Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
File: giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json)
Hash identifier: ReQVR0ghakQCkCH7a3F5vbudOy7+rXIT7qts7n4tqDc=
Subject key identifier: 77:ED:4D:FA:A7:E4:17:E7:01:3C:A9:14:3D:0D:65:2E:E5:1B:B9:50
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial: 01964FDA9DD19330E684B948BE14D95240A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
Manifest number: 13EC
Signing time: Sat 19 Apr 2025 21:00:49 +0000
Manifest this update: Sat 19 Apr 2025 21:00:49 +0000
Manifest next update: Sun 20 Apr 2025 21:00:49 +0000
Files and hashes: 1: bHa5FimsimJ7r5ToFYrryDiB-9M.roa (hash: fOdUqsDSfmPIMyaQ7PWVxrcyqzptZELP3xikWCnwSh0=)
2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: 92p2qCWlPQ7nZEA/zbsB1oL4Inv03ZOJMdydHwAQg9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:9d:d1:93:30:e6:84:b9:48:be:14:d9:52:40:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
Validity
Not Before: Apr 19 21:00:49 2025 GMT
Not After : Apr 20 21:00:49 2025 GMT
Subject: CN=77ed4dfaa7e417e7013ca9143d0d652ee51bb950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:c2:8f:b8:fb:4f:43:01:c2:9b:be:29:df:
ef:3e:9f:f4:fd:5f:d4:e7:e8:8b:bd:c9:49:bd:f1:
07:1e:2f:49:0f:99:4d:0d:2b:f1:8a:66:d7:8f:cf:
25:01:53:31:b3:01:7b:ef:49:b4:e8:1a:95:52:d8:
54:3c:4a:ef:8f:cb:01:d3:9c:bb:af:c7:7d:bc:d2:
6d:18:3c:c3:76:f1:90:9f:85:28:26:a4:ef:ac:69:
fb:c4:4f:2d:81:f2:59:d6:52:74:3d:f1:bf:5e:ad:
e0:8b:56:a2:cb:1f:34:92:cf:3c:c9:96:1f:17:b8:
50:d2:8f:aa:2d:10:6f:d5:1e:27:5d:2d:5d:cd:11:
e5:68:f1:63:84:6b:dd:93:21:a9:0f:47:44:c1:e9:
17:6f:05:a4:1a:67:00:5a:1f:af:5c:eb:0a:72:9e:
d9:67:6a:d7:2e:6f:2d:8c:c4:99:2e:3a:15:40:2c:
7f:a5:43:35:4f:88:b1:c8:8d:8a:0b:25:91:e1:b4:
b1:34:fd:0e:00:34:f2:d6:48:fb:98:99:de:e5:f6:
6a:91:39:98:af:b4:cc:a0:fb:d7:28:4f:0e:b9:2b:
c8:ce:21:a8:d4:b3:5a:4e:75:c0:89:3b:c0:6d:88:
06:00:6f:8b:c6:b3:19:95:b2:a6:8e:0f:43:7d:98:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:4D:FA:A7:E4:17:E7:01:3C:A9:14:3D:0D:65:2E:E5:1B:B9:50
X509v3 Authority Key Identifier:
keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:41:47:e8:5b:ac:d2:15:69:93:9f:51:6a:cd:1f:94:ec:
21:a0:d0:e0:56:a2:b8:79:5f:aa:3f:05:e1:3d:00:5f:28:c1:
23:05:01:09:cf:1e:fc:f1:50:ff:17:e1:47:3a:87:7d:44:0a:
50:1d:3a:31:b3:4b:71:75:d7:66:ed:4b:4b:f0:8f:ee:a4:9f:
5c:81:c0:8d:25:18:f2:6b:64:5d:5c:a1:ac:e9:79:38:fc:99:
43:0c:4a:f1:0f:51:aa:be:33:33:76:bb:03:29:3a:22:20:cb:
22:3f:db:21:7f:4b:6f:a6:33:d1:f8:1f:76:46:c6:16:14:91:
10:3a:1a:c3:73:87:33:52:70:6f:0b:91:32:75:e5:ad:af:4a:
91:2c:1a:f7:ca:76:ae:8a:40:fb:f1:bc:72:a1:81:7b:27:18:
c9:a6:34:a8:0f:eb:4f:da:d9:8b:06:92:08:dd:ef:14:ec:36:
a4:a2:76:15:4b:96:f3:6b:4c:d9:97:1a:e0:54:a0:f8:1c:bb:
a9:e2:4e:8c:23:f9:fe:58:a0:12:ab:47:c2:b8:f5:54:4a:14:
09:f9:24:8d:11:eb:5c:82:d6:01:34:28:2d:48:45:7f:79:76:
79:d7:16:f0:b3:45:b9:2f:f1:41:63:dc:dc:71:34:c5:95:54:
c1:5f:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:10 2025 by rpki-client