Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: 3y1Am2+kktZhMbv7T8XFqa+ydafdo0jhunMZ9bqHOL4=
Subject key identifier: 65:7F:BA:4B:94:BA:2F:CA:99:6A:D7:C4:A9:A7:9F:6E:F2:A6:AA:99
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 01964556C91EECEF2B164AF48937EF6B080D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 20:00:37 +0000
Manifest this update: Thu 17 Apr 2025 20:00:37 +0000
Manifest next update: Fri 18 Apr 2025 20:00:37 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: AEFkEIyJOzWXhOcvQXXAM5Q+TJv5zA2VP6Yi1VG9Ouo=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:c9:1e:ec:ef:2b:16:4a:f4:89:37:ef:6b:08:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Apr 17 20:00:37 2025 GMT
Not After : Apr 18 20:00:37 2025 GMT
Subject: CN=657fba4b94ba2fca996ad7c4a9a79f6ef2a6aa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:11:c1:99:ba:87:f1:6b:e4:66:16:f4:86:
2c:76:0f:5f:58:94:b4:0d:28:58:70:e1:ab:dc:1c:
fb:d3:e1:06:9a:23:3d:b9:c3:62:b4:98:94:a2:32:
5f:2b:44:ad:ae:fc:db:35:1f:d7:b7:bb:23:66:22:
40:ec:5b:35:e6:33:c9:02:27:75:10:30:7e:4d:41:
14:8d:1a:04:67:89:cd:81:71:f0:89:db:e8:4e:73:
b9:80:a3:59:d4:a8:1a:e2:61:88:e7:35:13:92:0c:
14:a8:d0:3e:03:66:68:fb:32:df:97:37:f8:21:ba:
29:17:2c:e1:45:30:94:e6:b3:9b:78:67:23:1e:b1:
ca:fb:ff:79:c4:5b:9f:61:5b:78:83:79:d3:eb:01:
5d:13:a5:ed:05:9b:b7:ea:6a:b4:c2:d2:31:02:89:
f4:82:a9:bc:1b:b4:7b:b8:5f:5e:51:e1:75:21:ad:
65:fd:06:0d:a1:56:d8:14:54:76:87:f9:87:27:10:
23:e9:c7:da:22:b0:e4:25:36:fa:75:6a:2e:b2:7e:
30:20:cc:30:c5:43:24:42:7d:3f:39:df:c0:35:4e:
19:b7:e1:9b:6a:f8:f1:57:4d:91:96:ee:5a:c8:c3:
ba:a1:e2:9c:e3:60:e3:72:4c:bc:32:2c:6e:05:a5:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:BA:4B:94:BA:2F:CA:99:6A:D7:C4:A9:A7:9F:6E:F2:A6:AA:99
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:0a:c2:7e:14:4e:6b:5a:67:48:41:fe:35:2f:53:40:4a:
13:37:fa:c1:7e:21:55:6a:cc:0b:10:77:55:ef:dc:14:40:a0:
63:51:5c:a9:33:30:2e:e5:9a:ee:b2:d8:b8:c4:ef:cd:e2:7f:
d2:45:f4:a2:2f:86:d3:52:a6:8d:c8:65:be:eb:44:6e:33:d0:
05:08:84:a7:82:ef:62:74:72:80:1a:b8:40:8c:3d:a6:f2:a7:
16:2c:45:9b:32:f0:dd:e1:60:44:a3:26:f1:a8:4d:15:db:f9:
b7:5a:ff:14:b6:0f:c0:88:74:28:22:ee:a5:78:2a:0a:c5:87:
3b:d4:67:df:e1:35:3c:7a:3e:a9:dd:63:a1:64:e0:4b:68:07:
37:74:77:83:d3:ad:b7:a3:17:66:0e:f2:46:a9:aa:06:f4:8c:
c6:cb:81:58:ed:0d:ca:3d:24:e2:7e:95:c9:cc:80:a5:62:a4:
67:3c:0c:26:de:0e:ed:2f:b4:84:51:f9:7b:6b:c5:ed:22:6d:
7e:62:25:d4:35:ea:b8:e5:08:c6:25:6f:30:a5:8c:88:0b:74:
c5:28:da:31:e6:02:a9:6a:5b:f1:5d:8c:94:4c:70:b5:a1:2b:
92:2d:8d:fd:e9:1b:1e:42:87:a3:8e:e6:58:d2:0e:70:55:69:
3b:bd:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:41:43 2025 by rpki-client