Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: MnGZZZNeSD+blFuw0X04IcWVOWSMtmPasylrNQe1l24=
Subject key identifier: 85:07:EF:63:95:AB:7F:82:3A:08:5D:DA:2B:DA:E4:04:0F:D6:A9:20
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 01964444B35C93D98E687355D14566B27BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 15:01:15 +0000
Manifest this update: Thu 17 Apr 2025 15:01:15 +0000
Manifest next update: Fri 18 Apr 2025 15:01:15 +0000
Files and hashes: 1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: sJ9QvKsAht94SblPJ0+ZWUCnDbldDltBFLS/jGZIOuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:b3:5c:93:d9:8e:68:73:55:d1:45:66:b2:7b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Apr 17 15:01:15 2025 GMT
Not After : Apr 18 15:01:15 2025 GMT
Subject: CN=8507ef6395ab7f823a085dda2bdae4040fd6a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:0b:ad:88:e9:39:5b:17:c9:22:c4:aa:f6:
15:02:01:ac:21:1e:1d:69:2f:6f:89:f7:c1:1d:17:
8f:6a:cb:be:97:39:2a:27:44:94:71:6d:67:d9:a0:
2f:05:9d:34:13:b3:ac:05:0d:77:db:04:8c:2d:49:
81:31:10:58:9b:4f:33:83:7c:1e:62:37:36:a5:43:
d7:5b:21:e0:f2:d4:25:5d:4d:07:52:4a:25:7e:c4:
6f:d4:f0:d9:3e:c6:89:2e:7f:4b:1d:e6:48:93:16:
8a:5b:77:64:54:c8:3c:e8:45:9a:52:cd:6b:59:d5:
1c:7e:eb:da:58:65:b6:40:7c:34:fa:f9:b5:53:5d:
56:4f:c6:64:15:ab:ec:7f:43:55:39:19:f9:40:02:
d0:c4:5b:03:84:73:c3:20:22:df:c4:b2:10:81:65:
d2:2b:72:b6:a8:61:a9:e0:60:74:02:3d:43:43:c5:
c9:92:1f:51:c6:3e:01:53:6b:09:80:a4:65:94:02:
dd:9d:f0:60:25:ba:f9:ff:9e:cb:ba:80:17:b2:a0:
99:05:1a:b5:12:1a:ed:7d:6a:e2:51:9c:83:5f:36:
f8:11:ad:db:a5:47:53:93:8b:fa:21:bf:ee:14:18:
0a:cd:0e:aa:4e:15:0f:6c:78:6a:e1:90:17:6a:b8:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:EF:63:95:AB:7F:82:3A:08:5D:DA:2B:DA:E4:04:0F:D6:A9:20
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:39:62:7d:70:2a:09:e8:97:1e:b4:9c:2d:15:d3:73:70:
e0:43:79:f5:2a:82:95:2a:84:46:ed:ae:57:4a:7b:64:53:f0:
b3:69:d6:96:3a:d5:0e:35:56:64:26:da:a5:70:f5:85:b5:5c:
bc:8f:7a:47:ee:d0:99:77:0c:09:e6:67:b4:02:a3:10:0e:83:
b1:db:5b:11:51:b5:bf:7d:d5:3e:b3:92:88:a9:11:b1:87:37:
a9:f2:e9:82:a6:a9:e3:77:8b:fd:38:9e:53:5f:a4:60:55:dd:
7e:f4:a6:16:ff:c7:66:3c:c1:d0:c6:da:88:15:d4:88:96:67:
7c:a8:f9:0d:30:bb:db:91:48:c6:f2:76:45:0c:77:3e:56:80:
59:1d:d6:45:96:cd:0f:bb:0a:ba:2e:db:82:4b:80:c3:85:02:
29:83:34:1e:ca:de:b1:65:73:03:f7:af:41:a3:82:62:c5:67:
67:f3:b6:02:c3:c8:b3:df:66:4a:e2:ee:2c:21:08:d6:62:2f:
a3:f1:09:30:65:97:df:b3:98:c3:11:89:b2:84:47:b1:4c:20:
a0:e7:8c:75:99:28:f7:c5:66:da:27:23:be:76:2f:02:b3:ce:
fe:a6:9d:b1:57:24:ae:89:b6:35:74:c2:51:cd:6c:13:09:ac:
91:92:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:30 2025 by rpki-client