Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: 8+Lo+0P3GvOBXy8Flk0HweKFNwhLYEtDVnRlSFqVftE=
Subject key identifier: DD:B9:0C:8C:D5:74:11:6F:45:B5:F5:01:BD:20:82:38:F4:1E:8A:69
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 01964B90A45B3A8FFE41081778B7E7FBF63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:01:32 +0000
Manifest this update: Sat 19 Apr 2025 01:01:32 +0000
Manifest next update: Sun 20 Apr 2025 01:01:32 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: l6EOUVqV32kGxwX1cz38yiZU4LgaF+QaXW8oR0PiKt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:a4:5b:3a:8f:fe:41:08:17:78:b7:e7:fb:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Apr 19 01:01:32 2025 GMT
Not After : Apr 20 01:01:32 2025 GMT
Subject: CN=ddb90c8cd574116f45b5f501bd208238f41e8a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:8c:96:77:80:3f:a5:36:ea:03:66:a9:1a:
5d:0c:65:8a:60:a6:d9:84:8e:ee:fa:ed:33:c0:a8:
9a:45:80:67:24:ef:82:9c:a4:14:d6:2c:88:8a:d1:
11:d4:16:be:38:5b:9f:ee:db:c7:c3:51:6c:b0:c1:
da:26:27:aa:a1:60:87:95:b3:c2:56:0c:d8:12:65:
0b:f0:c1:13:ba:de:c8:a1:a4:ab:e6:f9:02:39:d5:
d4:07:c1:98:17:a7:27:fe:21:33:44:50:60:5b:1d:
58:63:d1:84:e3:3d:42:1d:f3:e1:2f:de:c7:3a:0d:
d4:37:1f:26:a8:04:3a:30:06:fc:8d:f6:0c:2c:98:
14:74:ae:05:d6:71:61:73:1b:57:06:63:a0:18:50:
73:e1:3f:63:47:d4:91:28:bd:72:90:00:c8:b0:03:
3d:72:d0:6b:11:12:fb:e3:5e:1b:96:dc:1c:60:9a:
48:6b:16:76:54:34:8f:f6:d2:6c:3c:e5:1d:f4:e6:
a7:76:1f:9c:02:87:c3:c7:76:e3:b7:27:9c:ff:e2:
94:90:2f:65:44:8f:c7:1c:f5:71:6a:b4:82:4d:7a:
ac:1f:3e:58:c1:c5:c5:e9:ee:72:2c:8d:05:4f:20:
b2:d6:5d:15:3e:c1:d9:2c:09:74:ca:a2:f3:8b:0c:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:0C:8C:D5:74:11:6F:45:B5:F5:01:BD:20:82:38:F4:1E:8A:69
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c6:3b:02:fe:b4:b9:6e:57:f0:6d:c6:a5:32:2e:be:ca:09:
9d:9a:e2:3b:57:84:06:b6:96:be:07:a2:a7:13:eb:d1:56:4a:
2a:96:cd:d0:14:0b:f1:fa:f8:1b:ab:01:4e:f6:b0:93:8a:63:
29:64:40:b5:e9:c0:61:d8:ad:bc:28:9f:4b:a6:b4:62:82:58:
3f:ba:ae:f5:b2:e4:26:97:21:f6:a5:7b:e3:81:82:73:74:ec:
7d:b0:1a:19:1d:e7:8a:67:e4:b8:cb:96:df:33:23:38:c6:c3:
0c:dc:38:20:b5:62:61:cd:70:07:a3:f8:43:57:5c:8c:6f:57:
7c:68:45:b5:9e:66:93:c7:88:aa:64:22:7f:b1:19:42:9a:03:
2a:a2:1e:6c:eb:23:51:88:85:98:89:6d:91:ea:13:3a:52:5f:
1d:ea:63:fc:77:ba:f4:0b:28:ff:29:d0:1a:d1:1b:98:63:a1:
12:76:19:81:87:07:63:0a:a3:a8:15:93:c5:7d:ac:07:af:04:
a2:02:d6:03:1d:44:a2:f3:20:84:cb:46:74:c0:c2:1f:a7:c9:
3b:85:f6:08:48:f8:9b:9d:83:0a:f4:85:e3:b2:ee:86:b4:50:
cc:ed:a1:38:c5:21:f2:04:f5:00:09:59:84:18:4e:cb:b4:23:
cd:ed:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:07 2025 by rpki-client