Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: JQlosSEw0OwAjIcydHEON9cO8K88GmlqZg08byzu+Xs=
Subject key identifier: A9:42:66:A0:D2:A7:7C:D4:00:65:B5:B0:70:D6:22:D6:8C:28:E3:E9
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 019650488E5896FCD9CF557D05ADAD9865E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 23:00:54 +0000
Manifest this update: Sat 19 Apr 2025 23:00:54 +0000
Manifest next update: Sun 20 Apr 2025 23:00:54 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: JDspe+urzJ3KhzJ/mY5FO0y0ziJpSP+c93to342bPW0=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:8e:58:96:fc:d9:cf:55:7d:05:ad:ad:98:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Apr 19 23:00:54 2025 GMT
Not After : Apr 20 23:00:54 2025 GMT
Subject: CN=a94266a0d2a77cd40065b5b070d622d68c28e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:20:b4:d6:92:9c:f2:50:c1:b0:66:5b:af:
1d:4e:ef:b4:96:3d:36:5d:39:28:77:39:f5:2a:60:
61:2e:6f:b0:00:a9:93:08:93:d2:8f:ea:26:f9:d3:
dd:11:72:1f:16:44:2c:04:7a:70:7f:dc:f6:0e:10:
8b:c8:0e:e7:d6:a9:e7:59:b8:ad:20:2b:80:8f:80:
e0:e8:07:18:11:e5:6c:fb:0f:0d:a9:6f:5a:7b:13:
a8:90:25:58:1d:c5:ac:1e:93:d1:be:29:14:3b:5c:
8b:05:cf:6a:98:50:c3:88:d4:21:d2:3a:db:fc:68:
77:1c:7c:6a:fb:9e:59:42:7a:19:c3:18:f6:9a:95:
05:ec:9c:64:9c:5d:76:56:89:58:30:37:88:af:f0:
43:f2:50:af:e9:53:1d:ff:ad:48:a2:b0:51:40:48:
e7:ae:a8:48:f3:30:0f:96:60:a4:93:ac:46:1e:46:
ce:d6:da:e2:9e:8a:14:fe:1b:e1:4b:2e:bd:da:b9:
d9:1f:f8:e8:ac:01:1e:f1:ad:a8:01:9a:9a:36:62:
5d:e7:41:20:06:1a:ca:3b:e5:c0:0e:42:29:0c:18:
f4:3f:c3:4a:62:22:e2:69:45:9b:73:dd:62:93:9a:
5c:62:0d:53:ac:2a:1a:16:ea:e7:09:0d:4f:72:56:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:66:A0:D2:A7:7C:D4:00:65:B5:B0:70:D6:22:D6:8C:28:E3:E9
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:99:a2:74:52:d5:4a:3d:1b:36:2a:bf:a2:6a:22:32:40:88:
07:c0:98:37:7c:7d:3f:76:e0:27:30:42:c4:8f:ad:96:8f:b9:
23:43:9e:75:ac:26:49:9a:64:dd:c7:9d:6c:82:d5:b5:35:1b:
9c:ac:b8:53:c0:24:ff:5e:c5:d0:1b:09:2e:d9:b7:c6:14:41:
35:85:9c:a2:a6:03:9c:92:28:99:1e:f5:86:1c:71:80:8a:a2:
64:02:59:45:77:ba:69:d8:b7:97:28:c7:ed:b6:4a:d8:c5:61:
6f:fc:aa:c4:d2:46:de:1f:82:c4:c2:f1:1c:fd:8f:a7:05:27:
ba:37:c9:5f:7c:0e:05:ef:38:2f:8c:fc:68:73:fd:f4:c4:02:
96:6d:1d:40:d6:86:d9:7a:00:75:43:e5:6c:bf:f9:46:1e:08:
f4:4d:cb:24:5f:7f:cc:42:c7:0e:42:98:36:5f:5a:94:53:bc:
2f:7e:df:6f:b9:ab:96:23:3c:5f:b0:13:4c:33:1e:fb:e9:60:
ee:05:b9:db:77:3a:90:51:24:8c:3c:70:6a:19:48:4c:3c:7b:
6a:f5:1e:4d:a7:7c:dd:cd:33:10:77:d6:53:c0:7a:45:dd:63:
0f:24:a9:18:ce:37:b8:0a:8a:be:dc:4a:fc:96:59:91:83:58:
8f:d0:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:58 2025 by rpki-client