Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: BbwXNq/fjksbTLjLC4JCoy6RJ9k2kAMKwbSN3qCELZc=
Subject key identifier: B5:AC:F1:AE:86:96:39:6F:84:5E:B1:15:26:75:13:6C:3A:9E:91:EF
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 01963FC226731A3544F21F05AAB2B3E3908C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0D3A
Signing time: Wed 16 Apr 2025 18:00:10 +0000
Manifest this update: Wed 16 Apr 2025 18:00:10 +0000
Manifest next update: Thu 17 Apr 2025 18:00:10 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: WYU0NMQFYX9FYRSFnwyXFy2saKrqzHbQby17kuU/+i4=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:26:73:1a:35:44:f2:1f:05:aa:b2:b3:e3:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Apr 16 18:00:10 2025 GMT
Not After : Apr 17 18:00:10 2025 GMT
Subject: CN=b5acf1ae8696396f845eb1152675136c3a9e91ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:46:f0:10:d9:2d:5f:7b:a3:76:f7:90:30:
9f:d6:df:6a:e2:35:34:6e:f0:aa:52:9c:9f:c3:d3:
cb:3f:16:ca:8f:9c:01:9a:c1:a1:a0:3f:a9:a2:98:
da:2a:3d:3d:c4:ff:f2:bc:8b:0a:20:a9:d3:37:19:
82:fd:07:b2:75:08:e0:25:24:b1:ac:2c:21:89:66:
3d:9f:68:a4:a7:59:ed:47:2c:b6:6b:29:47:51:19:
ee:80:d0:77:8c:a7:4b:a3:79:80:d8:81:28:93:e2:
f7:32:04:ab:ae:c6:ba:ba:f8:e8:5a:bc:8f:5f:7e:
41:b6:66:83:da:fb:cc:3f:51:fa:82:fd:b4:df:7e:
6a:31:a8:2b:48:a3:76:2d:44:ec:d1:df:ad:02:03:
83:e6:0e:07:29:65:ca:fc:97:c8:69:a7:59:9f:ad:
85:02:e4:e8:4c:08:fd:e3:69:07:cf:b1:8e:00:ab:
83:8f:1b:ab:71:78:8b:27:dd:9f:3f:36:cb:df:5e:
12:62:11:81:3a:0f:af:86:b7:63:37:8a:0f:ae:73:
59:22:83:1f:cd:16:18:e4:f6:3b:07:df:80:0e:d4:
db:f8:78:ed:6b:78:5d:90:f4:ee:bc:a4:e5:9b:1f:
15:b4:e6:bc:fd:bc:fa:24:87:e1:7e:d7:b8:a5:f0:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AC:F1:AE:86:96:39:6F:84:5E:B1:15:26:75:13:6C:3A:9E:91:EF
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:d9:00:c6:91:fc:12:ce:56:6b:8d:3b:03:4f:54:75:b0:
b3:07:e6:03:e8:40:f0:75:b1:53:29:8c:4f:8a:16:28:06:17:
18:4a:77:17:1a:1f:94:8f:df:48:e0:e3:ab:74:1e:d9:a8:89:
bb:23:c2:dd:8d:0a:ad:63:e3:6a:21:be:4d:cc:a8:49:e2:89:
70:b7:ce:51:37:5a:01:08:15:85:a9:41:99:4a:e0:3d:57:e7:
3c:df:24:0a:bf:68:20:90:27:f1:f6:06:e8:ad:60:ad:66:d9:
11:d7:15:1a:e2:b5:a5:61:44:2d:06:12:03:4f:91:4b:9b:94:
fd:23:14:e5:9b:a3:cc:76:52:d9:4c:80:73:39:18:7f:2a:1c:
dc:49:49:6d:66:08:bb:17:35:03:76:ce:ec:97:20:90:28:a7:
af:ed:b4:47:44:b7:9f:d4:5d:06:44:46:57:49:f5:75:da:45:
1c:80:fd:84:e1:56:65:1f:80:22:cd:2b:54:09:ce:a6:97:73:
8d:00:db:60:e2:80:c6:0f:65:72:12:d4:26:a5:e7:04:9d:c8:
5d:35:4a:ae:ed:58:56:e6:63:60:12:66:f6:92:b8:ca:2b:1c:
7e:3e:1a:bf:ae:33:94:01:bc:eb:45:c4:98:db:cc:74:a1:1a:
fa:6e:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:59:14 2025 by rpki-client