Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: k3Om9bpiRQ2USRwVmBy3V+N058Kv85q+WuumTsYbk+4=
Subject key identifier: 0C:E9:42:C4:B5:B5:A6:E4:57:CC:FE:A0:D8:59:03:75:76:7D:D3:1B
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 01964E59D32918F07B3CB4C19C4422488775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 14:00:31 +0000
Manifest this update: Sat 19 Apr 2025 14:00:31 +0000
Manifest next update: Sun 20 Apr 2025 14:00:31 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: kgfij8wxYAEYSoqriMFwsoF1cbShtliUwDNbRA/8eIY=)
2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:d3:29:18:f0:7b:3c:b4:c1:9c:44:22:48:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Apr 19 14:00:31 2025 GMT
Not After : Apr 20 14:00:31 2025 GMT
Subject: CN=0ce942c4b5b5a6e457ccfea0d8590375767dd31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:aa:32:46:98:ec:b2:d5:33:7a:06:a7:bc:
7f:15:b7:4b:8e:02:48:42:b8:2c:c8:40:6c:cc:29:
ed:84:aa:7e:4d:44:20:e6:8c:65:d5:68:6b:96:5b:
f0:c7:f0:ab:44:27:49:ff:91:2a:7e:7f:67:1c:4d:
70:8d:78:bf:99:dd:bb:68:3e:7c:ad:15:42:fc:cc:
e6:16:16:e4:41:03:5f:28:bb:b7:b1:cb:bd:65:95:
99:d6:e2:fb:48:19:01:91:67:08:f3:0b:df:fb:a4:
13:37:01:ee:95:3f:88:08:3c:46:b6:69:81:9a:ba:
0b:cb:45:19:8d:61:65:ce:bc:61:5d:e3:07:b4:13:
36:ec:57:94:85:a9:69:a1:71:10:c5:70:50:1d:2f:
36:d6:99:a8:32:41:fc:f8:d0:b7:a2:b7:2f:2b:42:
7d:3e:5e:10:75:94:d1:d1:39:13:5c:fc:c7:e6:38:
68:8a:19:b2:15:14:a7:ae:4f:8e:e8:03:a0:5b:f8:
42:c9:04:ee:1c:e0:46:20:d9:f5:a0:5a:4a:4a:df:
24:46:f8:e5:f6:b8:a8:25:98:09:ea:35:56:42:b5:
c4:56:6e:b9:ad:e0:6e:1c:36:85:a4:77:b2:d5:96:
49:5d:a6:9c:21:90:9c:64:a6:96:5e:79:40:4f:e0:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:42:C4:B5:B5:A6:E4:57:CC:FE:A0:D8:59:03:75:76:7D:D3:1B
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ef:e6:93:0f:00:65:12:e3:2d:f3:7a:ab:87:46:50:af:69:
35:3c:f9:61:61:db:e1:9d:9e:5b:5f:9c:00:10:2f:0e:67:e8:
8d:99:6d:8b:ea:ab:4c:90:db:6a:24:bf:a7:2e:88:ea:95:2d:
af:20:28:a7:e1:fc:3c:28:d3:01:b4:8c:30:9e:a4:c8:29:1f:
db:76:00:f6:64:5e:23:95:3c:dd:94:59:29:9a:fe:dd:b6:6a:
c2:d1:a0:49:00:8c:06:8a:51:b0:76:2e:61:73:5c:96:a2:25:
86:e8:fc:a1:c3:7f:96:38:bb:4f:bc:eb:f8:a2:f9:07:e6:a7:
92:71:66:13:53:18:9f:a3:91:46:bc:52:40:45:c3:05:1e:64:
7a:92:09:89:53:c7:b3:9f:0b:81:ad:d7:55:71:c5:32:7f:61:
59:5c:41:b9:be:d5:e7:ea:ea:45:2b:4b:59:c2:5e:b0:51:a4:
04:17:45:e7:c4:ca:3b:4e:4e:dc:86:80:41:01:94:66:7c:e7:
4e:f0:d0:03:4b:ec:c9:d5:83:14:f6:e3:2f:22:63:86:aa:1a:
56:37:85:74:1c:9e:ca:f8:31:4a:e9:28:c8:85:3a:2a:fc:04:
b2:78:53:f8:1b:ca:2e:15:33:37:2c:81:00:00:0f:df:83:c2:
6e:b6:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:45 2025 by rpki-client