Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: ucWKnDSvYLF8uEfyVo7h2dCBtUgnkFyAhCd7wHiBxRw=
Subject key identifier: ED:47:1E:B2:CC:E9:D5:AF:21:8D:25:CD:AA:AB:61:BC:A8:DF:B1:4C
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019618EC3B21F6D933E2BD0FBC8DD182C6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 049F
Signing time: Wed 09 Apr 2025 05:00:56 +0000
Manifest this update: Wed 09 Apr 2025 05:00:56 +0000
Manifest next update: Thu 10 Apr 2025 05:00:56 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: yCWOmGzwY6R9tyV02G/2xhbU7Ygp2f1VpHcMVudyzrE=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:ec:3b:21:f6:d9:33:e2:bd:0f:bc:8d:d1:82:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Apr 9 05:00:56 2025 GMT
Not After : Apr 10 05:00:56 2025 GMT
Subject: CN=ed471eb2cce9d5af218d25cdaaab61bca8dfb14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:f5:26:52:5b:37:f3:a7:02:a2:2f:e7:f7:
dc:b0:d6:8e:73:28:ea:d3:c1:76:81:0a:f1:2c:c3:
e0:26:49:7a:22:a3:50:09:68:22:98:62:10:07:68:
03:a0:f6:d0:61:f3:93:a7:7c:68:af:c4:07:1a:c4:
91:26:af:36:37:26:88:72:5e:3f:df:8a:c4:28:19:
92:e9:d0:53:68:26:09:01:d2:1c:f1:0b:e3:5e:fb:
8f:f0:7e:7d:46:82:32:f2:0b:d5:da:50:13:b5:c1:
ac:51:22:e0:b7:96:6c:a1:b3:f3:b3:29:76:f7:71:
94:1f:ba:41:3e:85:0d:db:84:e7:5a:f2:53:67:72:
95:bc:8e:f8:d2:6e:31:24:3b:c9:ce:f8:e0:96:10:
be:47:45:8e:1d:49:de:a6:62:fe:76:e0:e8:c9:f4:
f4:59:ba:67:ad:8c:50:4b:a1:78:12:26:7a:63:36:
67:c7:11:12:e5:d0:14:45:56:84:b8:f1:45:59:f1:
20:60:06:89:db:d0:5e:38:05:8d:af:b0:1c:21:da:
34:55:57:41:d7:34:37:0c:d6:15:d5:ae:70:8a:e3:
97:bc:be:ef:4b:7c:b5:7a:c4:2b:1d:cf:55:a5:c0:
78:c6:f9:48:b6:6d:0f:7d:31:34:ea:5d:47:a9:95:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:1E:B2:CC:E9:D5:AF:21:8D:25:CD:AA:AB:61:BC:A8:DF:B1:4C
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:69:73:91:ef:79:0b:ac:78:3e:0a:b8:04:fa:67:76:09:7f:
b0:58:a6:2d:03:81:c3:f0:be:e1:06:3a:1e:84:44:f5:c9:c4:
38:4b:27:8d:b4:a5:c2:f5:7f:fd:7f:c2:8a:15:14:9d:9f:d4:
ff:29:05:8f:cb:59:29:e0:50:a9:ca:d3:92:6a:c8:73:f7:a4:
64:e6:92:f4:1f:bb:4c:f6:f3:ea:1f:b2:a4:c9:a8:be:8f:e4:
e4:81:ee:83:c6:e6:92:a0:b0:fd:ce:c0:ea:36:36:22:24:5d:
53:9f:e2:bf:c7:3c:46:0a:3f:a6:f1:4c:c3:57:41:98:46:67:
da:3e:69:1c:1b:f7:b3:b6:f7:50:16:c9:6e:1a:f7:e4:0a:86:
65:05:d8:12:56:21:6e:4a:23:d5:98:8e:32:f7:cd:b1:1d:4d:
51:3e:bf:09:e3:14:e3:77:c0:49:c5:6a:8b:24:e3:c7:2c:6d:
ee:fb:4a:00:f0:02:19:44:77:05:e9:5b:6f:7f:c3:38:1f:e1:
04:79:ba:72:7c:87:e0:b5:09:20:8c:d0:3e:bc:f7:ab:71:c4:
6f:28:b5:b6:cb:20:27:c2:14:17:1c:6c:b5:f3:c9:0b:08:da:
5e:39:48:36:54:cc:9c:15:1b:6f:bf:5c:e6:79:f5:20:7b:f9:
db:92:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:14:12 2025 by rpki-client