Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: e12bzZWlPTbSO973bB2U2YFaa7sSSl62EIvOtVrbaB8=
Subject key identifier: 07:B6:4E:E1:AA:A6:A0:2B:D1:95:D6:A2:1A:3B:B8:60:1F:14:7A:A4
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 019652002840BA6C4B68EEB3DC17A34A7B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 07:01:04 +0000
Manifest this update: Sun 20 Apr 2025 07:01:04 +0000
Manifest next update: Mon 21 Apr 2025 07:01:04 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: 5GJ6RU30jM6SqlY6wC3UR/luGowAkCI116Enj2fEaIY=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:28:40:ba:6c:4b:68:ee:b3:dc:17:a3:4a:7b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Apr 20 07:01:04 2025 GMT
Not After : Apr 21 07:01:04 2025 GMT
Subject: CN=07b64ee1aaa6a02bd195d6a21a3bb8601f147aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:b9:77:7f:26:b9:6b:90:1e:ff:f0:15:28:
a3:cd:a0:69:f8:78:c0:c8:c5:4e:64:54:af:20:b4:
3f:48:85:de:8e:e3:8b:4f:4e:b4:3c:1c:58:4c:53:
81:1f:2a:a5:30:57:34:4c:33:52:a6:69:28:96:27:
3a:19:e8:0a:f7:bb:e5:f1:73:46:34:eb:26:07:63:
80:1a:0a:5c:cb:38:8c:80:ea:66:96:88:aa:70:33:
66:95:25:d0:44:81:54:76:ed:b4:4a:bb:ff:69:9a:
64:ca:59:2b:36:d8:71:34:0e:e3:fb:34:97:7c:a6:
ac:7c:7d:1e:b4:d8:05:e2:1a:35:1a:22:41:9e:c9:
54:f9:7b:f5:07:9f:a1:4c:ad:f3:7a:a4:6f:61:e4:
ad:00:ef:24:17:c9:5b:d6:e0:c7:68:fc:e7:e6:ea:
0a:c8:61:39:7b:f2:2d:ca:36:7e:18:97:85:ee:b6:
ff:2e:a1:81:dc:a8:05:f7:10:04:83:5d:4f:81:75:
40:9f:d4:dd:e8:e7:a9:95:60:ef:84:da:f1:17:58:
f7:31:b9:49:f4:31:41:37:72:59:0c:59:14:2f:1b:
57:1c:bd:23:34:72:55:74:51:6e:01:42:67:7f:0b:
ca:14:9e:cf:71:6b:e3:53:84:69:4f:34:39:b3:eb:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B6:4E:E1:AA:A6:A0:2B:D1:95:D6:A2:1A:3B:B8:60:1F:14:7A:A4
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2f:77:85:05:8d:ce:fd:1a:f3:53:98:ff:35:75:d8:25:ab:
4c:66:7e:6c:2b:ae:36:5e:f2:6e:32:1d:df:37:8e:e6:d3:a3:
ac:cd:72:b4:83:55:09:5b:8c:3d:bb:40:d7:c1:de:c5:69:9f:
2c:01:9e:bb:f0:9c:a8:38:76:36:25:cd:59:c7:69:0e:f9:5d:
f8:59:2c:d1:6f:8c:26:93:7c:43:56:9c:4e:4c:e1:9e:d2:b6:
96:68:69:00:a4:b4:b9:b6:dd:e4:b2:55:a7:fe:04:b1:1f:ce:
fb:96:16:eb:55:02:3c:29:28:33:36:93:33:56:2d:ea:78:4a:
01:d6:50:3e:d0:80:35:59:a5:42:1f:6b:55:9f:c0:33:95:44:
d2:cd:26:75:dd:87:09:25:be:40:4f:75:f4:ad:b6:ce:70:1a:
d1:84:98:31:5a:e5:f7:42:6a:05:75:32:bd:c0:66:c1:c2:80:
fc:70:55:6d:88:8a:f8:e6:e4:1f:a5:44:68:57:3b:77:6b:02:
83:65:48:0d:ad:2c:64:51:a7:13:83:27:4e:2e:b6:06:cf:22:
88:6e:94:69:08:e6:ef:d8:22:2b:e5:c7:2d:3f:7f:63:ba:d2:
21:e2:73:91:93:a1:eb:41:7e:5e:dc:6c:51:8d:f9:7f:83:9a:
32:a6:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:41 2025 by rpki-client