Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: vFcAwnUNW+YHnbtTTfNzzki28wDOBlezeV7WWvGIYdk=
Subject key identifier: 03:B7:38:2F:C7:AF:06:48:5A:B2:7C:0E:C2:74:12:07:7C:04:C4:13
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 01962B29CF89E49E0E096589F94451DC8928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 18:01:22 +0000
Manifest this update: Sat 12 Apr 2025 18:01:22 +0000
Manifest next update: Sun 13 Apr 2025 18:01:22 +0000
Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: zKBRA7su4PPPO7D+ZUBz1CBmq4NV2Oc68fQsK+tNihA=)
2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:cf:89:e4:9e:0e:09:65:89:f9:44:51:dc:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Apr 12 18:01:22 2025 GMT
Not After : Apr 13 18:01:22 2025 GMT
Subject: CN=03b7382fc7af06485ab27c0ec27412077c04c413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:f1:6b:c5:5c:cb:b0:31:48:de:ff:62:81:
70:e9:70:23:2b:fc:3a:bd:88:25:df:1e:58:d4:8d:
e1:13:42:dd:45:1b:e4:f7:e4:fc:82:1f:2b:59:74:
d6:f6:8d:cd:29:8b:90:11:67:70:b2:c5:aa:3b:22:
ca:e0:b1:b7:57:dd:ba:4d:19:18:89:46:fd:3b:1a:
e1:6f:43:a7:97:08:ad:aa:86:51:28:d6:74:4f:35:
20:16:7d:d9:51:74:4c:fd:fa:36:af:e6:66:5c:a9:
e0:62:f1:49:b1:d2:9a:4d:a6:e4:a4:88:35:7d:e9:
bb:68:60:a1:b7:b8:b2:14:79:b6:ab:6a:59:4e:70:
1e:f9:01:f5:18:d5:75:12:89:32:2b:bf:43:4b:4c:
2d:81:d0:e0:d8:bd:b5:39:5b:df:17:eb:1c:64:6f:
70:4a:f4:d5:d4:1a:7f:a3:41:6d:69:ac:ef:f4:48:
08:7f:46:1d:5c:58:6e:6f:16:ed:dc:f1:ba:7c:41:
f3:96:36:62:01:a2:08:55:07:db:fd:4b:eb:df:7e:
59:52:c2:db:17:98:60:32:3f:1c:14:79:5f:16:b7:
3d:e7:5f:c7:1a:ef:07:e0:d2:93:ed:2d:d5:7c:30:
7b:84:6b:a3:a7:c9:c9:4e:52:9b:ba:cc:f2:31:4c:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:38:2F:C7:AF:06:48:5A:B2:7C:0E:C2:74:12:07:7C:04:C4:13
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:80:40:b1:f1:a3:b6:10:08:7c:0a:b6:87:eb:93:2d:95:c0:
30:fc:6e:9b:b6:31:43:bc:cc:45:16:73:d0:71:9e:4d:5e:16:
97:b6:00:18:4b:61:9d:eb:5d:93:db:0b:b0:8a:3a:87:92:b9:
bb:aa:cc:4a:fe:81:90:07:ee:4a:ba:e9:68:2b:b1:34:53:f5:
be:08:75:62:8b:44:9c:64:71:8a:54:11:c9:73:da:e0:71:e9:
47:00:ff:fe:2f:72:5a:2e:11:81:55:9a:05:78:5d:ba:24:2d:
9f:69:70:30:ff:34:87:e2:92:61:7c:ec:32:c5:6f:9b:c3:08:
a1:20:95:e0:a9:28:46:34:28:2f:e6:97:2d:d3:21:43:cb:f7:
52:23:58:97:cf:02:48:85:05:05:40:67:69:b0:d7:46:3c:e8:
bf:05:9a:f2:08:5d:08:f9:9d:8c:dc:04:26:68:f5:c4:82:d0:
10:ca:a9:98:cb:ed:c1:b0:56:4f:16:10:6c:28:1a:69:3e:76:
d7:08:3a:65:86:68:42:77:00:e2:9b:6e:1e:f7:b5:4d:ee:2f:
8c:e8:2a:9a:02:8a:c4:35:02:30:cc:7a:00:45:c3:a1:91:6c:
ae:c9:cb:f7:b4:e0:8f:30:3c:be:7f:5d:b1:f6:b5:b7:7d:5f:
4e:73:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:00:30 2025 by rpki-client