Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: OJcDNNtYxD75c4Pf4ag9mR3T6MReF3sFalzUQwT1d8E=
Subject key identifier: 7B:79:94:63:B9:70:6F:A8:19:73:82:D0:3A:8E:23:1C:20:C6:6A:46
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 01962B2A0030A958BB7F379A9999AED830F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 18:01:34 +0000
Manifest this update: Sat 12 Apr 2025 18:01:34 +0000
Manifest next update: Sun 13 Apr 2025 18:01:34 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: iTv7+nSCISabTyyaT479MSbaRY3d0Ec7yQmZwcAn73w=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:00:30:a9:58:bb:7f:37:9a:99:99:ae:d8:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Apr 12 18:01:34 2025 GMT
Not After : Apr 13 18:01:34 2025 GMT
Subject: CN=7b799463b9706fa8197382d03a8e231c20c66a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:ec:c7:0b:72:96:75:43:a7:3a:cb:ef:ea:
42:0a:d2:1b:34:b7:da:0c:39:ab:8c:a1:4a:e4:db:
39:8b:89:37:31:f4:82:be:2a:82:74:b9:b8:93:f9:
2e:f2:89:2c:38:b5:54:80:52:c3:c0:bf:e1:85:4d:
02:74:eb:1e:2f:cf:7b:6a:af:6e:94:1e:35:f2:ce:
57:d6:19:48:07:dd:79:e5:e7:6a:82:57:6c:55:c5:
e7:20:e1:9e:3e:8b:20:a8:cd:59:9d:8a:c5:51:97:
f9:1b:3f:c1:4c:ea:bf:bf:96:ed:8c:09:11:82:1e:
46:6a:9f:78:1b:89:4d:8e:ce:c0:05:8b:2f:d9:e5:
ef:61:78:6b:67:12:37:4f:61:4d:96:2c:d4:ef:ae:
95:f1:9a:19:1b:3d:24:01:dc:0e:a7:3d:88:3c:27:
5b:08:0d:41:06:0e:d8:5e:e5:8f:c8:49:c5:e4:ad:
8d:07:f5:1c:7e:f4:a2:13:a5:ce:4c:63:57:42:45:
72:a4:b4:0c:4c:6b:76:66:b9:a5:86:2d:2f:af:ee:
da:5b:c6:3d:fc:e6:b3:92:70:0d:b0:de:c7:70:29:
da:b4:37:86:ad:84:c2:d6:25:5d:02:a3:73:8d:43:
7a:62:59:78:2d:fd:c6:80:57:d5:bd:da:af:c9:54:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:79:94:63:B9:70:6F:A8:19:73:82:D0:3A:8E:23:1C:20:C6:6A:46
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:db:39:ff:52:a4:26:7b:b8:f4:aa:0d:30:f0:dc:1b:8e:
d3:d9:bb:e5:a4:47:5e:da:c1:5d:75:be:8e:04:db:3c:33:2c:
3c:d4:25:bf:04:50:1a:3f:d1:ac:17:91:3a:ea:53:59:ac:4f:
5b:65:6c:d7:35:57:c5:6c:1d:15:62:89:80:fe:11:39:89:f3:
c1:90:24:e5:54:17:4b:ea:66:e6:20:01:42:a4:d7:64:7a:07:
00:f9:98:e8:15:b3:b5:23:ef:95:cb:9d:6c:3a:45:6f:96:9b:
a3:09:d0:ad:11:55:1f:de:06:47:a5:8c:af:08:21:21:25:c0:
7a:fe:cd:9b:19:17:81:1c:27:ab:c0:8d:bb:3b:79:03:ed:7d:
90:ae:da:99:70:41:0f:58:53:fa:4e:4d:cf:c5:18:9b:d1:0b:
70:49:e5:f4:0c:80:f0:b1:8c:e0:4b:7c:6c:4c:2f:97:8e:64:
64:da:da:a4:d2:a2:a4:d4:72:0f:77:eb:ba:55:5c:e7:22:b4:
14:ac:ae:3b:8d:d0:3a:30:5b:48:52:ef:43:c0:61:88:42:e2:
c5:52:37:eb:b2:75:10:e2:06:38:ac:ba:86:64:97:2e:57:78:
75:68:ec:07:f9:bb:20:de:4d:1f:1f:b3:e9:48:ce:66:78:e5:
8d:81:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:42:40 2025 by rpki-client