Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: mlsjvDw9Ea2fp+kIDywZusYOV4wp74Hd0kos/Q7Yplw=
Subject key identifier: DC:CC:F5:46:7F:04:EF:4F:5D:BF:98:F1:89:40:33:9A:FB:1B:7B:9F
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 0196515BC20DA05F0AD9478CE2B08200B5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0D82
Signing time: Sun 20 Apr 2025 04:01:29 +0000
Manifest this update: Sun 20 Apr 2025 04:01:29 +0000
Manifest next update: Mon 21 Apr 2025 04:01:29 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: e5/1DYGupKjbI8voftnhcDehsC7iqZH4EIAhLWtdeOM=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:c2:0d:a0:5f:0a:d9:47:8c:e2:b0:82:00:b5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Apr 20 04:01:29 2025 GMT
Not After : Apr 21 04:01:29 2025 GMT
Subject: CN=dcccf5467f04ef4f5dbf98f18940339afb1b7b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:a7:56:17:6a:a8:a8:be:7d:51:89:4c:66:
84:de:ad:36:5a:9f:5b:f9:cb:0c:91:b0:14:b0:55:
00:33:1b:73:6d:98:60:1e:22:88:fc:f4:11:b4:df:
dc:a2:9e:09:fb:36:aa:46:28:b8:fd:2b:ad:6b:2a:
fb:3b:5b:2b:8a:3d:35:e0:2e:6d:e8:9d:59:01:9f:
63:30:07:36:04:8e:e1:9f:cb:4f:93:ae:3e:eb:79:
63:a5:5a:d1:7d:2d:63:75:0a:ea:ec:cf:e6:6b:39:
5e:54:6a:1a:60:c6:17:3a:e9:8b:e4:a1:7b:b4:9d:
d1:86:9b:01:81:81:32:cb:b7:8d:6a:43:93:4c:30:
dd:66:da:38:55:4a:ca:0d:42:b4:0c:7b:ce:65:ce:
f7:1c:bb:18:75:5e:63:7f:13:31:0d:06:9a:42:e0:
4c:85:1c:5e:6c:57:a2:9f:b6:6c:8e:6f:10:5e:a1:
fa:f6:3a:3c:d6:f5:a3:6a:d2:de:e1:8b:e0:71:38:
c9:bf:4e:95:9c:95:bc:bf:38:65:09:a4:20:52:fa:
ab:20:41:92:bc:02:8e:2c:41:a1:f5:52:1c:b6:12:
44:49:5c:9c:38:d6:e8:95:8f:5a:a0:17:e1:ec:de:
a0:2e:d8:c7:b1:c3:da:06:b7:91:09:51:02:d7:f1:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:F5:46:7F:04:EF:4F:5D:BF:98:F1:89:40:33:9A:FB:1B:7B:9F
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ea:2a:60:8d:9c:4c:ae:5d:a0:50:3c:53:b8:b4:92:4b:6f:
35:85:3f:11:b8:a4:e2:3f:32:a1:0a:06:ec:97:a0:fc:95:b4:
43:84:5e:04:b5:52:1d:11:80:ac:7f:05:b4:d5:bb:26:47:58:
21:86:e4:32:4b:25:2b:27:0d:14:a2:c5:be:a0:cb:80:af:26:
90:1e:34:17:58:4a:b7:bc:5e:5a:ad:02:58:12:4a:a2:b0:00:
85:84:d1:6d:b7:c2:0c:6c:37:e2:66:6e:e8:f7:2a:06:77:6f:
85:b2:80:b6:88:38:53:3e:dc:dd:55:82:fa:a8:32:84:27:36:
39:5c:a2:14:92:19:57:8c:8c:84:73:aa:76:8d:30:2f:d4:51:
e5:d4:5f:d3:b2:4d:71:ee:37:28:c5:77:11:13:ca:00:63:48:
63:df:d4:f7:ea:28:3a:dc:84:56:a9:f3:a8:9a:79:f8:75:d5:
84:99:21:67:4a:98:41:da:77:4d:9a:42:9e:69:7e:6f:34:dc:
0b:33:35:38:c7:8b:fa:00:5a:6a:94:50:a0:17:ff:40:19:1b:
65:71:a0:aa:4e:ad:a5:18:9e:fd:80:78:e7:93:9a:c9:0f:e2:
2e:e5:45:90:5e:b1:49:d7:91:57:5d:4b:0e:6e:fd:f6:7c:d7:
a0:95:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:29 2025 by rpki-client