Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File: gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier: jTajsMy53ccz6MpKPT0rdykreSbdz9TcMCiXT8CFscM=
Subject key identifier: 03:8B:B1:94:66:2B:95:66:B4:60:F2:82:F6:71:57:6C:9F:84:33:F6
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 019674F9FDB7B1068FFC738243A400BAC1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number: 07CB
Signing time: Sun 27 Apr 2025 02:01:02 +0000
Manifest this update: Sun 27 Apr 2025 02:01:02 +0000
Manifest next update: Mon 28 Apr 2025 02:01:02 +0000
Files and hashes: 1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: uuUNqxDbDmtBXboueUupqCy7Ml4SEmVk+krTwQj79S4=)
7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:fd:b7:b1:06:8f:fc:73:82:43:a4:00:ba:c1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Apr 27 02:01:02 2025 GMT
Not After : Apr 28 02:01:02 2025 GMT
Subject: CN=038bb194662b9566b460f282f671576c9f8433f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:16:f1:72:83:e3:d5:81:e8:cc:a3:5d:a4:
20:91:8c:c2:38:07:ac:20:06:55:76:1a:9f:ed:6d:
df:fc:3f:07:26:25:c3:d5:06:29:09:4c:cb:c3:ff:
bd:3a:d5:5f:cb:0b:28:4f:03:4a:f5:d5:44:d3:91:
4a:51:04:fb:80:dc:0c:2a:c4:6e:44:74:de:63:ea:
1f:3f:28:16:32:06:1c:8c:82:8a:11:fc:61:85:80:
e4:c8:ef:f4:34:2d:b5:89:b3:19:88:ab:92:80:fa:
2b:09:b2:16:35:9d:6f:60:85:9b:57:e5:96:b0:a9:
27:ee:3e:69:2a:b8:75:a8:fd:37:f1:e4:7b:d9:18:
8f:3a:be:86:a8:6a:45:37:f6:31:f1:f7:97:1e:c5:
87:d2:91:f5:f2:d4:cc:d1:10:9c:a3:e4:15:c3:9d:
c0:3f:e7:0d:6a:ee:96:a1:da:65:6f:f9:47:dd:ee:
20:de:44:87:d6:28:55:10:a1:6e:45:38:3b:dc:73:
4c:73:f8:3f:91:e5:e6:3c:6e:28:16:3e:57:da:8b:
0d:2b:26:4e:ac:be:f5:53:c1:86:cd:96:58:e4:ac:
3e:03:5d:d2:64:0a:04:0b:31:1b:63:6e:11:b2:90:
74:ea:62:94:5a:ba:39:f5:3e:7d:a1:a8:58:b6:53:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:B1:94:66:2B:95:66:B4:60:F2:82:F6:71:57:6C:9F:84:33:F6
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:cc:6e:9f:7a:f1:cf:0e:12:2b:64:c1:ad:b7:2e:b6:f2:
1c:4f:9a:18:61:1f:1b:dc:0b:7e:ed:33:7f:e9:9e:4c:53:37:
20:5c:39:7d:1b:e0:1f:7b:df:05:c3:5a:f5:ea:9c:d4:77:77:
94:fa:e1:39:6e:31:15:3d:f9:2c:45:84:40:36:ac:0a:90:6d:
a7:d1:e6:d5:6d:44:36:76:14:a4:d4:7d:df:03:bb:75:01:84:
e5:9d:51:c4:9d:8b:22:cd:f7:46:ba:9a:92:87:0f:6c:dc:81:
69:54:5d:42:c1:fc:d6:47:dc:a0:2f:cb:e6:73:9a:e3:6b:9f:
37:f5:3f:90:3d:17:89:b7:97:f4:ce:ac:1a:a7:2d:04:07:82:
ca:b7:68:e1:8c:56:bc:81:b7:8e:9c:88:32:71:8c:b9:ef:52:
1e:45:94:ca:6c:a9:01:a5:df:2b:06:58:f6:0e:65:8e:13:c0:
03:b1:9a:00:1b:57:8a:35:4c:41:b4:b6:bf:b5:e0:e5:3c:b6:
4d:12:2e:84:eb:5e:1b:20:e7:36:7b:64:4d:bd:10:6c:b3:65:
d8:49:3d:a0:c5:19:77:c1:cb:e2:f0:0f:b7:dd:3e:26:40:23:
d4:4e:c8:22:a4:65:2e:3a:67:7d:2a:84:0f:25:d6:ec:77:81:
da:9d:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:33:26 2025 by rpki-client