Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: PggTb2Sj2NhLHHWKqBzb+FsChthNj97xV0+YQ3xUecw=
Subject key identifier: 56:3E:D6:20:7E:E4:DB:7C:89:5F:3B:8E:D1:C1:52:E5:FC:13:B8:06
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 01963D2F444CF730393147D277EC461D2E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 06:00:29 +0000
Manifest this update: Wed 16 Apr 2025 06:00:29 +0000
Manifest next update: Thu 17 Apr 2025 06:00:29 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: UX5jfuTxzZM4R9UVaOhcd8aoSCPzLs59OnV3F5A+bmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2f:44:4c:f7:30:39:31:47:d2:77:ec:46:1d:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Apr 16 06:00:29 2025 GMT
Not After : Apr 17 06:00:29 2025 GMT
Subject: CN=563ed6207ee4db7c895f3b8ed1c152e5fc13b806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:19:75:a7:0c:78:2b:a1:02:39:e7:c5:ae:
4a:df:ca:77:90:9e:c4:8c:4e:b0:75:6f:0f:ff:07:
3d:ea:81:d9:b6:77:97:c8:b4:a7:bf:a7:7d:3e:f7:
34:fa:af:04:3a:e0:94:b9:ba:09:82:f8:73:41:78:
e5:2d:cd:c3:51:33:4f:35:94:e1:3e:69:d4:6a:da:
f6:57:fc:ed:24:2b:28:d1:27:78:fd:ae:c7:79:c9:
9c:06:8e:fb:59:4a:65:5b:20:a6:11:27:c1:d5:de:
4f:9f:c6:65:0f:54:d9:ba:38:eb:7c:48:4c:7e:2a:
a3:03:d1:1b:90:6e:2a:92:8b:9a:35:ed:e9:bb:55:
3f:88:d1:c7:51:80:95:02:0b:82:b4:bd:9b:e6:d3:
29:b4:89:e9:7c:35:a1:86:b1:37:70:32:51:76:ba:
00:42:46:f1:61:c3:4f:9f:97:21:de:21:78:5f:3f:
8e:52:e9:9e:e2:3f:83:e6:4c:07:19:c2:dc:19:2c:
fb:09:53:8e:61:3d:d0:27:52:0f:3f:4d:b9:e4:a0:
ea:a9:34:b5:fe:88:64:b1:8b:25:eb:11:c6:8e:f1:
e2:67:b2:9a:13:cf:21:2c:6c:a3:d3:c9:b5:c1:4e:
f9:d7:65:57:70:47:9d:30:0b:d6:29:35:28:06:a6:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:D6:20:7E:E4:DB:7C:89:5F:3B:8E:D1:C1:52:E5:FC:13:B8:06
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:af:eb:d1:09:50:78:db:c6:a7:a9:1b:4b:a8:5f:cd:d2:46:
db:88:fe:03:c2:2e:0b:c6:27:87:9e:cd:48:fe:dd:ec:fc:a9:
da:d4:2b:12:b3:f0:dd:54:07:d8:21:48:88:bc:f1:0b:a9:39:
37:d3:ab:68:7f:fa:47:75:66:38:f8:08:69:85:8f:ee:1e:f5:
72:e6:80:f7:52:e2:e2:09:c9:d6:5e:c6:7b:5c:37:e2:6f:62:
5f:75:3e:7f:54:f6:47:b9:f2:54:16:cb:4e:28:a3:3a:16:ed:
59:ae:f6:5e:df:b3:e5:52:b5:37:c7:6b:b1:52:71:09:2a:5c:
81:b3:18:d4:1a:57:27:8f:b6:71:86:0e:d2:6f:a2:13:94:5e:
96:95:57:70:a9:8d:fd:34:e6:05:b1:71:94:56:27:49:c4:a0:
7e:c7:68:c4:e9:18:fb:45:b5:4a:cb:94:70:27:56:cf:10:c4:
19:a2:1c:fe:04:0c:fd:02:6c:31:eb:0b:a5:b0:4e:16:e3:49:
b6:3d:21:27:fe:01:44:a3:30:aa:0c:07:45:f2:22:d9:23:0a:
59:55:df:fd:73:65:1e:bc:d2:65:24:39:09:1d:72:f8:0b:33:
fd:63:66:85:ca:d1:cb:3a:e8:aa:4f:13:42:a2:e2:4e:6a:32:
7b:11:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:05:47 2025 by rpki-client