Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: sQ2D8ShhXMWoCtxF6Z1hsdtR1GDyDXZ48Ypx4yJ7A38=
Subject key identifier: 50:DB:90:A2:1B:ED:EC:1C:C6:43:5A:12:45:BC:F0:54:F0:AA:3A:9B
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 019654CA085404AB9468B189C0D047B13865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 0C85
Signing time: Sun 20 Apr 2025 20:00:48 +0000
Manifest this update: Sun 20 Apr 2025 20:00:48 +0000
Manifest next update: Mon 21 Apr 2025 20:00:48 +0000
Files and hashes: 1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: NozKMHcya73QcdgmKqtB9c5PJEhz2Yg3Jpuk91vejBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:08:54:04:ab:94:68:b1:89:c0:d0:47:b1:38:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Apr 20 20:00:48 2025 GMT
Not After : Apr 21 20:00:48 2025 GMT
Subject: CN=50db90a21bedec1cc6435a1245bcf054f0aa3a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:e6:da:c3:a3:2f:85:74:9b:7d:ff:e5:36:
49:ee:06:25:be:02:94:d8:28:3c:4e:ec:c7:3f:3f:
2b:7c:e0:82:6e:d3:7f:07:fc:1a:07:ea:b3:38:a1:
e4:c8:f6:6c:56:8f:30:d3:29:85:1c:a6:5e:49:a1:
f0:77:6a:a3:61:31:ce:c4:6d:02:e5:78:e5:24:d2:
be:15:2a:aa:67:4e:89:ca:1b:39:1b:d9:6a:1d:8f:
75:69:b3:1f:8f:26:4d:73:d7:d7:e0:31:cb:85:8c:
9c:3d:d8:3b:d1:f0:0c:eb:8d:75:71:fd:3c:4d:d4:
02:86:53:31:a3:da:62:ed:13:14:a9:e0:c4:7f:75:
a2:25:5f:13:0f:fd:52:cb:a1:67:b8:cc:9e:f4:e5:
58:3b:ef:52:80:56:cb:f2:63:f8:8d:a0:7b:a3:f8:
ec:0a:08:91:9f:ec:87:74:4c:17:73:6e:41:18:b8:
ee:6c:6a:20:f4:b7:cc:80:0e:49:dd:0e:1a:41:89:
e8:1c:eb:4f:47:fc:4e:e4:fc:3a:8f:63:87:16:a9:
5d:32:a6:ac:6c:12:55:6c:1e:d3:4e:6f:4b:ce:49:
7c:73:f5:6d:a7:96:65:7a:80:fe:61:57:5f:26:06:
7d:0c:da:fe:78:af:98:81:85:4d:dd:33:9b:b4:6d:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:90:A2:1B:ED:EC:1C:C6:43:5A:12:45:BC:F0:54:F0:AA:3A:9B
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d4:9d:98:92:61:64:6c:38:5b:2d:e1:5d:84:71:3e:11:28:
55:fd:91:43:71:98:fd:d7:27:7c:87:38:c9:86:9e:2d:6f:68:
8d:f3:72:45:9c:e0:b7:bd:9e:42:2a:e6:5e:fe:7f:d1:cd:47:
51:9d:8d:98:11:28:4e:ce:82:c6:74:32:0f:8a:d7:73:10:43:
26:1f:a3:8f:16:a4:03:fd:d0:a3:97:5b:1a:f3:98:4b:a5:8f:
7e:11:39:88:89:00:4b:6f:82:09:9e:a7:fd:28:b2:13:96:10:
95:36:9d:63:49:5a:7c:76:e7:26:1a:d1:be:e6:da:2c:6b:c7:
e5:74:82:9d:6a:b7:c1:6a:de:00:c5:49:7c:96:65:2b:91:15:
67:f6:fd:5c:ab:2e:f1:e2:e2:cc:13:f4:b0:8e:98:36:02:13:
f5:51:33:ce:6f:40:1b:3e:2d:14:da:74:74:24:2c:f4:a8:2b:
ae:b9:10:92:a8:6c:40:db:b1:06:c1:57:9a:f7:7e:38:d3:88:
cf:f7:5b:42:15:19:66:72:0d:28:33:b2:39:df:8a:eb:5e:2a:
25:fb:c9:2f:5c:ce:76:b5:5b:0f:96:b6:8b:bf:fd:cc:f5:9f:
3b:eb:f6:0c:4a:63:b5:66:de:a6:51:07:b0:c8:9f:b9:6c:a1:
ab:9d:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:22 2025 by rpki-client