Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: DCdCbvb8EzOr3no1mENi0+5hMWNeuk1h9yWiKYufvyg=
Subject key identifier: 72:93:B6:40:F0:88:26:43:B0:7B:A1:C9:CB:1D:ED:9C:F7:E5:01:F0
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019658DD5A46E4025F0004AC43DDF96B8CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 1124
Signing time: Mon 21 Apr 2025 15:00:23 +0000
Manifest this update: Mon 21 Apr 2025 15:00:23 +0000
Manifest next update: Tue 22 Apr 2025 15:00:23 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: Zral3kqJugZnOOCPfgZY1l2us8lRVY5YiyMoq3g2yxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:5a:46:e4:02:5f:00:04:ac:43:dd:f9:6b:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Apr 21 15:00:23 2025 GMT
Not After : Apr 22 15:00:23 2025 GMT
Subject: CN=7293b640f0882643b07ba1c9cb1ded9cf7e501f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:8c:8c:14:70:7c:0b:a6:50:9a:97:2a:ba:
71:9d:c4:d4:1e:0c:e9:07:4d:c5:fc:6c:3a:2c:80:
c0:70:c2:11:34:38:f0:90:05:42:df:3f:56:cd:6e:
c9:a3:71:71:75:b4:aa:28:92:4c:8b:b6:c2:88:9d:
27:74:d2:3b:13:38:28:48:af:cb:70:8b:c9:03:8d:
c6:23:14:8c:0e:e8:ea:b6:78:41:4f:d5:41:4d:2d:
ab:1b:57:b7:17:04:55:04:d0:fa:f1:19:e5:01:e6:
81:60:9c:58:23:cb:0f:cb:9c:27:1c:87:f3:b3:76:
5d:1e:94:44:10:c8:09:2a:a4:aa:65:61:3d:fd:96:
35:6a:1c:5b:b7:07:ed:fd:c5:0a:de:4f:aa:a0:8d:
74:52:ef:19:d0:32:12:81:97:4f:5b:60:ec:f5:a4:
95:01:32:79:75:5f:b8:8b:bc:16:81:fc:6e:2f:5c:
f8:5b:95:13:12:65:2b:ea:15:8f:4f:35:ef:d8:6a:
a1:25:72:d9:ef:2a:94:47:99:76:7a:5f:e2:ba:e3:
33:f9:fd:6e:d3:11:4c:9e:23:23:57:79:9e:c4:b0:
58:83:46:bc:71:d3:7b:17:c8:4d:3a:86:66:47:2c:
30:f9:51:c4:9b:4f:45:e5:91:39:4d:a7:4e:3b:55:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:B6:40:F0:88:26:43:B0:7B:A1:C9:CB:1D:ED:9C:F7:E5:01:F0
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9a:2c:fb:4a:32:31:f6:db:62:a2:ff:5b:33:87:77:89:a4:
19:ab:a7:9d:d7:b9:02:44:b9:e2:13:cb:9c:c5:4c:8e:f9:8c:
fe:1c:d2:9f:24:2b:8b:e6:97:57:b2:09:e2:0f:fc:22:42:c4:
ef:7e:63:ea:99:14:d4:a6:cf:90:d5:4e:ac:d3:ff:a5:18:82:
af:f4:22:c7:f6:4a:7d:07:1e:b2:07:ec:81:93:27:5f:d5:d3:
0c:89:2b:0b:54:fa:69:d2:20:d9:1d:bb:84:83:06:ca:08:89:
1e:18:f0:b6:b5:1d:b3:ac:13:d8:55:9a:b8:56:5f:94:4f:51:
93:e3:36:3c:24:0e:a2:63:d0:b6:dc:ef:80:f7:f0:f0:c2:8e:
0f:16:09:57:5c:da:22:93:c3:28:f3:4c:b3:2a:76:42:c8:b9:
32:af:dc:14:c4:cd:d4:7c:8b:25:a4:ed:86:b0:d4:44:fc:be:
f0:c6:90:93:3d:ae:d8:50:05:0a:1d:92:21:f3:0d:0c:3d:82:
5b:cb:b1:65:ad:c6:1c:12:31:20:6a:06:6d:e3:a3:90:76:ae:
3b:3d:0a:5c:37:f5:51:38:96:6f:44:93:01:7a:57:c0:12:e3:
ee:bf:d1:f3:a1:69:21:da:8a:4a:74:9b:58:e0:8d:31:5a:39:
21:17:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:24:30 2025 by rpki-client