Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: bApIBAIApNTNxz3f9m4LJ1IvqqUBr0frZc+m26o93i8=
Subject key identifier: 2D:DC:4F:6A:BB:6C:E0:3A:52:CA:A5:D5:77:97:0D:3B:44:63:3A:1B
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019653B7A9257A42B81780768224405C0B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:01:07 +0000
Manifest this update: Sun 20 Apr 2025 15:01:07 +0000
Manifest next update: Mon 21 Apr 2025 15:01:07 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: JqFDT6Jyc1ZLWyBXDpT2cvYdD9su0E3BmZlPrjlLRAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:a9:25:7a:42:b8:17:80:76:82:24:40:5c:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Apr 20 15:01:07 2025 GMT
Not After : Apr 21 15:01:07 2025 GMT
Subject: CN=2ddc4f6abb6ce03a52caa5d577970d3b44633a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:df:69:3e:7e:65:67:f1:f2:18:ab:57:ea:
a3:32:a5:65:17:45:67:5c:44:01:96:4e:bb:c3:e7:
e4:b4:83:45:61:42:07:ed:cf:0c:7f:fa:a6:c9:bb:
3b:d7:25:bf:16:8a:53:06:50:75:a4:27:0b:b0:13:
9a:af:a6:15:57:04:95:45:86:dc:32:ed:65:f9:4d:
f7:0e:de:07:e2:a0:30:ed:75:87:9a:3c:a8:b5:86:
90:ef:6b:ed:69:38:13:54:5e:3a:2a:46:25:b1:6e:
b1:df:fb:83:3a:3a:60:b2:0b:63:9e:50:a7:2e:0e:
35:ff:d0:65:db:b4:60:3e:f0:a6:d9:ca:3a:80:38:
22:03:27:8b:81:f7:9a:00:a2:a1:1c:51:58:1c:c9:
bb:ee:7e:65:25:ed:ca:d3:16:c0:85:62:a8:1a:50:
9b:6b:af:30:30:e3:a8:81:35:f3:ab:38:c1:8c:19:
64:d1:89:4d:ab:25:b1:8b:28:6b:d1:c7:72:34:25:
f5:57:9f:f2:a3:b2:fd:48:8e:70:1f:54:68:bd:23:
b4:05:f0:f2:84:a7:13:a0:24:53:29:b0:8e:00:a3:
51:d0:ee:b4:57:fe:b4:32:ad:f5:9a:06:e9:15:b2:
94:17:65:b0:34:5d:ac:94:14:09:5e:a9:9a:81:b6:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:4F:6A:BB:6C:E0:3A:52:CA:A5:D5:77:97:0D:3B:44:63:3A:1B
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3c:8c:96:13:b0:09:e6:0b:01:ab:61:8b:57:57:1b:d8:0b:
e1:10:d3:e0:89:bf:c1:3b:5a:b8:e8:a6:32:c6:45:36:9a:5a:
1a:52:13:33:d8:8b:5f:67:d8:4c:e8:17:26:ed:2e:cc:15:3a:
7b:f6:de:71:7f:c5:b5:8b:0e:06:ab:80:92:c4:fe:e8:16:a1:
70:1c:41:bc:78:28:0c:a0:93:1a:16:52:75:ee:6e:91:3f:9e:
38:22:2c:ae:e1:aa:1d:b1:a2:51:5f:e5:dd:61:f8:3a:e7:1e:
3f:ce:48:f4:06:c0:36:eb:40:e2:48:a2:b2:ad:fd:35:fc:f8:
9c:18:e6:03:92:96:74:72:de:71:14:1d:fc:33:60:1d:1b:7c:
69:4e:47:b8:cd:b5:4a:c4:1f:f8:3a:ff:4d:dc:a9:74:d2:4b:
8c:7b:9b:8c:21:48:88:80:ed:be:a8:b5:88:af:79:43:19:79:
7e:5a:e0:a0:4d:f1:b3:0b:65:ce:68:b9:fa:9a:d0:f9:64:c3:
f3:68:26:33:27:a3:c1:b2:b8:08:39:f3:43:4f:b8:88:3e:f2:
b1:25:75:6c:73:85:1d:e1:7e:ed:c3:1e:a1:ae:d7:1f:91:0e:
e1:ca:83:a8:7a:39:9a:5c:96:8c:ff:7b:8d:f4:43:4f:61:ef:
3e:18:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:59 2025 by rpki-client