Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: WSJGSSXkFi5W+8zJHTB4GJ46kF7Iy0QSWzLilDjbh3Y=
Subject key identifier: 0B:5E:D1:A7:C6:8A:13:24:65:BA:B7:75:4D:D0:AE:91:55:27:0C:8B
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 019655386BDF1A2CC60D3C57C474F998552D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 0640
Signing time: Sun 20 Apr 2025 22:01:23 +0000
Manifest this update: Sun 20 Apr 2025 22:01:23 +0000
Manifest next update: Mon 21 Apr 2025 22:01:23 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: OYkHvh5geSO//hnwhAE03LAkVa6uVD5koE64C8XqW3c=)
2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:6b:df:1a:2c:c6:0d:3c:57:c4:74:f9:98:55:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Apr 20 22:01:23 2025 GMT
Not After : Apr 21 22:01:23 2025 GMT
Subject: CN=0b5ed1a7c68a132465bab7754dd0ae9155270c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:34:70:39:5a:60:60:3b:91:f3:9e:f9:02:
b2:49:ec:a6:ba:64:9b:81:4d:5d:70:b7:2f:a2:38:
aa:36:e8:7a:5d:2d:1b:37:d5:c0:a5:21:a7:17:2f:
7c:8b:72:cf:31:cf:b6:6a:96:34:bc:e3:5a:85:bb:
0a:02:da:8f:49:68:b9:bf:4d:cb:6f:8c:ff:90:bc:
c4:cd:97:bc:34:d5:55:07:00:f0:f8:00:8b:a4:ca:
00:64:d9:2b:26:66:1f:2f:84:b0:3b:63:6e:3c:aa:
71:fc:48:57:f9:68:04:af:ec:a5:a3:87:c5:da:6b:
18:c8:8a:09:6e:b4:c3:93:72:e2:23:ce:ec:3d:99:
65:f8:ba:31:09:22:a7:e7:2f:8a:19:44:54:bb:4c:
df:c2:51:83:63:cf:14:a1:c4:e0:8d:3e:86:79:f9:
7e:09:87:17:e3:51:d7:48:09:c7:80:ed:5e:aa:b0:
c2:13:96:3e:e4:1d:4b:4f:bb:e3:1b:9f:b8:24:62:
72:19:9c:6c:4f:71:36:d0:e2:72:26:0e:eb:e6:fa:
77:24:d1:ac:da:e4:d3:cc:70:e9:71:a6:0d:e4:64:
24:ea:98:9c:a7:a9:8e:66:34:86:af:98:f9:5e:97:
76:2d:29:83:a5:50:18:6a:4b:95:3a:83:b9:00:36:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5E:D1:A7:C6:8A:13:24:65:BA:B7:75:4D:D0:AE:91:55:27:0C:8B
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:e6:40:9d:e2:5b:47:0d:0c:d8:49:e8:e0:6d:df:1e:d5:
71:e8:9a:10:ef:a7:1d:7f:68:e6:8d:ef:af:cb:fb:df:9e:dd:
65:ee:a4:00:c4:fc:25:4f:b1:ba:60:e4:61:5e:ad:ce:2c:ba:
6f:b1:d0:12:44:0f:46:75:f9:fe:54:9e:49:97:fb:30:eb:16:
4d:da:0c:3f:d0:a7:11:84:0c:48:ad:b2:d6:21:0f:f0:b9:2c:
fc:c8:e3:0c:7c:86:b8:b9:bb:ff:dd:11:4f:ca:ca:cc:90:a9:
fd:e7:2d:18:1d:40:66:83:bf:f8:ec:0f:a4:86:2e:b8:7a:d8:
c4:95:ff:e5:47:fd:af:0d:e8:a4:d7:33:28:66:ef:cc:55:65:
61:8a:ab:4c:1e:4b:21:2e:23:c2:d0:97:9f:ae:5a:f4:d3:be:
89:4e:4b:76:3c:2d:9b:9f:38:06:d5:e6:0a:ef:a9:0a:64:f3:
49:e2:a6:48:e1:61:53:33:cf:22:72:5a:14:e6:96:f7:1c:3e:
e6:c8:dc:f5:e5:59:dc:b9:da:f2:32:e4:46:5b:87:7c:51:49:
e1:0d:81:e4:69:07:27:1b:cb:e6:45:28:3b:96:4d:1b:2b:45:
49:9f:9c:ac:05:77:f7:7f:65:4e:48:19:d6:a2:97:11:13:a0:
1a:4f:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:35 2025 by rpki-client