Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: cjnsTbgP0DGKHrHDzTi4Sv8Sw8BQbzU3UnNVNZ4BaNw=
Subject key identifier: 74:6C:67:B2:8F:1C:C7:AF:A9:D9:FE:45:28:CA:1E:19:95:B5:77:DF
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 019632E3F6727E183BC92F15F00867CBC86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 14EF
Signing time: Mon 14 Apr 2025 06:02:02 +0000
Manifest this update: Mon 14 Apr 2025 06:02:02 +0000
Manifest next update: Tue 15 Apr 2025 06:02:02 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: EHmG/Dwm+cVTUWXC+EZtJ6K7gudE42ye2HJeuYqRf84=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 06:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:e3:f6:72:7e:18:3b:c9:2f:15:f0:08:67:cb:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Apr 14 06:02:02 2025 GMT
Not After : Apr 15 06:02:02 2025 GMT
Subject: CN=746c67b28f1cc7afa9d9fe4528ca1e1995b577df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:5f:1d:7d:d3:d2:ce:00:f0:c3:78:d8:15:
d8:c6:de:cc:fa:31:21:be:84:72:9e:4b:f4:72:00:
9c:e7:11:d0:03:28:e5:a7:be:96:1c:20:f0:c9:79:
ca:a3:71:e4:3c:51:84:14:62:63:7d:bb:29:83:f4:
c3:22:d6:83:95:dc:b3:16:d6:ad:b2:eb:c9:3e:30:
9e:53:a8:62:03:ec:12:b5:91:23:b4:1f:b5:35:08:
59:0d:0a:27:2f:7b:2a:04:b2:62:8e:52:84:a6:8a:
3c:cb:e1:46:05:ea:d4:29:4b:fd:c8:26:8b:16:ca:
56:26:67:9a:44:67:ea:6e:88:e8:52:01:08:f0:71:
29:af:6b:44:7c:ef:19:48:7a:8d:b1:32:00:91:00:
c0:b9:10:1e:04:36:70:5f:b5:27:76:73:e8:1d:dd:
be:86:db:c6:83:5a:15:c3:74:7d:a3:df:8e:48:8a:
4c:ea:98:00:9c:7f:97:09:6f:2f:37:f0:20:e7:8a:
d6:b0:df:16:c0:ec:8a:2f:1c:a3:ba:4e:2c:d0:61:
b7:99:68:49:82:af:de:db:fe:34:11:9d:0d:7b:4e:
0e:f4:0e:30:a2:70:45:b7:b7:e7:9a:41:4e:87:bc:
2e:22:37:41:f5:fc:74:ae:33:06:36:c6:14:6e:3d:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:67:B2:8F:1C:C7:AF:A9:D9:FE:45:28:CA:1E:19:95:B5:77:DF
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:b5:e3:03:06:b9:91:e8:c2:2d:1c:5d:68:bb:e9:e1:d5:
c0:a0:f8:4b:e4:47:d2:56:d9:28:2e:aa:09:bd:54:45:d7:a9:
d5:08:8f:ba:46:e5:5e:1c:66:8f:81:85:10:ae:90:82:64:3b:
6d:d8:de:6a:65:c3:7f:d3:cf:df:2d:69:00:a8:f1:b0:cb:84:
65:e0:c5:40:80:65:8c:e8:97:fb:ec:b2:2a:e7:62:d1:e3:79:
92:44:14:05:5e:27:c4:76:ed:32:9b:03:d0:37:7e:0f:1a:f5:
90:27:33:a8:58:82:6e:c0:b0:37:18:ad:14:93:4f:63:21:25:
23:d8:f0:5c:25:c0:8a:ea:0c:c0:d6:97:1c:b8:dc:1c:0b:d1:
12:e3:98:61:7b:c0:75:b8:e9:37:6c:03:37:8c:f5:8e:e4:bc:
a2:3b:46:87:d5:89:10:6f:62:15:9c:5b:ec:8f:d4:7b:26:88:
3c:af:5d:8c:b7:65:96:13:8e:a1:a2:4b:f8:d3:f0:18:45:ca:
f7:3b:63:06:68:8b:f8:26:56:c7:dc:d0:1c:5e:4b:b5:08:35:
f3:d8:4f:ce:2d:d8:ec:3e:95:dc:75:9a:2d:8b:65:6b:16:a5:
55:79:b7:f3:45:36:b8:59:85:09:da:9c:7c:3b:bb:da:78:c2:
9e:51:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:57:30 2025 by rpki-client