Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
File: GCDxMTkWE4Tq8ToffbYOLGikOVY.mft (raw, json)
Hash identifier: UI2Ovc97NVGv+9iK+YJ6amWflj1OZdaHR9O+VtHjxuA=
Subject key identifier: 40:83:EF:60:A9:21:CC:D4:DF:71:6E:4B:9D:67:E9:E1:4E:25:2C:15
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 0196192318861214FBA5C3945B29C199C125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
Manifest number: 14E3
Signing time: Wed 09 Apr 2025 06:00:52 +0000
Manifest this update: Wed 09 Apr 2025 06:00:52 +0000
Manifest next update: Thu 10 Apr 2025 06:00:52 +0000
Files and hashes: 1: 5PJP9sz2Qj0R_qvQUI34qPi3A1Y.roa (hash: pR71ZCmNXZbyYfyvw8Yav6FbU05FRtn+pbwLEcOTYyA=)
2: GCDxMTkWE4Tq8ToffbYOLGikOVY.crl (hash: U5CC5p5PuB4j4jJkKqRhlOtkd8xvKucwneTWoWZ769Q=)
3: gTxU19v1FIjd2W2ByIs00b9py5k.roa (hash: dE41WcjB8n3G/VzRfrS7Jc6uMbM/f0DRebeJS3Hdcos=)
4: k-Hv5Avloy-7_yTlO8SDAhMoc5M.roa (hash: iZ+5NIkdY2s7fnzuUEQnr4gkvl0QbM0xPICQPGddznM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:23:18:86:12:14:fb:a5:c3:94:5b:29:c1:99:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: Apr 9 06:00:52 2025 GMT
Not After : Apr 10 06:00:52 2025 GMT
Subject: CN=4083ef60a921ccd4df716e4b9d67e9e14e252c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:f0:9c:c9:13:91:5a:93:66:cd:12:1b:b5:
70:e0:3b:f9:fc:8a:6f:66:5a:cb:18:09:dc:d8:b9:
f2:74:80:f3:e0:c3:3d:5d:e7:b7:86:ab:32:a7:9c:
6a:ed:0e:a8:ee:00:34:42:da:00:13:fa:97:a9:d9:
dc:90:19:c0:eb:12:fc:17:cf:00:ae:cd:ca:d0:0d:
79:9a:ce:3e:de:7d:04:27:3e:ab:62:08:ea:19:8b:
b4:8d:f9:98:bc:73:ed:69:47:4d:b6:7e:82:76:fb:
7f:1a:0c:de:64:7a:4b:b2:34:a0:83:7b:54:68:b5:
d1:72:b3:04:cd:85:8e:71:cb:2c:ce:eb:92:8f:75:
30:e6:5b:e3:dd:e2:a1:34:e0:14:1e:c0:b9:c3:e8:
41:c9:19:95:47:6f:18:ee:8d:3d:bb:e1:e6:d2:ed:
17:93:1f:b6:0f:bb:0f:97:6e:7d:8a:95:59:aa:74:
31:46:99:d8:f8:a9:b9:cb:01:b8:a6:cf:9b:4f:20:
84:0b:f4:5f:b4:44:bd:19:75:74:25:24:49:21:53:
13:65:46:e9:02:95:e3:f0:0c:84:02:db:85:41:e3:
aa:4e:6a:83:75:99:e6:b7:ab:ae:e0:0f:fb:15:a3:
33:32:ba:c9:cd:4f:03:07:a0:d7:0e:a1:ab:d5:73:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:EF:60:A9:21:CC:D4:DF:71:6E:4B:9D:67:E9:E1:4E:25:2C:15
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c6:70:fb:ce:cd:4d:d7:ff:75:60:bc:00:92:a7:37:5a:61:
5e:69:ba:27:d0:b7:77:72:c1:34:0f:58:b5:0c:a0:69:7d:69:
36:bf:8f:ad:76:12:1a:e5:12:7b:8e:70:a7:23:02:d4:24:b6:
92:7f:da:68:43:ab:ab:bd:c9:17:8a:da:0a:a5:a0:70:76:05:
29:82:67:d1:a8:a0:19:cb:07:52:0c:45:39:0a:25:14:46:fa:
79:3d:36:bb:ea:91:6d:0b:fe:69:6c:ce:1b:60:95:5a:4b:1b:
f2:f9:28:b1:01:5f:25:e9:a0:6f:d4:a8:7b:d7:bb:67:1e:3f:
e3:6e:e1:2e:19:ff:90:2b:36:81:b8:4d:c5:39:19:4c:69:c3:
4f:ca:98:44:a0:87:00:4d:3d:e0:a8:ba:bb:43:09:c5:f7:d5:
c0:d9:4d:86:90:5e:8f:dd:40:14:d7:a1:a9:78:1b:30:f7:d1:
3e:c8:eb:98:15:b2:c6:58:06:de:a5:cf:32:3b:de:5f:77:14:
ee:55:0d:83:3c:57:de:5b:54:90:3c:54:dc:82:2e:53:c3:e3:
17:f2:a7:c3:31:ab:9b:3a:06:66:c7:14:60:9c:78:ef:4b:9e:
4f:6d:dc:4c:65:ce:84:9f:09:af:53:44:06:17:1e:a8:31:f2:
f5:33:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:04 2025 by rpki-client