Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: 395TUyflAq3DxNm5yTFMRvPI42ssEq3MfffOuq1PeYY=
Subject key identifier: 2A:DD:C1:D9:4B:E5:8C:AB:68:75:07:C8:D8:D9:81:0A:AC:B0:E7:82
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019640679D0356209A7DAE75D4EAB68637FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1486
Signing time: Wed 16 Apr 2025 21:00:54 +0000
Manifest this update: Wed 16 Apr 2025 21:00:54 +0000
Manifest next update: Thu 17 Apr 2025 21:00:54 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: OW/Ug0xTphqnu0T56whR5m6dPZt56xzMmzvcYKAtV3Q=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:9d:03:56:20:9a:7d:ae:75:d4:ea:b6:86:37:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Apr 16 21:00:54 2025 GMT
Not After : Apr 17 21:00:54 2025 GMT
Subject: CN=2addc1d94be58cab687507c8d8d9810aacb0e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:ae:15:5a:92:83:c2:02:da:60:65:58:5e:
fa:d2:c1:54:97:d2:5f:28:a3:db:2d:30:1b:b4:95:
77:c8:05:ee:75:e4:ce:fd:05:b6:93:04:ae:56:a4:
81:ae:5e:58:ae:37:0a:01:90:35:dc:ee:23:33:ea:
a6:4e:85:6a:ea:91:25:7a:b2:ef:f4:e2:98:17:ef:
e6:0f:de:76:6c:db:2e:a2:f8:ac:25:cd:2a:4c:f1:
9c:06:a9:6b:fd:24:56:b3:85:e8:bb:86:49:81:ec:
0d:44:11:36:eb:7e:67:3a:30:7e:cc:e5:06:f0:bf:
63:e5:ae:ff:83:63:65:9e:a8:0f:f7:f0:89:55:ab:
05:28:01:14:c4:03:29:d3:e2:f5:b1:a6:e5:50:95:
cf:3f:20:57:d0:bc:ad:91:7d:e8:15:81:9a:0d:57:
55:c0:8c:f5:c4:72:de:b6:75:dd:ce:32:41:1f:a9:
2c:11:7b:de:60:a1:fd:a9:30:ec:3f:4b:2a:cd:97:
cc:e6:03:dc:c6:8a:c1:5a:8c:e5:40:99:86:91:25:
be:1e:72:31:64:8f:e5:7e:e2:4a:e7:0d:93:f6:d9:
dd:6e:84:20:60:1f:73:13:e8:b1:ca:36:ad:65:66:
b3:58:00:87:ff:32:15:b4:b0:0e:ef:94:39:17:8f:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:C1:D9:4B:E5:8C:AB:68:75:07:C8:D8:D9:81:0A:AC:B0:E7:82
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:8d:ed:47:7f:6e:92:f7:b1:99:9c:70:a8:f7:1e:7a:f4:b0:
dd:3b:3d:4d:24:07:d7:8f:80:82:5b:b1:1f:f5:d1:c7:20:cc:
c9:e8:e1:f9:47:67:9a:1a:f2:bf:2f:04:11:82:7c:1f:95:30:
77:ff:38:89:38:98:b8:1a:02:59:0a:60:c6:7a:04:3d:41:f6:
25:9b:55:89:01:be:32:e3:91:b4:09:f9:a4:50:61:d6:2d:5d:
1c:8b:5c:14:89:82:21:8e:81:ed:d1:95:e7:b7:67:2c:d2:8d:
b0:6a:1e:19:38:69:b0:df:f3:c3:d7:fb:c8:ae:5e:0a:47:6b:
9d:ed:81:9a:8e:85:bb:89:d7:35:4e:e8:e3:f9:24:88:16:81:
15:34:ea:7b:ce:36:c8:7f:59:ba:ab:84:fe:25:35:dd:9b:9b:
f0:aa:13:d7:13:a0:c0:14:21:54:15:73:ff:a5:97:50:e4:38:
17:91:55:c6:1d:f1:39:b2:bd:ae:d3:38:a5:16:90:86:bf:27:
ec:17:33:dd:f9:10:1f:ad:88:56:ca:d9:17:67:8c:2d:66:27:
a8:f3:8b:97:43:bb:73:50:2a:9d:ea:5c:7c:3e:b7:02:20:22:
84:60:68:95:36:e7:4b:48:0d:28:e1:59:0f:ad:2b:eb:b4:03:
17:20:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:46 2025 by rpki-client