Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: VXcE88rHTK/iknZeUxIfjRpMOTNkQ+fDX+9oPiGcCsk=
Subject key identifier: 12:DC:E9:51:F5:66:C9:76:A7:94:63:50:BA:5B:2E:E4:E9:75:F7:20
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 01965500BEDB7E262DF69B018633893C879A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 03F2
Signing time: Sun 20 Apr 2025 21:00:34 +0000
Manifest this update: Sun 20 Apr 2025 21:00:34 +0000
Manifest next update: Mon 21 Apr 2025 21:00:34 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: RIDzytYjpxYOjZbkIqAyp1fU3Xt1bkMDghstKmDuCyI=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:be:db:7e:26:2d:f6:9b:01:86:33:89:3c:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Apr 20 21:00:34 2025 GMT
Not After : Apr 21 21:00:34 2025 GMT
Subject: CN=12dce951f566c976a7946350ba5b2ee4e975f720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:8e:20:1d:cb:71:92:28:bc:3b:5d:8a:8c:
38:9a:49:2e:22:1e:30:c5:19:a6:ac:6a:45:60:0c:
a5:0e:38:ab:23:f7:fc:32:cb:89:dd:de:67:24:d2:
df:b1:f6:20:e0:ed:90:6c:02:2e:7f:f7:89:d3:c9:
e7:6f:bf:b9:58:ed:2c:79:b3:dd:74:aa:0b:15:59:
d6:bb:23:d6:f2:25:5c:65:a4:c8:88:f9:03:94:8b:
6b:2a:5e:08:b6:94:7d:95:5c:45:65:cd:0e:2a:63:
a7:21:31:bc:9b:b0:68:f6:e9:fa:bd:57:b2:7d:24:
9b:77:6a:9a:a4:b5:09:17:e4:ca:1c:49:2c:7c:09:
c5:ef:1a:b4:0e:0d:04:ee:ab:c9:27:a9:91:00:f6:
ed:64:72:04:73:f8:28:a7:b9:60:e4:3f:cd:49:fc:
3d:71:16:9d:65:96:ee:a7:5d:c8:9c:cb:ec:22:3b:
7b:2e:5a:3b:22:e5:d0:40:96:59:c5:b9:a3:a7:bd:
55:75:2c:02:8d:ad:95:f8:56:c6:ef:4e:75:cb:58:
c1:7b:ac:8b:71:50:c0:e4:f1:f2:a2:c6:b7:78:d5:
44:1a:26:c5:99:b6:73:42:ba:47:4d:bb:92:e7:ed:
15:c0:4d:aa:76:8b:52:8d:07:89:f8:61:5e:4c:db:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DC:E9:51:F5:66:C9:76:A7:94:63:50:BA:5B:2E:E4:E9:75:F7:20
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:23:e3:b6:ab:86:2c:0e:8d:33:10:30:31:0e:27:ab:67:
3a:33:ff:cb:55:2d:c9:3d:ba:dd:de:9f:84:93:5b:03:89:aa:
8c:02:64:e4:0c:b3:b9:4f:85:81:5b:88:f2:7d:13:d5:c6:97:
e4:32:d4:c9:13:e8:cf:77:de:ea:2e:43:5f:41:62:cb:fb:c9:
60:ef:b3:cc:b6:b8:50:f3:4c:9c:d2:ce:7d:ff:c3:25:eb:ef:
7c:5e:d5:2b:fb:9e:16:59:f9:d1:7d:3c:32:5c:fd:c0:8d:4e:
cf:23:f1:6c:57:87:7b:c5:cf:31:3b:a6:83:dc:38:5a:ca:ea:
7e:47:37:75:3a:e3:c3:54:e9:7a:07:c0:a8:90:ee:7f:c9:01:
a3:d4:19:a0:c4:45:be:89:4b:62:59:3a:cd:25:2b:81:77:bd:
de:e4:2a:ca:c4:fd:5b:c9:fd:d3:7f:5c:53:2c:4d:2c:3d:b1:
21:79:0a:2b:b5:85:6b:36:d7:eb:9a:58:47:9c:98:ab:81:70:
48:8a:dd:a7:00:70:c5:99:af:d4:6c:fd:f9:a4:f0:4a:c9:3b:
1d:3d:d4:6f:df:ad:9f:da:8e:9f:f7:8a:11:13:4d:cb:12:3e:
6d:95:20:4f:86:da:ca:65:73:60:48:8e:c2:2c:82:4e:2f:8c:
62:6c:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:13 2025 by rpki-client