:2e:19:7e:c7:65:ed:4d:2c:
f2:b8:4b:32:14:eb:82:0b:df:96:9a:54:e4:01:f5:91:f8:ea:
ad:67:8d:f9:ed:cd:30:d6:e3:64:9f:68:81:c7:c0:01:64:8d:
37:28:9f:b8:14:55:1f:f6:08:ed:53:e9:56:65:a8:d7:ff:ea:
56:80:91:08:01:35:8c:67:a7:a5:93:aa:fd:f6:61:2c:ac:d3:
9e:e2:f1:b4:e2:bc:a3:c2:fa:79:f4:72:f5:91:9b:49:3c:5c:
ea:7e:c7:88:ee:3c:7a:de:64:e5:29:ed:67:fa:89:f3:99:6b:
da:28:90:cc:80:fd:ba:43:0d:79:a3:39:e7:35:0e:86:89:bd:
21:2d:7e:9a:33:79:41:7d:0a:1d:e7:b6:b1:f7:23:3d:08:24:
39:7b:a5:20:f8:f8:2d:4d:d0:aa:d2:9f:45:74:89:c7:9b:95:
bc:4d:b1:fa:e7:5a:78:37:ab:80:02:90:a1:3f:80:8c:c5:9c:
48:c1:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:19 2025 by rpki-client