Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: SxSUUjrFxObt46lxyyQ2BDskdA1D2dgVcdyh+QI98NY=
Subject key identifier: AA:2F:D6:0B:14:46:F9:EA:B0:60:B7:F6:6D:03:3F:78:7E:46:C8:88
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 01964FDA6E448BC88B2E987706B29CCD367A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0201
Signing time: Sat 19 Apr 2025 21:00:37 +0000
Manifest this update: Sat 19 Apr 2025 21:00:37 +0000
Manifest next update: Sun 20 Apr 2025 21:00:37 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: QHOmflxiX/OuVd6JP2dmCPG2ZN+/FhU9L1TOWgL/iI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:6e:44:8b:c8:8b:2e:98:77:06:b2:9c:cd:36:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Apr 19 21:00:37 2025 GMT
Not After : Apr 20 21:00:37 2025 GMT
Subject: CN=aa2fd60b1446f9eab060b7f66d033f787e46c888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:81:dd:f8:3c:d1:a9:90:93:98:46:65:9c:
d3:e3:ca:5d:e8:2d:66:34:a7:7a:42:28:47:56:14:
bd:89:1e:0c:1f:90:dd:86:55:51:40:1c:7f:76:b1:
2a:a3:22:e3:d8:5d:2b:43:f4:a2:a5:16:f5:30:4e:
58:cc:06:e5:00:e2:05:2f:48:9c:d3:29:85:be:a3:
0c:36:64:23:d7:95:b6:c0:d4:d0:31:52:41:5b:2c:
4e:1c:c1:5b:85:b3:2b:70:b5:ef:f6:08:97:ab:41:
be:4c:3c:b0:3b:ec:2c:20:4f:a8:b4:57:1b:07:a6:
73:fd:aa:31:13:ff:97:9c:3f:20:56:1d:a8:35:2f:
21:d0:8d:6f:26:30:69:b2:27:26:5a:14:af:4a:f7:
ce:c6:7d:3d:30:ce:8b:60:e4:d6:7e:36:64:29:db:
8d:06:11:39:94:4b:3b:91:69:68:02:1e:c1:23:a6:
03:a6:8b:4f:ed:98:48:a8:66:c6:9d:b1:17:68:34:
ae:84:95:a2:9e:c6:6f:dc:e1:a2:e6:b5:b7:8c:06:
9f:b9:f9:e5:db:6f:2b:15:3f:94:f6:da:26:5a:fe:
21:06:3e:5d:ec:e3:e6:38:ee:7e:35:ed:03:55:5f:
6a:fc:fe:12:b2:ec:9f:75:1d:f2:e9:b4:93:b8:b3:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:D6:0B:14:46:F9:EA:B0:60:B7:F6:6D:03:3F:78:7E:46:C8:88
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:19:ed:3f:3a:32:bf:bc:7d:e7:e3:c1:75:29:fe:cf:b2:50:
04:6c:cc:3a:85:4b:4e:d2:5b:be:9f:a7:b5:50:2a:b1:7e:24:
4b:cf:74:c2:c0:aa:05:e5:7e:91:52:63:27:0b:19:04:29:23:
79:5e:9d:4f:af:86:27:f8:67:71:c6:e3:7a:e4:09:11:6a:59:
af:92:1f:11:c9:83:48:d7:5b:7d:53:af:91:18:0e:7e:0c:02:
2d:c2:12:83:41:60:bb:ae:cb:65:81:a7:ea:f2:73:ce:54:4c:
5d:14:d8:b8:0f:90:82:0b:bb:fe:a1:28:b0:8c:7e:4d:12:bc:
4d:c9:f5:1b:5e:3a:00:4d:2a:aa:c0:1c:7b:98:47:11:16:0e:
b5:e0:5a:06:9a:51:64:62:ee:95:ef:71:33:75:dd:c3:e1:f1:
c8:3d:a2:21:24:d2:2d:31:09:67:d6:c5:c5:42:c2:99:cb:64:
98:36:e6:12:55:d9:bd:a7:ff:4e:d0:92:91:b0:88:61:05:5a:
e6:84:93:85:85:ff:c5:10:a2:eb:1e:e0:e5:5d:bf:08:b4:03:
1b:e0:f7:76:31:2c:a5:57:14:70:f2:5c:b0:2c:b8:59:0b:8a:
c0:1a:4e:ee:66:b2:4a:94:12:51:b3:3e:a3:23:8d:af:ba:c9:
9f:26:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:43:52 2025 by rpki-client