Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: 6GktViceK9ON0o0h3R6FfNhE87RsfD8yptISx0XFknQ=
Subject key identifier: AC:13:8B:1C:FA:BB:11:50:E1:6A:E3:C1:C2:0D:1E:61:6B:68:65:40
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019654C991C73E79C119FBE0C9286EF8F793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0A68
Signing time: Sun 20 Apr 2025 20:00:18 +0000
Manifest this update: Sun 20 Apr 2025 20:00:18 +0000
Manifest next update: Mon 21 Apr 2025 20:00:18 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: eGxxerxjKxnYlanywBHrOHy3lVLOiOm6XnoWaCvwerU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:91:c7:3e:79:c1:19:fb:e0:c9:28:6e:f8:f7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Apr 20 20:00:18 2025 GMT
Not After : Apr 21 20:00:18 2025 GMT
Subject: CN=ac138b1cfabb1150e16ae3c1c20d1e616b686540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:c8:45:13:c4:27:18:38:f3:00:ec:de:97:
1e:1c:4f:39:f1:19:41:29:6c:02:5c:fa:18:f0:84:
47:5c:a7:9f:76:fd:fe:49:cf:86:c2:58:da:78:1d:
7f:9d:f1:69:3b:de:d5:71:bd:87:af:44:ee:51:19:
9d:87:55:30:58:47:3e:ae:14:a1:37:19:ea:25:52:
99:c6:c1:94:77:3c:1b:9a:79:93:a5:d1:fb:21:42:
7f:87:1c:6d:fe:4f:a9:20:80:ae:07:14:dd:c3:6c:
20:bc:04:45:f2:89:a4:3e:80:ab:e9:b2:8b:d5:b1:
fa:f1:8c:cb:2f:9b:0e:05:b5:f2:e1:4e:f2:c3:86:
7a:85:4c:51:d7:8b:09:f9:db:b0:76:b5:f2:7d:a0:
c7:e6:68:4b:98:38:e9:ef:a3:eb:1b:2b:a8:c0:4a:
21:79:c6:25:3d:8a:88:89:0a:63:05:11:3e:8e:31:
b6:7e:dd:ab:d0:ff:63:0e:d2:12:f5:b6:39:8a:59:
a4:51:22:78:32:24:69:0a:93:c7:97:9c:4b:6d:98:
03:a4:37:03:fa:9a:55:19:dd:df:6e:9f:2d:3a:29:
1f:5e:38:a3:5f:ef:a1:90:e7:ba:75:3a:23:bb:98:
62:0d:4e:d3:96:e0:d8:2d:16:6e:de:d7:ce:72:9c:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:13:8B:1C:FA:BB:11:50:E1:6A:E3:C1:C2:0D:1E:61:6B:68:65:40
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:2f:cb:51:01:65:06:4e:53:5f:f2:39:b9:a9:ca:4a:40:
7b:0c:b3:2e:11:4a:ff:a5:d7:ce:5b:91:6a:87:f6:33:bf:08:
4a:09:f0:28:bd:02:b1:b4:f2:6d:02:6e:2e:61:ce:41:da:6c:
fc:b8:25:b5:41:3f:2e:5d:0f:a4:cf:c8:75:4b:01:fe:19:47:
08:5a:8a:98:69:84:f4:0b:1f:52:08:de:9e:c7:32:f3:f7:92:
dd:4c:47:cf:ab:97:09:fb:67:23:fa:f1:16:fc:fd:a0:95:aa:
da:02:67:e0:48:34:31:3d:aa:c2:5d:78:b1:89:fc:e2:81:e4:
3c:7d:66:2d:39:aa:87:ed:32:28:b9:a9:31:a2:4b:bb:b7:53:
00:f8:f0:cd:e1:c9:0b:d8:b4:95:23:56:34:50:98:ab:c1:31:
6a:68:fe:3f:e4:57:a3:f3:7b:6b:31:0c:02:03:88:e2:42:a9:
94:3d:68:03:17:a1:74:b7:2f:48:1c:eb:66:b0:e2:7b:31:76:
f2:40:98:f5:9c:19:d4:81:82:a0:30:a9:de:19:1c:ff:8e:10:
4d:77:1d:75:54:6d:ab:f6:53:87:7e:7d:79:55:98:f5:5a:f4:
e9:d8:78:0a:a3:2b:de:ee:f6:cb:3d:49:43:90:e4:b8:e3:86:
27:8c:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:36 2025 by rpki-client