Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: K8gy6g5yIbUw7+Faxcm+qtW8kKeKiE3WzrO7AqAlgDY=
Subject key identifier: 04:AA:C2:73:D5:1D:C0:B3:13:A2:43:21:9B:F7:ED:50:AA:0A:F2:38
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 01959073C5FEBC01F0406E6C824F08C029AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 17:01:01 +0000
Manifest this update: Thu 13 Mar 2025 17:01:01 +0000
Manifest next update: Fri 14 Mar 2025 17:01:01 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: uMbc8ecowXc2/TJmW8HpqbneKDkfochL7AaU7+h/Vd0=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:c5:fe:bc:01:f0:40:6e:6c:82:4f:08:c0:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Mar 13 17:01:01 2025 GMT
Not After : Mar 14 17:01:01 2025 GMT
Subject: CN=04aac273d51dc0b313a243219bf7ed50aa0af238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:b7:28:66:56:0e:8d:62:0e:21:6d:70:6c:
12:ec:00:85:b6:ed:5c:9a:07:2f:f4:c3:4c:30:fe:
33:c9:f7:d8:f4:2d:24:38:bf:a1:33:d8:27:7b:8b:
23:74:68:21:fe:00:d8:b3:c6:73:53:96:4c:e5:86:
be:7b:b1:69:e2:8f:8a:54:76:20:15:58:11:40:06:
39:c3:42:4b:44:fd:b4:f4:0b:40:d5:0a:29:4f:35:
17:96:a4:6b:cd:17:9b:7c:2c:0b:54:5c:ef:43:d9:
b6:9d:70:1a:1b:2a:05:85:67:4d:fc:1c:cb:09:32:
a1:51:5c:dd:8b:83:d1:36:fb:dd:4f:54:31:4a:f8:
6a:f6:33:71:68:c8:fe:3e:7d:87:a2:16:ef:8e:70:
07:59:c6:f3:e2:bf:d0:6f:7e:61:80:55:b1:f0:57:
30:c9:9f:b4:0b:7b:2b:04:85:83:47:95:0f:83:8c:
a4:c2:62:c6:fd:a6:0e:20:59:49:8c:ea:be:c6:10:
fe:20:3f:e1:02:fc:c2:e6:5e:07:ca:45:c9:d5:26:
47:9f:b9:74:8e:0c:da:e0:77:c6:8f:3d:bc:e1:8b:
1e:c5:5a:48:b8:f4:ac:da:78:66:15:a0:2d:e7:0e:
98:34:c8:51:52:a6:91:d1:0f:d6:ef:20:64:71:b6:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:C2:73:D5:1D:C0:B3:13:A2:43:21:9B:F7:ED:50:AA:0A:F2:38
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:46:6b:e6:eb:5c:e7:46:93:a7:39:18:32:fb:77:a5:37:e5:
9d:b9:46:e4:a5:9a:00:e9:f5:d2:f6:cb:6b:66:f8:fe:56:87:
29:c4:4c:e3:24:d9:73:12:30:e5:ef:a8:1b:c5:3e:8c:2e:26:
03:84:6d:53:cb:f1:08:e8:1e:9f:b9:be:cd:ba:c8:b7:7e:e5:
31:d1:55:1c:a7:0b:ff:4e:10:c7:87:54:1a:4b:21:67:93:e0:
55:1a:db:6f:e4:5a:79:83:97:ea:04:b1:51:5a:c8:86:7c:88:
46:65:1e:0b:30:63:48:5f:85:b9:06:e4:64:04:1d:f1:26:4f:
95:f6:9a:22:4a:00:07:b4:5d:b7:f4:dc:e8:e6:75:9a:34:4c:
5a:da:bc:9c:58:9c:2e:d7:fc:e2:38:e3:ab:e5:c2:52:11:fe:
69:f5:15:87:26:38:55:de:74:fa:69:c9:b8:38:22:fe:ff:51:
0e:6b:69:61:ef:c9:ad:7b:63:30:f7:e4:0e:bd:10:01:2f:08:
ad:31:a1:76:e9:8a:bc:ce:ff:29:94:27:da:0a:93:b6:08:95:
ab:9f:0a:c5:10:c3:f0:b5:95:2b:df:0b:74:1e:48:0c:4b:b1:
35:34:1a:31:30:97:35:4c:d3:e0:fd:a3:c6:f0:95:bb:67:0e:
26:bf:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:25 2025 by rpki-client