Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier: o6O2Ns5lrdrAH4Ar3B6XZ/7bAAQc4ckQ4h1fIXI1lfg=
Subject key identifier: 1D:84:EF:CC:E0:13:BB:C1:D7:77:56:6E:57:97:67:12:C0:7B:7B:D4
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial: 019650B6A78E0FF2F2FB37AD6A3F190A02E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number: 014C
Signing time: Sun 20 Apr 2025 01:01:09 +0000
Manifest this update: Sun 20 Apr 2025 01:01:09 +0000
Manifest next update: Mon 21 Apr 2025 01:01:09 +0000
Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: g1DkRJ/U54iGCgx2hHGJ5UxlbICgKzGUtfO/VcDA4t0=)
2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:a7:8e:0f:f2:f2:fb:37:ad:6a:3f:19:0a:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Validity
Not Before: Apr 20 01:01:09 2025 GMT
Not After : Apr 21 01:01:09 2025 GMT
Subject: CN=1d84efcce013bbc1d777566e57976712c07b7bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:5d:59:39:10:50:d9:e8:e3:df:f0:ae:41:
5a:cb:51:ea:9e:bd:ba:13:af:b2:f2:ec:14:47:8e:
35:28:35:b6:ef:68:ff:db:43:54:9f:fe:97:4d:5f:
f6:f8:28:c4:11:d7:18:3d:88:a8:17:79:a0:61:2f:
4c:16:c5:5b:f1:34:2d:85:f4:55:9f:e2:d2:b0:1f:
f3:db:5c:dc:1d:5d:f2:23:3c:32:f0:fe:6f:2c:82:
bc:10:a3:8e:fe:55:22:fd:71:ff:a6:30:5a:1c:5c:
6a:d1:f6:c1:3d:a0:91:70:1f:eb:a6:2e:6e:79:2c:
c1:d2:06:8d:c3:c4:5a:b2:ff:78:de:09:89:75:ef:
ca:44:c6:03:66:bb:d5:18:fb:8d:82:3f:4f:83:47:
35:e5:61:72:36:d4:29:9a:58:df:8a:2f:bb:b0:7b:
21:ad:0e:0a:20:f9:34:0e:21:2d:84:a0:2c:f3:a4:
0f:21:46:0d:b8:a5:68:05:c7:f3:ed:7b:15:10:e4:
b1:bf:a8:8c:7c:f3:6d:88:c6:9e:1c:a4:26:51:2e:
c0:ef:61:78:e6:4f:d6:f3:03:15:b4:c8:09:e6:86:
2d:ee:0a:3b:43:9a:70:f5:af:5c:99:20:85:a0:1e:
23:b3:d0:ea:8e:55:dd:89:23:c6:8e:d4:4d:5c:c1:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:EF:CC:E0:13:BB:C1:D7:77:56:6E:57:97:67:12:C0:7B:7B:D4
X509v3 Authority Key Identifier:
keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e4:91:4e:40:26:de:71:25:a8:be:e6:33:87:75:f0:e7:fd:
48:a5:85:bc:8a:ef:c8:a0:12:31:a9:fd:91:b8:f1:d8:8e:2c:
3b:c4:63:36:be:e0:20:b9:4b:94:05:a5:79:c1:4e:55:af:47:
c5:28:9e:9e:b9:bd:93:9f:5a:32:8d:15:5c:55:d0:13:96:45:
88:a2:36:8c:2d:04:8b:c6:3a:b9:6b:a0:f7:af:86:55:83:e7:
7e:37:cd:f6:ec:94:ea:01:be:5e:dd:41:79:b9:f9:f5:9d:9f:
1d:e2:41:c0:42:5a:86:34:c2:6e:3b:b7:77:5f:12:f5:92:5f:
4c:48:66:24:79:dd:5a:00:c0:90:9b:4b:1a:07:1c:46:88:75:
23:2e:12:44:29:90:83:28:b1:f2:d1:a8:d9:81:67:1e:50:f3:
68:79:7c:17:68:19:d3:fe:44:d9:81:3f:46:7d:d8:72:5b:b4:
aa:3b:37:da:50:c7:1d:cd:e6:fe:c0:21:df:3e:1d:c1:cf:e2:
b9:17:ed:2b:ed:79:de:01:97:5e:bf:58:59:c1:b5:a3:77:4f:
ce:76:99:6b:fa:6a:96:a1:a7:1b:52:53:8c:74:71:96:e9:35:
2e:a3:f5:84:ce:3d:ed:0a:98:1f:7a:90:cf:2d:b9:e5:56:1c:
ef:a9:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:12 2025 by rpki-client