Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: ndpyakKtDbSfm7RgTtWd8zMOVJ5vdG0d8BHxC9IblpY=
Subject key identifier: FB:6C:28:65:8E:42:16:DF:70:8E:A0:66:06:DF:94:D7:C6:4F:C6:A1
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 01958CCE9B689DE136DAC73CCE5B1161A8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1134
Signing time: Thu 13 Mar 2025 00:01:45 +0000
Manifest this update: Thu 13 Mar 2025 00:01:45 +0000
Manifest next update: Fri 14 Mar 2025 00:01:45 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: zGK6yOFT2QERv/s5atYE9f1/gV8AFeWEzAMYeyDqYPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:9b:68:9d:e1:36:da:c7:3c:ce:5b:11:61:a8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Mar 13 00:01:45 2025 GMT
Not After : Mar 14 00:01:45 2025 GMT
Subject: CN=fb6c28658e4216df708ea06606df94d7c64fc6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:32:1e:3c:ef:0f:1b:e2:84:eb:a3:7b:e4:
55:95:a7:c6:c9:69:38:45:19:d6:78:e7:d9:52:76:
d3:e2:c2:3f:63:10:3a:c4:80:94:72:9c:b8:d2:6e:
60:cb:cd:f9:d0:3e:33:26:bb:85:c4:6c:14:9e:36:
60:aa:61:60:ec:e5:64:a9:6e:9c:cc:08:02:a4:4c:
64:e6:22:73:d5:9a:cb:b4:1f:49:a1:e3:94:e4:65:
60:83:74:8e:a6:9b:97:22:aa:a3:21:92:66:af:0e:
d8:39:f6:08:55:47:98:2a:c6:ba:c6:1c:a4:48:26:
85:45:1e:86:48:48:0f:f2:92:c9:98:d9:f5:ee:99:
91:9f:ed:63:67:4d:d5:f7:ff:d2:28:bd:16:80:03:
23:24:b7:8c:b4:a0:78:fd:0d:5f:12:00:a6:9d:67:
d4:05:61:61:0f:4a:6e:ca:16:bb:f0:dd:33:6c:ed:
e1:ff:f8:84:2a:e2:bb:32:24:6d:d7:6b:38:c8:f4:
f5:18:c0:76:ee:d2:57:74:aa:ec:26:18:6a:ef:b4:
b3:63:10:dc:8f:58:57:b0:77:d5:68:d7:b2:eb:07:
bd:53:bc:8b:2d:4d:ac:96:c8:54:b3:59:a4:45:4c:
f2:f4:62:0b:2c:b5:4a:79:c8:37:41:e1:fa:6c:6d:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:28:65:8E:42:16:DF:70:8E:A0:66:06:DF:94:D7:C6:4F:C6:A1
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:87:26:81:ef:91:f5:6d:26:d9:d6:e8:2b:86:eb:6f:27:c7:
c4:72:fb:b6:6f:e2:87:17:69:6b:d7:5f:57:6d:01:a9:c0:2c:
fd:a8:bb:aa:83:f6:a1:69:ef:eb:8d:26:90:86:dc:36:0c:4d:
e4:8c:e5:15:ab:ba:49:82:74:9a:a5:cc:21:c7:1e:74:80:39:
b8:21:7f:b3:f4:cb:d8:8a:5b:af:60:d3:65:17:61:f9:c1:78:
90:33:5f:a8:3a:3a:cc:04:11:33:ad:3a:ed:8d:00:2d:37:8a:
72:fe:32:57:96:20:7b:72:70:1b:12:b9:0f:35:42:e2:0d:1e:
f0:c6:ef:33:7e:a9:38:88:7c:fc:8b:ee:4b:d9:0a:42:fa:1c:
04:69:22:c2:e4:43:54:02:44:44:3a:ad:bb:f1:db:89:b1:3e:
33:59:5b:47:10:0b:34:99:5a:a9:18:72:38:65:54:88:b3:35:
f4:d0:11:60:06:a1:38:76:a3:96:9a:75:dc:aa:6c:01:a1:d6:
51:af:02:0f:f5:87:68:ef:96:45:72:70:9b:5d:78:79:57:c7:
13:4e:be:03:52:c5:5b:25:a4:2e:61:26:2f:f1:07:6c:3f:ee:
d1:05:a9:e6:81:23:0d:13:bb:8b:68:79:1e:dc:3a:33:b5:6e:
95:f2:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:09 2025 by rpki-client