Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: mfuAeW0IIF+GJjSNXM8UieR1cMMeWdRTCjPKN6nwKb0=
Subject key identifier: 32:52:6F:05:F6:1C:4E:C8:0C:5C:0E:AD:4E:66:08:E0:87:6F:7A:0A
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019674C250A68668C36C9F6AAA154C55BA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 091D
Signing time: Sun 27 Apr 2025 01:00:13 +0000
Manifest this update: Sun 27 Apr 2025 01:00:13 +0000
Manifest next update: Mon 28 Apr 2025 01:00:13 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: ZS1XiHVu95yTGualo3QcemrH3tsNM8Rrf8M5oncmwJ0=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:50:a6:86:68:c3:6c:9f:6a:aa:15:4c:55:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Apr 27 01:00:13 2025 GMT
Not After : Apr 28 01:00:13 2025 GMT
Subject: CN=32526f05f61c4ec80c5c0ead4e6608e0876f7a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:a8:1e:f5:41:0a:c4:c0:5a:21:41:5a:fe:
7d:f8:05:79:ee:3c:0f:1e:4b:e3:6e:e0:ab:66:3e:
d8:9a:e6:64:c5:63:87:3d:6c:2e:0f:dc:48:69:ed:
6a:e2:f3:42:d5:7f:35:54:b9:2f:46:93:18:c6:7f:
fd:b3:f0:11:59:0e:37:84:f3:3a:75:21:ea:1b:27:
19:63:a9:f2:ba:ec:02:5e:5f:60:51:b2:e9:a4:24:
32:2d:d3:2a:a7:bb:de:32:2f:c0:ab:ee:7d:62:2d:
c8:f8:cd:8c:39:61:fc:78:5e:07:3b:eb:38:74:7b:
97:e6:06:e3:37:9e:44:88:9e:f8:8e:03:e1:6e:d4:
75:34:10:7e:d3:46:0a:ee:0d:a4:2c:a5:e1:da:12:
0c:23:52:39:20:53:6a:d7:ad:ba:b1:89:b1:f3:0b:
cc:dd:e9:cd:38:18:c5:06:e7:85:a8:7f:63:04:48:
bf:27:91:b0:f4:b1:30:6d:aa:3b:7e:9a:db:f2:d6:
c0:71:20:d1:2d:4c:e8:e7:fb:a2:1c:de:9a:6b:1b:
08:e1:f0:0e:76:d4:2a:b5:47:24:fe:f3:91:d7:b7:
ab:ab:84:f6:5f:f9:e4:15:d0:0c:d7:c1:52:bb:61:
8c:fc:50:e2:ba:f8:86:3b:48:82:40:1a:4a:73:96:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:6F:05:F6:1C:4E:C8:0C:5C:0E:AD:4E:66:08:E0:87:6F:7A:0A
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:76:a1:1c:8e:23:db:99:96:ce:28:4f:59:e0:d9:eb:0b:14:
9b:58:b5:ff:1b:76:2f:4f:d1:77:b9:36:73:8f:7e:82:09:ea:
49:ac:ff:e2:8f:a4:3d:a7:45:fd:41:ff:88:0b:2f:18:ab:23:
d6:c1:93:55:e4:6a:b9:85:0a:b0:ff:ab:2e:ab:ed:f8:3b:e6:
e3:12:38:eb:41:68:60:ad:cc:a6:87:92:63:eb:b8:9f:f2:a9:
64:cd:6f:64:2e:39:bf:6c:e6:5a:d4:ee:e5:83:d5:34:6b:b7:
fa:49:76:34:3f:f5:2c:33:1c:69:ae:2e:15:e5:18:d0:bb:4e:
a3:61:3a:cb:75:3f:7d:3a:d0:ac:cc:d8:31:57:e5:30:66:74:
44:ee:80:3d:c4:7d:02:04:12:d5:15:a0:c5:3c:ad:f3:4f:b3:
09:c1:9c:36:0d:af:be:ae:1c:c9:3c:a8:69:67:61:27:0c:78:
54:fd:c6:67:56:82:39:10:2e:6b:2a:77:48:25:4d:0e:3c:30:
23:30:71:27:e7:9a:94:e4:fa:f1:b9:58:e3:28:8f:1b:45:c8:
4c:e8:96:ca:83:e3:5c:81:f6:d1:a9:9e:e7:23:df:a6:8d:63:
be:21:5f:a1:dd:c3:d7:4a:e5:e4:81:ce:04:1b:a4:58:24:6e:
6d:40:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:30 2025 by rpki-client