Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: 1wbyojBiepcQky2HqJE/PWx/on/NOSY5q6A8gy+AhiE=
Subject key identifier: 54:2A:5E:BD:36:5F:4E:7D:23:1C:F4:A5:3B:F7:C6:36:BD:AD:6F:F3
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 01964F358C27AF2A9513E996813471621FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0A53
Signing time: Sat 19 Apr 2025 18:00:31 +0000
Manifest this update: Sat 19 Apr 2025 18:00:31 +0000
Manifest next update: Sun 20 Apr 2025 18:00:31 +0000
Files and hashes: 1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: AXr3ceaEHqaa/pnh0wTaqqZtUp8ida0+JI/2vvWWC8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:8c:27:af:2a:95:13:e9:96:81:34:71:62:1f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Apr 19 18:00:31 2025 GMT
Not After : Apr 20 18:00:31 2025 GMT
Subject: CN=542a5ebd365f4e7d231cf4a53bf7c636bdad6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:5d:48:bf:fe:ef:b0:a7:6f:6a:7f:70:47:
f4:fb:2b:b1:13:3e:38:46:71:76:2d:b5:d4:9b:ca:
9e:af:59:84:db:84:e8:20:80:2c:e0:41:d1:64:25:
6e:71:36:b5:97:b9:ea:f8:70:e1:fc:ae:9f:bb:95:
f9:08:00:18:47:5b:b6:56:f6:48:6a:0a:6a:65:3c:
72:1c:eb:d1:13:b0:05:73:69:30:a3:01:ae:19:11:
f8:63:51:6f:0a:a6:0b:84:20:d0:84:ff:c4:f1:7f:
f9:7e:85:51:51:7e:bb:0e:35:95:59:3a:4a:1c:85:
e4:a9:94:3c:eb:5d:84:15:37:c3:4f:06:1c:a3:86:
9c:76:3f:31:46:cc:29:52:fa:a7:88:ae:0e:48:49:
ae:47:8b:12:51:ce:e6:26:9b:f4:41:2e:84:c9:9f:
05:3d:b3:f8:b5:01:52:d2:f9:b6:33:e0:a8:3a:38:
4d:b1:24:4d:14:4f:bb:c3:c9:57:e5:86:78:1f:1a:
7a:4b:b2:6b:bf:da:66:b4:a0:47:85:e3:49:db:bc:
f9:a9:28:2b:81:7b:53:c8:13:8f:02:bd:c6:1c:e1:
af:34:03:36:ec:2e:ff:a0:c0:5b:bb:12:fa:f0:bf:
fa:e5:23:3e:0d:84:00:b3:9d:ec:1e:be:39:41:b8:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:5E:BD:36:5F:4E:7D:23:1C:F4:A5:3B:F7:C6:36:BD:AD:6F:F3
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:d8:48:8c:8e:c2:81:09:fc:84:52:8b:38:a7:48:05:3c:
e8:03:11:b7:d7:1e:bb:58:93:27:cb:ef:30:1c:7f:df:0f:43:
57:65:2d:d0:39:eb:9e:0c:0e:c2:b1:68:db:f1:51:46:57:ab:
ae:d0:be:02:be:1e:cd:59:f1:e9:5c:db:01:69:6e:18:a0:48:
f5:38:1f:e0:43:a7:61:a2:be:15:34:62:b8:03:22:d4:80:18:
a6:8b:68:ee:8f:d3:dc:ef:3a:d6:01:7f:01:25:da:79:d8:68:
38:de:75:03:74:2f:31:04:a4:4d:f2:77:58:3d:72:b4:0f:22:
e6:d5:60:0f:f4:40:4d:2b:6e:6d:4b:f5:90:08:ec:60:95:57:
ce:fe:40:8b:cd:f7:ba:93:ab:30:ff:11:53:1f:c1:f2:37:25:
fe:4f:16:92:03:03:86:7d:c7:f5:f8:46:70:23:50:31:aa:f9:
09:55:f1:48:fe:f2:3e:4f:2d:25:6e:d0:be:26:f4:66:c0:a3:
56:79:f7:fc:9d:79:a0:b5:89:0d:38:1c:1d:01:89:03:1a:a9:
e4:ce:ce:4c:11:25:0b:81:03:50:48:62:d6:2a:f1:a0:91:c0:
c2:76:65:ac:70:72:9c:22:51:bf:07:dc:1c:73:27:5c:05:e5:
e9:56:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:34 2025 by rpki-client