Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: lvfPveED4oOfBjMRaUmeyGxDTca/nFDliJi7F1X4fWY=
Subject key identifier: C5:C1:2D:04:BE:E0:A3:AF:F8:A0:61:4F:CF:BC:ED:2D:50:99:6D:74
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 01965EDFF618D4FCBBB364BDA2E1F1C1C411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 19:00:57 +0000
Manifest this update: Tue 22 Apr 2025 19:00:57 +0000
Manifest next update: Wed 23 Apr 2025 19:00:57 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: qltYsIxNZOKXPbsD/AJ8mmotMJx2M0sWcD/rsDLSQjE=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:f6:18:d4:fc:bb:b3:64:bd:a2:e1:f1:c1:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Apr 22 19:00:57 2025 GMT
Not After : Apr 23 19:00:57 2025 GMT
Subject: CN=c5c12d04bee0a3aff8a0614fcfbced2d50996d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:b7:24:f8:ac:be:9a:8a:2b:00:2f:d8:50:
2d:da:bf:c7:17:20:97:9b:b5:e0:05:f0:c9:c0:e9:
30:53:9b:e0:b1:6e:d5:d7:8f:d5:4f:f7:6e:3c:75:
5a:66:ab:9c:4a:78:1d:46:de:0a:c9:ea:eb:3f:32:
38:99:54:04:ab:50:77:97:4a:b7:6c:77:9f:ed:02:
60:90:45:45:a5:ba:ee:1c:f8:c2:bd:65:46:64:54:
08:61:b5:27:e6:95:c3:67:95:37:6c:ee:3f:29:d4:
22:29:8a:09:ed:34:1b:4a:98:a5:63:e2:24:ba:a9:
c7:95:25:52:c9:c8:63:30:5c:99:3a:0f:97:e2:26:
53:84:79:60:65:a7:1f:a2:fe:8b:35:4a:e2:48:1f:
5b:f5:77:80:70:3f:ca:9e:2e:59:99:97:47:f8:88:
90:f3:02:fc:f6:80:a6:b5:c9:03:8b:a7:bb:97:07:
81:8a:2d:8e:da:35:53:6b:b3:85:64:a1:77:3b:6b:
16:31:6c:36:96:fa:07:58:86:d1:a5:de:32:7d:11:
78:bb:a8:49:a8:a3:46:63:2a:8c:dd:7c:df:c3:98:
36:d4:73:f1:68:54:5c:8e:85:fb:03:a3:53:01:ab:
24:a4:22:ce:f5:c7:bc:ec:fa:d0:23:59:76:f9:94:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:2D:04:BE:E0:A3:AF:F8:A0:61:4F:CF:BC:ED:2D:50:99:6D:74
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:44:7f:2c:dc:01:f9:99:ee:cb:b8:b4:89:7f:ab:37:ad:
b1:02:1c:0a:76:cf:29:d3:b0:db:76:db:b5:ab:67:49:35:bc:
6e:da:65:66:9c:c0:ad:a9:8e:34:cc:59:7f:d8:70:21:d9:7d:
83:53:51:72:d4:ee:30:3f:1f:e8:a6:9d:2a:33:dc:30:49:4c:
84:db:99:56:42:d0:d0:a6:37:b8:ea:e0:d1:02:2b:71:fb:1b:
d6:e9:40:be:67:61:70:23:6b:d8:d9:b8:7a:74:6f:9d:5d:12:
eb:8a:e4:d8:de:30:e0:4a:94:cf:3b:0d:fe:ef:42:8a:82:16:
a2:0e:ba:a5:49:e0:2c:0a:c0:66:23:a8:1e:e8:ab:63:7c:35:
2a:21:0a:cf:fb:9e:dc:96:f3:44:dd:42:bf:41:4a:10:f0:4d:
8b:c7:81:66:c5:66:b3:55:06:4c:e9:d2:2b:59:32:e3:35:d1:
ce:63:e5:91:e2:a1:91:e3:9c:2f:53:ce:c6:b2:c5:8b:2f:36:
0d:79:f3:e9:d1:a8:ab:ea:d3:e8:ae:58:a7:40:87:10:67:1e:
50:92:4b:cf:bf:61:00:70:ae:cf:4f:f0:88:8f:bf:ea:36:ff:
34:61:8b:ca:ca:14:36:ec:f6:40:a3:de:19:12:58:ca:92:fd:
4d:eb:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:27 2025 by rpki-client