Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: gRw3PZ0Zv5gnRl5phFFC83vAijvtJahcFbFuLsacPfU=
Subject key identifier: E6:3C:60:EE:EA:CA:21:01:E3:9E:0F:A6:06:D4:74:02:82:55:D9:CF
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 01965A94D7582DA442B9D10CF0BB25B87B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 23:00:25 +0000
Manifest this update: Mon 21 Apr 2025 23:00:25 +0000
Manifest next update: Tue 22 Apr 2025 23:00:25 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: pl7LMbcp/7cKohgZTMEnBqhYQcLjtzEOA01nq1N9N9A=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:d7:58:2d:a4:42:b9:d1:0c:f0:bb:25:b8:7b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Apr 21 23:00:25 2025 GMT
Not After : Apr 22 23:00:25 2025 GMT
Subject: CN=e63c60eeeaca2101e39e0fa606d474028255d9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:00:47:c9:4a:49:24:a6:60:cd:d1:89:e3:
44:a1:34:13:36:d9:3c:17:89:4c:22:f1:52:72:45:
43:6f:fe:4a:15:69:4c:7c:87:b8:f9:50:22:91:7e:
34:03:ec:6f:8d:67:79:3e:97:45:c8:7a:6a:0c:02:
02:33:8b:67:32:4e:97:12:1f:6d:22:f3:df:02:e3:
d7:b3:b6:fa:36:fa:b1:02:07:ab:e4:fd:fd:d5:77:
4c:62:63:94:92:4e:62:bb:d8:8f:50:dc:8f:5b:da:
cb:86:5d:81:bb:5b:1e:00:d8:b5:4f:f3:24:59:19:
0b:18:79:8c:d7:72:b8:f3:e2:04:3a:10:4c:1d:9e:
a4:13:32:c8:b8:05:6b:20:4f:f8:74:08:62:c2:37:
c4:44:9f:dc:20:e3:bf:d5:2a:8f:22:b1:74:41:cc:
9c:71:9d:c9:d9:44:c3:db:7e:22:f5:dd:8f:71:ec:
5b:9d:9b:98:9b:7c:2e:46:a8:90:18:88:91:a6:01:
54:61:5d:d8:3f:95:7a:98:66:e9:24:01:bd:83:19:
da:af:81:85:e3:f7:d7:d3:d0:48:71:29:f6:76:84:
dc:b1:b3:71:8e:a1:9e:4f:b0:78:7b:f3:00:77:f4:
6f:a5:a2:c2:9d:76:32:24:26:d2:7b:97:0f:0a:30:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:60:EE:EA:CA:21:01:E3:9E:0F:A6:06:D4:74:02:82:55:D9:CF
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ef:28:c9:ee:4f:5f:d6:ee:91:60:c9:fa:9f:d0:a3:01:f7:
af:44:e8:33:7d:6c:56:e7:14:51:31:9a:49:5d:d4:1a:23:e3:
d1:d1:37:a7:ff:0c:a7:54:ff:ff:51:a2:cf:7a:be:59:0d:37:
78:df:b5:aa:09:bb:15:c8:ca:2d:07:b8:fe:58:04:a5:24:b8:
fe:99:c7:8d:31:d6:0f:71:c4:87:db:f0:a3:79:69:d3:1b:e0:
bd:d3:27:47:3f:46:84:c4:6a:e6:f3:b9:45:8f:e0:7b:a5:bb:
4c:f9:50:06:cf:4f:7f:a0:f7:51:90:f5:b8:b2:87:b8:93:fc:
01:d5:fc:1b:ce:1f:cb:bf:47:99:63:40:69:3b:5d:b6:f2:80:
95:26:f3:e1:4c:da:e8:7d:b3:35:5a:c1:e3:0d:02:6a:25:4a:
97:d2:2d:aa:ae:24:b9:15:ea:19:7e:90:cd:3f:51:15:f5:14:
f6:e3:79:c0:35:fe:f6:e6:b3:d4:e3:07:a9:a8:f3:d5:ea:cb:
65:2a:f8:70:f4:6d:31:d3:be:b6:87:28:bb:8d:cb:02:d3:f8:
a9:e4:2f:5a:6d:54:b7:3a:47:5c:d5:dd:c1:a0:18:b5:bc:2b:
e0:cd:35:71:2e:16:1f:5c:56:02:dd:5d:2e:16:23:1c:f3:3e:
c5:16:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:17:52 2025 by rpki-client