Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: mRQYieL6uQ3kaBQpsngc9WtuCbeeEI4nJhOOvOIKdxE=
Subject key identifier: AB:D6:DF:70:48:A9:F7:36:F8:19:8D:9B:B2:ED:BA:DF:72:BE:35:7C
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 01964CD9820C89660DFF8BB90BB894928B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 0543
Signing time: Sat 19 Apr 2025 07:00:45 +0000
Manifest this update: Sat 19 Apr 2025 07:00:45 +0000
Manifest next update: Sun 20 Apr 2025 07:00:45 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: XlPsdaeubgJqppAFaPiYw2I1MP2q6qk3kWBahJKdR/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:82:0c:89:66:0d:ff:8b:b9:0b:b8:94:92:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Apr 19 07:00:45 2025 GMT
Not After : Apr 20 07:00:45 2025 GMT
Subject: CN=abd6df7048a9f736f8198d9bb2edbadf72be357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:aa:d8:50:6e:08:5c:26:fc:6a:60:79:ee:
4e:fc:c9:25:68:65:91:d4:05:9f:e8:56:6f:06:2d:
b1:33:bb:08:ed:c9:90:cf:80:b5:71:57:7e:13:a6:
85:34:b0:2f:a6:7f:71:b6:69:32:53:f5:dd:2c:13:
6c:06:9a:4d:f5:9c:08:a4:d7:45:24:85:e7:fa:18:
79:60:90:3c:57:7c:ab:8b:af:3b:b9:16:e0:5f:ae:
e8:ca:1f:0b:46:18:f2:cb:43:2a:f7:9a:b4:93:25:
b0:23:06:0d:cd:5f:a4:5f:22:63:bd:f9:b2:cf:d3:
9c:a7:4d:ca:7e:2a:d6:55:bb:67:ef:1e:74:da:0e:
bb:3c:c0:05:f9:7c:ad:df:46:1a:63:c2:e8:59:5e:
af:94:5b:18:30:89:00:2c:0b:bf:c7:f9:cc:10:5f:
3f:5e:70:6d:ac:e2:6b:b2:cb:e4:c0:93:61:60:a0:
a0:10:f9:88:07:97:8a:76:80:e6:01:fb:37:22:83:
bf:46:4c:0a:65:10:5d:7a:da:3b:67:b3:50:f5:e7:
1e:fd:50:8c:9a:9e:72:51:3f:c8:77:13:d5:db:1f:
04:c5:c1:c5:01:b9:f5:c1:76:6e:b1:75:5f:c3:45:
1c:61:16:64:c7:00:f2:ca:2d:1b:42:41:d5:bd:40:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D6:DF:70:48:A9:F7:36:F8:19:8D:9B:B2:ED:BA:DF:72:BE:35:7C
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6b:fb:e6:c3:01:2d:c6:25:eb:9f:33:43:2a:aa:88:d3:08:
e6:18:ad:b2:23:8e:0d:fa:f3:43:2d:7d:94:72:10:79:86:72:
1b:85:24:1f:b1:54:73:01:50:0c:f7:35:10:91:27:47:3e:2e:
de:c5:04:e4:83:81:bb:a0:3e:92:f4:1e:7e:3e:a6:03:c6:8a:
75:56:cd:00:78:d3:1b:8d:9f:3f:00:b4:8c:11:8e:96:71:66:
09:fc:32:02:88:ad:e0:25:a8:fc:11:4a:64:44:00:13:94:11:
a4:52:03:4b:cd:45:6e:ee:d6:f2:d2:38:e5:3c:d5:3b:5b:46:
48:88:f9:69:e6:2f:ee:16:6d:17:b3:5c:3a:43:8c:6c:34:25:
1c:ab:95:f2:f5:71:f4:86:b6:c2:59:6b:4a:b1:cf:f8:7c:a2:
51:d1:8e:6d:46:55:47:dd:ba:5b:a8:44:ca:3e:e1:cc:90:90:
17:5b:54:d1:e3:69:2e:f4:9e:f9:53:53:37:61:5f:b6:05:17:
e6:f1:ad:31:1e:09:fd:13:a4:6d:9d:b8:75:4b:9b:93:36:d8:
24:16:8e:ef:5f:42:a5:b4:d0:3d:bc:f8:93:ac:57:ac:47:e6:
25:80:75:f9:eb:d3:ac:23:3e:a1:43:82:bb:94:82:88:53:22:
b8:54:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:18 2025 by rpki-client