Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: CTaGwtOE2uKBqP9i5unuFtWuJASjAsYcPCmrTFw6vls=
Subject key identifier: 97:55:3A:6B:BE:B8:45:D1:5B:1B:F4:C1:14:62:23:11:33:CE:A0:9A
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 019610FC014980FAB04F2692AD91BAA8F80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 16:01:12 +0000
Manifest this update: Mon 07 Apr 2025 16:01:12 +0000
Manifest next update: Tue 08 Apr 2025 16:01:12 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: jmJtRtjqyYt/KDl0SdsDRBJx2Hz+ZbEdzSwG0NIsClU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:01:49:80:fa:b0:4f:26:92:ad:91:ba:a8:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Apr 7 16:01:12 2025 GMT
Not After : Apr 8 16:01:12 2025 GMT
Subject: CN=97553a6bbeb845d15b1bf4c11462231133cea09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:6a:97:5a:5a:e3:20:6d:ff:a1:39:a9:b1:
2f:a5:a6:39:76:8f:b5:78:2f:16:cb:fe:f2:1d:bf:
23:e3:72:2f:fb:eb:14:4f:63:c8:d4:ca:de:d3:db:
41:4e:11:98:e6:85:6d:39:f4:9b:67:99:ff:f6:2e:
ca:af:c6:6e:76:4a:9d:23:46:dd:51:39:8a:e7:48:
3f:f7:75:dc:6b:82:fa:e3:79:3b:50:75:4d:dc:3e:
5e:eb:ef:92:60:cb:73:d0:48:d2:48:d3:44:c3:58:
01:a2:9e:b2:ea:f3:82:12:f7:4a:63:5f:f3:bb:c0:
68:67:21:7e:72:14:10:65:d5:43:5d:49:c6:7a:58:
3e:ce:6d:e1:01:5e:9b:87:9e:41:f4:79:74:e0:1c:
ae:04:d3:d1:f7:20:be:0a:74:a0:94:ba:eb:ce:40:
ca:1d:4a:f6:b3:fa:c6:08:ca:39:5c:76:ee:1c:23:
0f:7b:4d:45:31:58:97:cb:23:08:da:bf:43:52:32:
d3:58:ea:08:86:11:df:c3:f8:d3:97:25:11:3a:d9:
df:aa:ae:c8:d5:b5:ff:a7:7c:29:53:e0:ba:93:fe:
d6:bf:31:42:34:cd:06:68:67:43:96:6b:2b:97:38:
90:87:6a:19:3d:51:e1:19:50:6b:33:4c:8b:af:1e:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:55:3A:6B:BE:B8:45:D1:5B:1B:F4:C1:14:62:23:11:33:CE:A0:9A
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:08:10:e2:b3:05:1e:5e:07:d1:50:d2:bd:2c:d0:d8:5e:5b:
75:fc:51:af:b7:90:f2:c1:b7:09:73:dc:7d:63:83:90:9e:76:
56:09:96:6e:92:2d:12:2c:af:a8:83:a7:e1:d5:37:5f:fd:a2:
ec:71:a8:ab:0b:0e:e1:67:bb:3e:0a:a4:84:fa:a9:1a:5e:88:
1a:cb:05:52:9f:b6:c3:7a:89:fb:5c:0d:e6:7c:a9:ed:e9:8a:
e0:f6:22:7a:a1:eb:bd:4f:c2:8b:72:6c:7a:a9:88:da:2c:bb:
9f:0e:2e:74:8b:13:42:9f:73:93:92:ec:3b:72:3e:c1:ef:5d:
18:20:a1:99:0d:8b:d8:d0:dc:33:fb:f3:49:4c:ba:db:48:95:
50:41:be:7c:d8:41:f3:d1:ae:f3:a9:d8:a3:4a:20:d9:5b:be:
c5:53:87:5b:00:46:c3:91:08:ce:76:a1:6a:8c:81:24:c5:c3:
10:b8:0e:6b:b0:70:bc:cf:c4:73:ec:cb:3a:15:40:e5:d2:15:
d9:62:34:ee:07:bb:b4:f5:53:ac:18:23:3c:56:11:f7:69:e1:
c4:20:09:c6:4d:52:90:91:2f:c6:29:e4:95:4c:18:e1:72:40:
03:a5:97:06:9f:91:62:92:c9:8f:42:70:32:5f:f8:37:03:e8:
5f:d9:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:26 2025 by rpki-client