Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: la1a+tlR0yUMvfRsqfCDx8HbgMEDjS2w728HZcAyKsE=
Subject key identifier: B9:62:E7:0F:F6:70:5D:A1:B4:23:AC:05:D6:87:2E:21:74:16:A0:19
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019652364CCE091DC7D81371ACBCB4FD7FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 01FA
Signing time: Sun 20 Apr 2025 08:00:11 +0000
Manifest this update: Sun 20 Apr 2025 08:00:11 +0000
Manifest next update: Mon 21 Apr 2025 08:00:11 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: w05xj8l2TLYT8CXmKCUFAiv7Zfr7dJBqo2Th16AgG/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:4c:ce:09:1d:c7:d8:13:71:ac:bc:b4:fd:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Apr 20 08:00:11 2025 GMT
Not After : Apr 21 08:00:11 2025 GMT
Subject: CN=b962e70ff6705da1b423ac05d6872e217416a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:92:8c:47:58:1a:ef:40:c6:1a:1d:58:e1:
b6:59:9b:78:b9:8c:14:b4:1b:9e:9d:e3:62:ca:11:
16:fc:57:ee:28:64:08:c0:a9:4c:26:76:c1:6e:e1:
71:87:27:6e:a5:df:c7:ea:99:e0:ae:00:a9:58:71:
e2:5c:ef:c7:79:7d:f4:99:92:0f:05:67:b9:35:2f:
76:4b:4f:d9:ff:dc:0f:7f:58:3b:0f:48:2d:fd:7a:
84:97:1a:bf:ec:68:84:36:cf:e4:6d:c0:d8:2e:6a:
a6:70:30:36:cc:fe:b3:5d:43:1f:ff:9d:1c:5f:49:
28:de:08:9e:fe:09:e2:74:74:cb:6a:a7:68:1b:09:
39:a9:d4:91:a8:8f:bb:09:f9:c1:d3:35:a4:b7:a5:
af:d2:89:4b:c4:71:ff:8b:d6:8d:a5:f4:8b:d7:d8:
71:f9:64:74:f8:1b:29:11:c0:54:67:e7:8a:6f:32:
f7:fc:0c:8b:1a:bc:4a:64:f5:02:9f:43:5e:e6:6d:
12:25:96:b1:34:bc:04:50:c9:6f:0f:41:8f:3c:89:
90:31:e7:47:da:a4:4c:46:dd:d5:fe:45:9a:4a:ec:
34:26:2f:14:71:76:0b:8d:e4:73:60:c4:e1:cf:3f:
45:e2:f4:34:de:8d:2b:6a:9e:a7:69:fb:d4:14:ba:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:E7:0F:F6:70:5D:A1:B4:23:AC:05:D6:87:2E:21:74:16:A0:19
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:40:b6:cd:e3:1a:37:ca:24:7b:7f:e9:8a:fa:f2:c2:fc:e6:
22:d1:31:1f:5a:3b:e6:ae:99:a3:c7:87:c6:cf:76:0b:55:3b:
d5:1d:a5:ad:26:07:1f:39:7d:b7:06:d4:c7:a2:fd:29:65:e8:
eb:d9:17:b1:76:0e:d4:42:16:4a:a2:98:0a:0f:f1:70:f8:ab:
b4:db:46:21:e5:66:17:a6:67:05:af:da:fa:64:26:9a:db:b7:
c8:c6:8b:9a:c3:1e:05:0e:0b:76:cb:ae:58:2d:07:f2:fb:11:
fb:f2:b6:a5:9a:f5:ae:4f:f3:1d:c0:af:d0:c7:6c:c3:4e:1d:
9f:b1:86:37:9d:3d:05:9a:35:58:77:1b:3f:80:86:4d:10:93:
66:0f:72:8f:76:8d:9f:00:79:84:50:39:b6:d3:b7:3c:e6:c4:
f8:c9:84:69:be:c6:5d:69:a3:a8:c2:26:30:99:b4:5f:cc:d1:
25:e4:90:5b:a0:10:e3:f0:2c:dd:fb:b4:a7:4b:01:d2:c0:b2:
16:1c:1d:5c:d9:82:25:86:7c:d0:66:f4:a6:5b:ca:28:76:15:
5e:d1:d8:fa:d3:d4:c5:fd:e1:b5:b9:f4:b1:ab:e7:6a:b0:61:
c2:b5:57:ca:21:a9:d5:b8:84:63:ea:95:dc:91:5b:75:ef:c7:
e3:4c:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:31 2025 by rpki-client