Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: RG8Yvs+ev5D9rhYHN5I6O0YITkh4ug3A0Sh6/SC1m30=
Subject key identifier: 62:9F:FE:2B:DA:DB:86:52:0E:D8:8A:2B:75:40:02:2D:4E:C5:74:DC
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 0196507ED511BF6A9126C48C0F06B85BB7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 0EF3
Signing time: Sun 20 Apr 2025 00:00:11 +0000
Manifest this update: Sun 20 Apr 2025 00:00:11 +0000
Manifest next update: Mon 21 Apr 2025 00:00:11 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: OBNoPfvXQfDbML/iSJhcVmCl4izVe0ZFzahFp430l3Y=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:d5:11:bf:6a:91:26:c4:8c:0f:06:b8:5b:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Apr 20 00:00:11 2025 GMT
Not After : Apr 21 00:00:11 2025 GMT
Subject: CN=629ffe2bdadb86520ed88a2b7540022d4ec574dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:78:c1:ba:17:20:0f:91:54:6a:8c:fa:f2:
21:77:80:9d:b6:88:82:b7:76:b0:03:1a:eb:7d:be:
89:70:93:88:e3:29:5e:85:e1:a5:51:f3:ca:c6:27:
40:3f:35:9f:44:12:67:71:3d:d4:78:13:f2:42:f7:
26:8e:c4:69:3e:f5:21:74:64:1d:40:07:2a:6e:5b:
b8:0b:4e:1a:d5:0d:d3:3b:90:71:26:0e:9e:63:c4:
f8:02:b1:4e:0a:e6:c0:a0:4f:ce:4d:a3:ac:10:54:
f5:7d:44:52:e6:6b:9e:9a:f2:f9:eb:e4:ab:15:43:
ba:da:e5:66:9a:18:0f:77:3b:35:95:d4:fe:a4:21:
4e:75:25:30:15:17:35:08:e1:0b:45:4c:cf:db:8c:
87:ea:ff:13:87:c3:7b:fe:4f:97:29:29:f5:99:b6:
a0:fc:65:a3:b7:5d:0d:3f:0f:f6:c8:08:24:e2:0c:
51:a1:e8:1f:03:05:f9:f6:c3:9b:85:b2:1a:c3:76:
78:86:3c:b3:49:53:c0:21:2c:8d:d3:d6:e7:64:17:
9f:72:e2:cf:df:19:69:23:39:1f:2b:f4:ce:f9:83:
ad:79:b5:3e:f2:b0:b1:50:df:7f:e5:69:9f:18:2b:
c8:40:81:ef:54:3b:2b:64:a4:88:ab:9e:47:d2:ff:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:FE:2B:DA:DB:86:52:0E:D8:8A:2B:75:40:02:2D:4E:C5:74:DC
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:0e:1e:cb:01:b5:43:6f:a4:f0:71:d2:c1:a8:2a:da:0d:
c5:b1:18:e4:a7:d0:e8:7d:e1:bd:9f:06:61:73:c1:b5:df:f8:
e4:1b:62:85:14:d7:db:32:57:0c:8d:7f:da:ca:70:7d:73:c3:
a0:1e:a3:05:3b:bb:aa:56:6c:b5:cc:da:8d:2c:b4:cc:61:d5:
ae:06:cf:01:f3:01:a9:90:9d:a4:72:1b:78:00:be:e9:1d:6e:
d9:99:bd:55:01:c8:ff:62:4a:25:63:75:3e:3a:b9:4a:69:50:
aa:d9:01:fc:46:ba:21:e0:39:93:14:81:03:e8:25:4c:94:c7:
d5:c8:01:d5:7d:e8:3e:96:54:ab:e9:55:fe:fa:9a:04:51:f3:
b9:65:ed:9b:ac:67:4a:04:86:ee:35:14:9a:3e:5e:17:b9:cd:
49:43:a5:47:63:c1:b5:b7:86:69:f5:d4:11:8c:42:a8:c1:75:
c9:33:a5:1f:55:18:15:6f:f7:99:12:2d:d1:e3:e4:f3:18:97:
02:d3:1b:93:4a:4b:6c:6b:2f:5a:0a:04:82:c3:68:f1:a1:99:
77:bc:63:43:da:e3:0b:ce:13:c9:56:2d:d7:ce:09:37:93:c4:
99:1c:ad:16:be:73:b7:10:cc:a5:7d:43:a2:97:86:26:e9:fc:
46:be:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:07 2025 by rpki-client