Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: lzFhYGtHpyDFOlw6forV/Sz76L4YMSPWq2o74wMFS0g=
Subject key identifier: 04:BF:0D:E4:D6:F0:4B:DE:4C:40:85:F8:36:76:C9:A3:7D:9C:0B:53
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 01964D7ED48D20AF866009DDCD5EF8C375A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0BDB
Signing time: Sat 19 Apr 2025 10:01:19 +0000
Manifest this update: Sat 19 Apr 2025 10:01:19 +0000
Manifest next update: Sun 20 Apr 2025 10:01:19 +0000
Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: RU13ohvyF+fw2dEnxrj8R7v79NJm2dSOb15OdJc0+s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:d4:8d:20:af:86:60:09:dd:cd:5e:f8:c3:75:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Apr 19 10:01:19 2025 GMT
Not After : Apr 20 10:01:19 2025 GMT
Subject: CN=04bf0de4d6f04bde4c4085f83676c9a37d9c0b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:c3:51:cf:d7:0d:50:99:d4:05:f2:3e:8e:
b5:b4:8b:ef:de:54:60:8a:37:10:36:88:f9:d9:8f:
13:f6:0e:17:62:81:81:a1:f8:a1:bd:fc:09:b3:0d:
09:98:40:e8:39:e8:67:59:d7:71:53:22:33:9d:67:
fe:2d:12:11:10:9d:bf:18:21:71:c7:2b:f4:b0:b7:
75:59:88:3a:e2:d3:04:2a:d4:4c:18:ba:2a:fa:b0:
d1:49:fc:52:15:1f:53:bc:8e:a7:04:c8:c7:15:71:
5b:6f:1a:38:c4:10:5e:e7:82:39:5b:15:51:f5:a3:
42:b6:af:46:c1:0d:17:74:ff:fd:8f:82:0f:5c:20:
6e:36:29:e3:ed:1d:d0:e6:1f:79:bd:97:48:e4:84:
bc:78:74:80:18:a0:d1:e4:6c:34:a1:6a:48:48:81:
dd:5f:74:ee:40:eb:45:5f:56:6c:08:2f:2c:1a:88:
38:97:88:c2:10:12:e5:52:38:00:af:a6:f9:4d:63:
d1:b0:a3:7c:d9:4f:cd:a6:cb:ca:01:5e:fa:08:97:
6f:34:21:4a:c7:e1:36:06:0b:1a:ca:0c:97:6c:36:
8c:d9:72:64:f5:8d:a7:61:6d:05:51:66:43:37:bf:
19:fb:53:2d:7e:6f:31:fc:1f:76:d0:4f:b2:1b:fa:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:0D:E4:D6:F0:4B:DE:4C:40:85:F8:36:76:C9:A3:7D:9C:0B:53
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:89:09:c4:86:9e:da:67:7c:88:fc:08:ce:c4:7e:53:44:27:
11:01:8d:58:f8:f0:4e:a6:7a:10:a0:04:9b:28:b7:a7:a2:e5:
22:48:b7:15:b6:4d:ef:ad:17:e5:33:98:b1:1c:bd:eb:77:98:
b9:b4:04:d8:16:de:a5:1f:83:b5:5a:f3:40:14:3f:8d:e6:56:
c7:3a:f7:86:c1:73:0d:34:db:13:57:91:b8:02:3c:29:f7:46:
a3:b6:27:8a:37:3c:ab:cc:bb:a8:ce:c1:c3:8e:6c:5a:5d:b9:
a0:63:a2:df:90:cb:58:7b:f9:7a:bd:22:26:6c:97:59:14:c6:
38:92:a6:d0:29:07:74:58:a5:bc:40:1b:59:7e:2e:90:ef:f7:
03:0d:26:a4:fe:1e:ad:3d:57:f5:de:67:df:d9:bd:b3:cd:99:
1f:66:cc:0f:53:0b:84:1e:97:c2:f9:8b:28:64:60:a0:d2:97:
70:6e:1b:1e:53:55:7e:5d:9a:97:0b:c6:eb:be:5e:1b:66:e1:
82:2a:81:f4:eb:21:b9:40:ef:bd:8c:ae:cf:7a:e4:9a:ed:b6:
18:42:12:b0:dd:ad:b0:2e:6c:93:ea:f1:fc:3d:fd:bd:9b:5a:
aa:4e:93:f8:ed:f1:0c:c9:9d:a6:4f:45:60:5a:bd:05:5c:89:
d1:a7:85:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:39 2025 by rpki-client