Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: LwxUc3HEkZvx+KCUxljuGy+Hh7qPm/MRiK4S+n/rrgw=
Subject key identifier: 4A:9A:65:F1:95:99:CE:60:F0:CA:FF:3B:52:6D:6B:7B:A6:5B:8A:B3
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 0196440D344A169A83504FCE3FF0A4E67772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 07FF
Signing time: Thu 17 Apr 2025 14:00:38 +0000
Manifest this update: Thu 17 Apr 2025 14:00:38 +0000
Manifest next update: Fri 18 Apr 2025 14:00:38 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: JeMuwt08MPFwxNzTtoqQr85WA3ieVAUeZNvSw+4Djdk=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:34:4a:16:9a:83:50:4f:ce:3f:f0:a4:e6:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Apr 17 14:00:38 2025 GMT
Not After : Apr 18 14:00:38 2025 GMT
Subject: CN=4a9a65f19599ce60f0caff3b526d6b7ba65b8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:9d:72:dd:50:cd:08:35:ff:ed:dd:36:a1:
12:06:78:8c:40:81:66:57:5f:ef:ae:ea:4f:02:e4:
a8:40:ba:37:bc:37:e0:44:0c:96:00:e4:83:c1:80:
77:91:0a:91:fd:30:85:4b:90:7f:48:d7:d8:b8:75:
f8:26:fa:0d:6f:a1:6b:9a:9e:99:69:8f:c9:d2:d7:
ef:49:25:b5:58:49:ed:aa:c3:d7:d9:30:bc:04:31:
68:c3:b1:95:86:bc:98:94:b1:aa:eb:33:3e:da:7e:
88:f1:ef:3e:22:8d:f9:1b:14:dd:85:f9:b9:11:bb:
da:a5:ca:b5:26:07:b8:3d:e0:f5:e4:72:5a:6d:79:
16:75:ff:a6:27:48:7f:ab:75:2c:d7:ba:3e:b2:e0:
88:12:1e:6d:b9:f8:24:f4:12:0c:15:60:3e:68:f0:
66:5a:05:66:9e:c4:cc:59:ce:98:ec:95:bc:b8:10:
6e:fe:77:d2:17:fa:5b:0b:50:13:59:b2:02:8e:cc:
12:c6:68:38:a2:80:a2:49:f0:3c:78:32:18:1a:7f:
4f:aa:04:9e:c9:5b:83:10:65:aa:e1:5f:0d:47:e5:
a9:4e:74:2e:b2:91:5e:76:b6:71:2d:e8:ba:a8:dd:
a9:89:36:6c:26:aa:a8:f9:d5:2e:05:ad:ec:c4:c8:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:65:F1:95:99:CE:60:F0:CA:FF:3B:52:6D:6B:7B:A6:5B:8A:B3
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:d4:a8:1d:46:2b:80:15:d0:ae:c0:b1:87:a0:22:87:7b:
8a:7e:47:ce:1c:2c:b4:17:21:2b:6f:d4:d6:b9:23:36:7b:69:
3c:47:80:b5:c1:88:0c:52:db:60:1e:16:54:3f:69:cc:00:33:
4b:55:01:6a:aa:22:ea:3f:89:b3:f1:47:ed:79:84:9b:69:5c:
7f:34:77:7f:35:33:e3:41:c1:36:36:f9:e0:e9:f5:4a:e3:84:
3c:fa:72:74:94:7b:5c:80:7f:cd:f7:ea:40:11:ff:ab:87:62:
84:1d:e3:3b:ab:ec:f8:bd:28:da:92:ec:6a:13:bb:55:51:40:
80:7d:99:af:69:c5:6d:f7:af:da:a3:aa:b4:6d:e2:02:61:0b:
08:3b:b4:64:8d:fd:82:da:19:d8:1d:8d:ff:2a:5c:27:b0:a0:
5e:0d:f4:2e:5d:6e:35:a3:94:f0:5e:ea:83:d7:a5:5b:3d:06:
a9:8a:86:4a:e3:04:02:ad:aa:09:cd:45:a0:f1:7e:70:b1:b8:
c2:e4:0b:a5:6f:3a:c8:2d:77:c7:29:47:80:9b:44:5e:0f:ce:
bb:fa:e1:c3:6b:30:b6:63:e3:ba:95:02:28:ce:a9:c7:09:b7:
7a:00:6b:7b:d6:fc:06:c5:77:34:7c:01:9d:ef:c2:41:59:be:
99:72:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:58:43 2025 by rpki-client