Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: GEugcFlpvF0odkJU6L8eZalVufdSjQb1F0IUUK9ugtc=
Subject key identifier: 47:3D:04:C3:C2:99:6D:6E:A9:20:79:D2:1D:F2:36:39:AC:7F:CC:D2
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 01960F7BC6F6D70A5586CF150EB3C75146EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 09:01:32 +0000
Manifest this update: Mon 07 Apr 2025 09:01:32 +0000
Manifest next update: Tue 08 Apr 2025 09:01:32 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: lyZxBE5rVYwYEuuKWcLnOdP2YOcsDqIAtMGQ5m+OWFU=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:c6:f6:d7:0a:55:86:cf:15:0e:b3:c7:51:46:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Apr 7 09:01:32 2025 GMT
Not After : Apr 8 09:01:32 2025 GMT
Subject: CN=473d04c3c2996d6ea92079d21df23639ac7fccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:a3:fe:52:7f:6d:8c:c3:79:0a:0d:f7:3f:
f7:84:17:1f:67:29:be:21:8a:74:83:75:a1:47:ec:
d4:dc:1f:ff:32:77:72:ee:65:5c:3e:fb:be:4c:cf:
9d:d0:4c:26:89:ef:7c:04:34:c4:4b:b2:ec:4d:cc:
40:93:b7:a7:c0:bb:33:9e:84:5c:0d:40:c4:e5:22:
82:99:ae:d1:a1:59:52:56:b0:c2:0c:d2:12:b1:28:
9a:21:9a:ad:4b:a7:58:c6:98:19:65:8a:4c:92:ab:
c6:93:fd:a6:16:57:9e:17:e0:47:04:3b:cd:5a:3f:
53:3f:a3:e4:e2:02:d3:51:76:65:5c:f7:88:5e:eb:
3b:8c:2a:a8:58:0e:8a:e8:b9:75:55:a4:04:c6:50:
26:f3:98:a4:cb:8e:0f:ae:12:bd:b4:44:8a:4b:02:
77:d1:d6:be:fb:51:63:b9:9d:f4:55:5c:a1:b9:ba:
54:bc:c0:11:46:4c:b3:58:8c:57:fb:97:f9:b1:93:
ef:51:7d:fa:10:83:87:0f:78:7f:1d:9f:9a:02:c2:
c5:e9:c5:1e:06:1b:c4:0d:6c:66:d2:e5:da:4e:48:
c7:b0:9e:37:5d:78:bd:9a:79:59:c9:e6:26:5d:ca:
06:5e:24:eb:28:eb:95:99:7c:62:f1:26:69:ca:f2:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:04:C3:C2:99:6D:6E:A9:20:79:D2:1D:F2:36:39:AC:7F:CC:D2
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a3:40:38:96:26:05:73:df:33:a5:b1:79:5d:32:3b:06:55:
32:c8:9a:84:e5:4d:57:c4:26:a8:5d:c7:d5:b8:ac:6c:27:06:
2e:c5:fb:3b:02:35:f5:0d:af:28:fd:56:4c:33:b2:e2:41:1e:
b9:a0:d7:8b:02:fd:0d:be:71:b6:5b:bb:e1:e3:36:41:a8:ab:
2b:5d:d0:5c:ee:77:0a:0f:40:c7:23:d1:60:72:36:de:fb:50:
f8:db:66:c3:e9:b2:24:81:79:aa:83:75:aa:c1:8b:2e:dc:2a:
88:7f:11:7c:69:f9:df:59:81:39:40:89:bf:ad:fe:68:7c:c9:
dc:1f:51:74:e0:06:e0:d5:4c:aa:64:56:8b:e0:f9:9e:91:65:
f6:e0:13:bf:f5:e2:43:4a:27:2b:c3:60:0a:58:5e:c6:83:b8:
94:7b:14:87:39:8b:e5:11:f8:5b:0e:7c:a6:4f:c3:58:42:3a:
6c:0a:57:d6:d7:b2:9d:d7:a9:7a:d0:c7:7c:95:f3:5d:5e:d7:
d4:9a:96:dd:54:8e:fc:6f:e7:fa:8a:52:b3:40:0e:94:93:66:
b3:5f:6c:fc:e5:77:7c:3b:32:70:c4:0d:6d:6d:5f:de:7e:d2:
7e:3b:0a:cd:d9:53:15:e9:3a:89:52:a2:01:5a:62:39:24:89:
0a:98:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:45 2025 by rpki-client