Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: pQI3VNrUgcxfQjAU9eIXCWAu7fc6w/Dn3/NGFBcwAl8=
Subject key identifier: 8F:24:6B:2B:D1:ED:7E:9E:4D:58:DF:04:78:40:D7:74:B1:F1:BF:A1
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 0195903CB49BE74DBF26BC254B69F13CADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0195
Signing time: Thu 13 Mar 2025 16:00:52 +0000
Manifest this update: Thu 13 Mar 2025 16:00:52 +0000
Manifest next update: Fri 14 Mar 2025 16:00:52 +0000
Files and hashes: 1: Gu1VfmEwwWGyyu8mUifUt3Et1aU.roa (hash: HigRll08o/Aqm4OTZp77tT+XoPqn533WGHlSSBF902U=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: k0JdX7Uim8cKUGGXE4jpqbnLYelegF18ShOy5B+MDVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:b4:9b:e7:4d:bf:26:bc:25:4b:69:f1:3c:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Mar 13 16:00:52 2025 GMT
Not After : Mar 14 16:00:52 2025 GMT
Subject: CN=8f246b2bd1ed7e9e4d58df047840d774b1f1bfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:c6:ea:68:a3:88:ad:4e:ef:b2:55:c7:97:
cb:51:f3:ae:fa:c6:62:42:ff:1f:4a:55:45:24:d9:
a3:e1:e4:12:30:2b:81:07:d4:f9:08:7a:c2:de:31:
0f:7e:f9:e2:74:09:ee:94:11:12:fc:a4:5b:ce:f4:
95:7d:4a:69:52:9e:8e:96:b9:15:2d:90:67:03:da:
41:3a:bd:65:9b:ee:5c:6e:3e:7e:23:14:49:e2:eb:
f1:dc:41:20:0a:8d:ba:fb:0a:f2:70:c0:62:74:17:
0b:9d:6f:5f:fa:74:1e:4e:74:e5:94:21:37:ac:8e:
bd:90:e3:45:87:e7:02:f1:dc:a9:5c:a4:66:c6:57:
f3:58:ae:f0:5d:39:58:57:55:8b:ef:ac:86:8f:ff:
63:bb:7c:f1:6a:32:f2:33:2d:04:20:7f:68:a5:4b:
f5:c7:93:53:de:41:8c:92:db:bb:bb:af:b1:ad:4f:
00:56:07:31:e5:f3:00:4e:32:a8:62:0c:40:df:cb:
66:85:7b:09:27:13:22:8d:0c:ab:b7:b2:97:b8:d3:
67:0c:ea:80:d3:c2:8c:24:60:df:2a:55:e1:c9:a2:
e2:03:23:b7:35:30:7c:f5:30:ed:e6:79:f6:56:36:
b4:ba:dc:9d:fa:ed:d3:53:20:17:9f:2e:6f:94:0c:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:6B:2B:D1:ED:7E:9E:4D:58:DF:04:78:40:D7:74:B1:F1:BF:A1
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:02:70:59:4a:ba:e3:e0:dd:02:df:6c:5c:a6:bf:38:78:
98:f4:ed:2b:01:8f:96:0a:9b:10:c1:cd:f0:86:48:26:5d:d6:
b0:09:a9:8a:cd:83:fa:91:56:2d:e5:b9:0a:13:d2:7d:f1:5e:
28:70:96:49:dc:11:18:e4:11:ef:d5:34:66:da:bd:3b:a7:c1:
0d:6a:54:7c:4e:86:a6:17:c2:cb:80:cc:51:f9:47:35:f8:cc:
0a:99:1c:73:e2:17:5e:f9:4a:9c:e0:b9:c2:fc:a0:11:31:18:
61:6b:18:8b:92:25:50:c3:b2:12:35:4a:8d:3d:3b:cf:bf:17:
da:fe:bf:e9:ce:2a:5d:1a:67:49:d4:59:c5:06:f8:77:58:ea:
d6:d4:48:6d:11:6d:d9:e0:34:d4:82:fe:26:51:31:7a:bd:70:
f2:41:6d:48:22:af:48:eb:8c:fb:c9:73:58:c2:47:5a:93:f6:
0a:dd:ef:c6:3d:68:8a:b4:db:80:2c:35:9d:f2:dc:cc:c6:cf:
d6:5a:44:2d:d0:5a:d2:d3:fd:96:8f:c4:ba:e0:9e:88:e1:bb:
d8:99:5b:a5:4a:1a:4e:17:3d:7a:84:94:3e:10:7b:1d:8f:5f:
18:0e:a5:1d:6c:a7:fc:5b:b9:f5:6c:09:a6:cb:0f:ed:3d:02:
ec:67:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:51 2025 by rpki-client