Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: iGRklKAN+xRsdC6EVrgoSWBKFR7kcy4YszLSgS/eM4s=
Subject key identifier: 1E:17:31:B8:D8:D9:58:20:99:86:C7:D1:80:A1:0C:71:49:31:05:3A
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 01967755712FB7F69EC971C8BF033B3B3322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 04A7
Signing time: Sun 27 Apr 2025 13:00:10 +0000
Manifest this update: Sun 27 Apr 2025 13:00:10 +0000
Manifest next update: Mon 28 Apr 2025 13:00:10 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: +AjuDcFsuVqMyYdCT5VpjbRyJETcg0N4DxXKtuyRSFQ=)
2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:71:2f:b7:f6:9e:c9:71:c8:bf:03:3b:3b:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Apr 27 13:00:10 2025 GMT
Not After : Apr 28 13:00:10 2025 GMT
Subject: CN=1e1731b8d8d958209986c7d180a10c714931053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:15:1e:97:6a:bb:6b:d0:ce:f1:8c:a7:32:
a1:db:3c:b8:b8:92:31:89:c1:47:5a:3f:d8:54:b2:
6a:98:84:e4:81:2a:43:02:07:7f:3f:6c:69:ca:4d:
2e:de:57:75:8c:7b:ce:bb:83:ea:65:b7:71:81:33:
7d:92:a9:6d:3a:45:b8:ef:2f:c1:2c:c0:16:58:6c:
e7:58:1b:c1:fc:62:b4:11:48:10:b6:6e:53:62:54:
0d:1e:54:67:3e:d3:1e:83:b7:de:d2:e1:2f:ab:c2:
9b:e7:54:03:23:5c:8a:df:56:76:65:00:c4:c4:67:
99:f4:84:a3:8a:bf:c9:6b:66:df:b0:f5:d6:10:8c:
6a:e6:de:0a:6b:94:fb:67:20:cc:89:93:76:81:8c:
9d:63:c7:08:58:2b:d2:69:9b:59:ed:95:72:ca:a0:
26:c6:07:88:89:52:46:50:97:b4:a7:e7:4a:66:ce:
71:4d:15:50:95:6f:a4:68:66:00:98:77:0a:f5:43:
b5:70:d6:23:c7:aa:5f:c4:24:49:db:24:aa:24:72:
a2:48:43:58:d5:ea:d7:38:31:64:16:36:da:1c:93:
b1:8a:8e:00:a5:e3:73:91:f5:0d:a5:83:be:2e:16:
ba:61:0a:82:0f:fd:d7:8a:f5:e9:df:3c:ba:22:52:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:31:B8:D8:D9:58:20:99:86:C7:D1:80:A1:0C:71:49:31:05:3A
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6c:b6:9d:f5:11:00:13:53:58:d3:fb:57:60:45:88:69:8d:
b2:64:f1:c1:d1:9e:cd:84:c8:14:08:2b:26:62:3d:90:9a:90:
c3:3e:9a:7f:89:c4:7d:b3:22:a8:f5:54:91:9e:b7:8b:c7:cf:
23:02:a4:8e:6f:3b:8c:35:4f:b8:e6:88:fa:3c:8f:7d:81:84:
bf:9f:94:9a:84:11:bc:83:de:4b:29:ec:7c:d6:cb:85:a0:26:
ab:99:9f:3a:93:1c:7f:ee:74:57:5f:0a:1a:88:23:b0:ba:c3:
4a:6b:a9:1b:21:b2:ef:64:3e:35:de:1f:a7:d9:73:5f:40:bd:
f7:a7:36:8f:5b:0e:f6:a3:20:83:5b:3d:f8:ad:75:69:28:95:
c4:e7:f0:a2:30:6e:c2:0b:35:ef:3f:5e:bc:3a:3c:a9:49:90:
81:7e:6c:cd:3d:0c:10:00:41:98:5e:bc:39:8b:5b:62:81:c2:
98:dd:a8:f6:2e:ac:c4:b4:f6:9a:0a:4b:20:51:0f:97:ee:d6:
e6:d4:f2:63:1e:ff:3c:a4:ea:09:b1:80:48:4c:fc:79:d7:94:
bc:b9:81:41:7d:11:b8:b6:37:65:f5:a3:f1:77:bb:07:79:78:
18:74:ba:2b:a0:df:03:26:16:fa:72:69:b3:15:87:f9:20:46:
06:2d:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:40 2025 by rpki-client