Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: cZHszkLhH9pSc3XlpeGFMnh3Fq8m+vZsc+unKPZArkk=
Subject key identifier: 90:C8:92:BA:3C:95:BF:D7:98:5B:C4:E5:E7:F2:0B:4B:9A:6E:60:E1
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 01965C15276D00F0CB1F1BEC429485435DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 14FD
Signing time: Tue 22 Apr 2025 06:00:12 +0000
Manifest this update: Tue 22 Apr 2025 06:00:12 +0000
Manifest next update: Wed 23 Apr 2025 06:00:12 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: lwMyI3tRBPvsqCfrd8qZFz23ivgyy7MffMsbv73wz4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:27:6d:00:f0:cb:1f:1b:ec:42:94:85:43:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Apr 22 06:00:12 2025 GMT
Not After : Apr 23 06:00:12 2025 GMT
Subject: CN=90c892ba3c95bfd7985bc4e5e7f20b4b9a6e60e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:93:a8:cd:08:da:ff:de:90:e6:2e:3b:ff:
e1:7a:e3:d6:ec:b8:34:a1:1c:b6:dc:02:0e:66:06:
b3:58:84:6c:4f:c6:36:7d:ac:8d:fd:95:af:c2:bf:
a3:d0:77:6b:1a:40:38:4e:39:af:11:5a:24:cd:18:
e1:5b:e5:71:0d:e2:ed:ec:0b:a2:ea:47:b7:15:df:
5c:13:3a:7c:06:0c:3c:8f:b1:1e:02:f4:6c:65:83:
84:d7:aa:da:92:c7:91:8e:5f:dd:69:98:48:9d:09:
d6:5e:1a:69:a2:c8:b7:09:04:0e:5f:b0:0c:8b:06:
6b:99:d1:32:8d:4a:a7:3c:af:e5:89:7b:5a:cc:4c:
9f:d0:bf:51:9c:09:74:ac:21:e5:93:06:bb:ee:e9:
d1:23:97:cd:0b:ef:7a:c5:b0:b2:3d:d7:b4:74:c0:
29:fd:ad:7b:a9:66:ed:41:20:b6:68:04:ed:f0:db:
49:8b:5d:59:c1:02:e4:0c:ad:f4:38:37:85:0f:f2:
aa:ca:42:87:73:6b:a1:f5:18:b9:3d:37:c7:16:a1:
42:75:8e:bf:0f:a9:e0:df:84:c3:f8:21:3f:0a:b5:
60:f3:0a:28:85:29:c0:55:cf:38:e6:a2:7b:e7:bb:
c4:9d:9d:ce:8f:c2:7f:66:f7:7d:c3:e3:0a:11:10:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:92:BA:3C:95:BF:D7:98:5B:C4:E5:E7:F2:0B:4B:9A:6E:60:E1
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:23:d5:58:d7:a7:3e:2c:d7:ab:90:a0:44:d6:93:e2:87:dc:
60:e0:7a:8b:4c:ee:f5:ec:ee:9e:24:47:f5:3d:fe:7c:bc:de:
53:48:43:f5:39:07:32:0c:84:63:e6:38:70:45:08:9b:df:51:
dd:0d:dc:16:3b:c0:2a:01:cb:3f:13:42:67:05:53:66:11:13:
ff:fb:49:94:97:0d:69:a9:ac:d2:7a:54:3d:22:dc:17:35:7c:
b9:45:82:ca:2d:44:60:33:dd:b0:93:30:75:2d:02:ec:75:01:
ce:b8:df:97:46:18:8d:b9:b6:e1:2f:94:98:24:78:89:cd:95:
35:31:75:66:ad:60:9e:0b:41:a7:ed:d2:11:c4:fc:79:96:75:
a2:f7:2a:f1:89:ae:1f:52:ab:6a:59:c2:30:a5:4d:dd:c9:10:
ef:1c:76:b0:eb:19:bb:54:7c:6e:8b:51:fd:4f:da:2b:03:ff:
86:28:55:f9:fc:f4:16:4f:c0:d7:42:28:47:ac:6b:b9:2a:d8:
e2:d3:1d:91:96:33:ad:a3:74:5e:48:6a:53:e4:53:63:32:b4:
0a:02:cd:8f:69:29:08:44:f4:c6:5a:aa:44:74:bb:c6:87:ef:
61:4b:4c:59:38:00:7a:0c:3a:be:7a:d2:72:36:a4:99:04:64:
e7:6d:e8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:14:08 2025 by rpki-client