Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: pOfYVh3qx6W2xMw4P/d3NGBff7A8w7sTY6qVqqns9SU=
Subject key identifier: 78:99:BF:FD:D6:C1:9F:1D:EB:6E:C6:49:A7:CE:DE:13:07:BA:18:EF
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 01964B9087FD5401386779892DBED6A8E954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1144
Signing time: Sat 19 Apr 2025 01:01:25 +0000
Manifest this update: Sat 19 Apr 2025 01:01:25 +0000
Manifest next update: Sun 20 Apr 2025 01:01:25 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: EbWF6B9XYMxp/5eelCjigTGuoZtJuNBkjDxVtZN51g0=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:87:fd:54:01:38:67:79:89:2d:be:d6:a8:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Apr 19 01:01:25 2025 GMT
Not After : Apr 20 01:01:25 2025 GMT
Subject: CN=7899bffdd6c19f1deb6ec649a7cede1307ba18ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:59:de:93:24:29:2e:51:6f:e4:40:24:46:
3c:6b:5e:a3:f9:32:bd:55:81:bb:b6:57:2d:57:1d:
d0:98:e5:ad:92:f0:ac:b4:ca:e6:c4:d9:0f:bc:a7:
e4:ef:37:44:33:78:3a:48:e7:ca:a4:bc:57:7b:7d:
c5:0c:c2:79:8f:e4:91:e3:28:5a:db:f3:6b:66:10:
e5:45:31:e3:5f:60:3d:7b:52:5e:5a:2c:b3:e0:87:
59:93:2e:a5:0d:69:48:2d:72:4e:bc:0a:70:8e:05:
21:67:f2:0b:7b:9a:65:74:cb:ed:ab:c7:cc:b5:86:
43:8d:b0:e5:8f:86:b2:7b:70:7b:47:91:32:1d:d4:
df:6e:58:6f:90:3a:fe:74:2b:13:1c:13:13:69:92:
da:0d:a0:18:26:24:fb:ba:df:42:81:81:3a:52:0f:
9f:99:de:06:b0:67:b4:64:e9:ef:b7:65:9b:fc:e1:
ac:5e:20:8b:b8:19:ff:47:d8:de:db:05:9a:60:3e:
7a:9c:bf:6d:27:9c:aa:0e:45:0a:03:49:06:97:2f:
17:b9:5d:5b:72:2d:b5:24:16:a4:da:60:84:7e:f6:
2b:a5:f9:af:2b:1c:a2:d6:7f:2a:24:6c:29:54:38:
5f:c9:40:ed:60:33:2a:a7:45:4d:c8:de:36:c7:5c:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:BF:FD:D6:C1:9F:1D:EB:6E:C6:49:A7:CE:DE:13:07:BA:18:EF
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c5:bf:a3:b7:24:1e:f7:a5:6f:18:71:3a:7c:a0:0c:f7:67:
21:8b:60:50:e8:8a:d1:bb:26:46:c0:34:52:06:85:48:32:a3:
67:1d:78:83:1c:f6:d1:68:2b:99:ec:39:f1:1d:98:28:1a:3d:
0d:c8:94:1d:ae:79:06:7a:ba:a7:3b:e6:d0:75:44:be:94:c9:
3e:4d:17:dd:8c:16:35:2f:08:54:d6:73:45:5c:c5:6f:3a:e2:
71:14:b5:ff:ab:e0:28:f2:0b:c9:e9:8c:20:1a:a5:bc:ce:0b:
92:b8:6c:d7:e6:6f:48:77:e7:b1:61:85:41:0b:3b:f8:d7:e0:
c4:65:20:42:c3:04:bb:4c:da:b9:96:e8:41:91:8b:9d:15:91:
6a:18:96:f0:2e:5d:2f:9b:9a:9d:00:d2:90:5b:ed:74:2a:9e:
9b:be:0b:72:b5:fa:5c:dd:4a:91:a6:87:81:df:2e:e0:46:aa:
71:e2:a5:b1:9a:7f:9d:9e:4d:de:b1:29:0d:80:20:69:0c:54:
20:b2:76:ff:91:c1:72:d8:90:e0:a3:48:52:df:72:ed:c4:07:
e9:04:a5:e9:b4:cd:b5:2e:11:9b:2d:10:43:92:fa:bc:cb:60:
1c:ac:1b:0d:f9:65:46:2e:99:6c:fb:e5:5e:60:ef:b5:50:02:
3d:4c:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:49:11 2025 by rpki-client