Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: PHPDcfovb2CyEW+B7tYDHatXXzy0p31zBhsTEInC1og=
Subject key identifier: 06:25:A3:DC:56:82:DC:24:34:25:69:DB:B5:A5:F3:51:8E:88:29:52
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0196293B41E8164CC48EF9A576685D9C262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 060D
Signing time: Sat 12 Apr 2025 09:01:11 +0000
Manifest this update: Sat 12 Apr 2025 09:01:11 +0000
Manifest next update: Sun 13 Apr 2025 09:01:11 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: advKx0IxqzApslUdnbjHe6m05fo9IUfAk5tRdtZp+YA=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3b:41:e8:16:4c:c4:8e:f9:a5:76:68:5d:9c:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Apr 12 09:01:11 2025 GMT
Not After : Apr 13 09:01:11 2025 GMT
Subject: CN=0625a3dc5682dc24342569dbb5a5f3518e882952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:eb:69:3c:ff:3f:3b:46:a6:d2:15:dd:86:
2c:49:da:93:c7:fe:e9:c3:4b:5b:6d:93:98:45:a0:
90:aa:a0:e0:6a:1c:78:5f:1a:49:71:91:6f:86:a6:
a1:af:9f:58:82:1b:90:d6:fa:b1:7a:26:6b:b4:f7:
fe:94:80:dc:0c:f3:4e:ec:0c:90:1c:9b:79:db:5b:
24:d7:98:b0:a2:2f:ac:05:3d:32:33:0e:3f:a4:c9:
52:37:f8:21:5a:15:df:22:00:1c:5b:8d:04:02:c8:
a4:a9:44:69:43:5a:74:51:a1:87:00:93:92:01:63:
2a:13:37:23:6a:98:bb:42:5c:ee:85:4f:e8:3a:4e:
6f:0f:d4:a8:f2:88:72:19:40:7e:c4:80:a3:8c:42:
36:2a:95:e8:b0:a1:79:6d:e2:71:01:02:aa:32:b4:
9b:d9:18:8c:fa:2f:dc:08:b6:ad:4c:5f:10:ee:16:
9c:68:cf:b4:29:06:eb:c4:45:9a:05:46:aa:c1:05:
81:e0:9f:da:e3:f6:31:38:ad:f8:8d:e6:cd:af:79:
bf:70:72:48:6c:f3:d5:57:77:20:f3:20:89:97:58:
75:ee:69:a4:05:7e:5b:1b:ef:06:5e:9d:cc:e9:97:
96:59:d7:20:3a:94:7b:d3:03:b4:34:95:10:9c:bb:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:A3:DC:56:82:DC:24:34:25:69:DB:B5:A5:F3:51:8E:88:29:52
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cd:f5:6e:6e:97:94:58:00:f0:a6:7a:16:f6:45:c3:be:aa:
f1:24:94:6f:85:5a:39:4d:72:93:7a:68:7c:37:1e:02:9d:de:
35:27:62:b6:9f:e2:a9:1a:67:2e:88:d3:71:fc:d3:34:b8:b4:
1f:91:e3:ba:e7:a5:a1:63:cf:32:24:0f:cc:a8:62:30:52:43:
70:80:54:de:33:21:72:ff:94:75:d9:04:6b:84:81:46:70:e1:
8e:47:5d:00:6d:d1:c5:f1:a8:01:36:ff:ac:da:1a:a6:0b:bc:
22:90:47:f8:9c:5a:03:5c:87:52:af:70:e8:93:a5:80:08:29:
cf:38:ec:23:ac:a9:dd:b7:84:f0:8b:35:3d:66:18:43:f5:cb:
f5:ec:c4:07:c8:9b:07:20:ae:8e:ce:22:d4:2d:4e:32:5b:f9:
71:83:90:7d:33:c7:31:1b:02:cd:3e:64:30:2c:59:d4:da:88:
b3:08:e9:60:a2:a9:a2:64:51:a8:f1:4b:fc:cf:8a:99:aa:b9:
59:6a:90:25:a6:97:58:b9:7c:0f:ff:75:54:59:4b:b6:c3:5b:
2f:57:fa:a8:70:f0:f6:2f:b8:48:50:08:a7:42:47:a2:b3:11:
81:a9:ff:83:5e:f2:d1:80:56:3e:2e:72:0a:08:c5:1f:a9:cd:
9e:e2:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:19:34 2025 by rpki-client