Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: GG8oAc/5Z9dA9uj5FFITxmEJQ8KXUHwJbnz7CfutQDQ=
Subject key identifier: 87:51:21:49:26:B6:1F:21:2A:A4:8C:3E:F8:95:EF:11:2D:FD:E1:EA
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 01964AB3E0CDD32554A3ACB0315831C3CF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 21:00:24 +0000
Manifest this update: Fri 18 Apr 2025 21:00:24 +0000
Manifest next update: Sat 19 Apr 2025 21:00:24 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: 0WK8l796Ss1n3Do2ZSj9+sJFsuK1A2ADR2tvwyxa1VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:e0:cd:d3:25:54:a3:ac:b0:31:58:31:c3:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Apr 18 21:00:24 2025 GMT
Not After : Apr 19 21:00:24 2025 GMT
Subject: CN=8751214926b61f212aa48c3ef895ef112dfde1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:8d:e0:44:2f:72:55:89:9a:1f:d1:d2:7a:
5d:b9:44:b4:15:ef:11:66:76:42:e5:3b:53:fb:a9:
e4:fb:d5:f5:bf:ec:b9:e6:24:b9:3f:04:07:19:86:
92:e3:de:b1:4e:b9:88:92:30:63:1e:36:8e:94:ab:
11:2e:0c:71:20:94:08:2f:73:05:86:ed:2b:44:04:
e2:78:54:5b:9f:66:64:b2:2f:d1:05:66:44:de:74:
5d:4f:ad:11:62:bc:34:b6:3a:78:91:95:eb:42:71:
54:9f:68:11:e5:10:48:91:01:f0:c1:77:de:eb:e7:
9d:a4:18:2e:04:53:fd:22:93:07:57:ac:1a:2e:ca:
0d:94:9d:44:86:8b:53:69:e5:bd:9d:50:78:c0:93:
bb:a4:09:df:e3:06:b0:f4:fc:c7:42:ac:8e:7f:b2:
77:cf:7a:20:3b:d6:d0:fe:59:57:99:58:60:57:0a:
ac:0b:bb:cc:04:2a:79:63:7b:31:86:dd:ae:06:66:
b9:22:00:8d:33:e6:06:7e:03:61:7a:af:d0:80:9f:
a3:37:87:f7:2a:59:49:bd:f8:cf:39:14:79:92:f1:
c3:4a:a2:c7:90:bd:2e:0f:9c:c7:2c:61:c9:a1:68:
97:bb:a0:e0:98:fb:75:7e:2c:f5:75:0d:d1:e3:a5:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:21:49:26:B6:1F:21:2A:A4:8C:3E:F8:95:EF:11:2D:FD:E1:EA
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b2:18:06:c4:03:04:3a:f7:50:37:34:11:e2:71:45:03:95:
92:cf:2d:39:53:6b:00:9a:20:30:37:21:8f:63:13:ff:65:73:
cd:74:3b:1d:ba:f1:d7:eb:d6:c0:b1:1a:cd:33:97:6c:d5:ee:
03:aa:75:21:5f:03:b3:31:ea:6a:3f:5b:1f:0c:0b:d5:7d:d4:
a1:71:5b:10:b3:eb:16:35:db:ab:e9:0d:2a:48:40:0e:80:ce:
45:33:8e:14:b7:a1:c6:4f:23:e5:1d:77:17:e8:e8:2b:57:a3:
64:f8:c9:4b:aa:74:da:26:08:1d:83:c5:25:ec:95:d8:1c:68:
62:d6:ac:09:59:ca:24:25:66:98:19:24:53:ab:18:f2:b0:d5:
e6:d1:e4:b0:29:e1:d8:87:5a:78:e4:19:be:52:76:d5:d4:1e:
05:92:14:b4:7c:95:eb:cb:b0:ba:67:d0:cf:8d:85:9c:6f:f4:
c6:1f:d6:fa:eb:08:3a:f1:9f:60:14:35:17:92:48:f0:6f:87:
e2:93:00:e6:23:dc:d0:56:b9:c6:12:41:65:c5:dc:da:be:33:
74:1c:3d:a7:a6:f9:8d:94:be:99:e1:e5:c0:35:6c:e3:0d:23:
7b:4e:88:30:3a:85:86:88:9f:7c:06:00:5a:ec:a7:66:ed:ad:
7c:91:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:50:46 2025 by rpki-client