Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: fwp8zr0g3WrAZCTm/L9r3xZBouICt26jmvvzQxxYQkA=
Subject key identifier: 0D:D4:9E:30:6D:0D:3A:61:97:6C:33:06:04:7F:DB:46:BE:55:6C:99
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 01968FCC2C53CE03E37BC0D46B4435431CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 07:00:44 +0000
Manifest this update: Fri 02 May 2025 07:00:44 +0000
Manifest next update: Sat 03 May 2025 07:00:44 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: jl3bRStzohk58A1yz2EUnur+fJlXrRV9H9L9YGGFr2E=)
2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:2c:53:ce:03:e3:7b:c0:d4:6b:44:35:43:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: May 2 07:00:44 2025 GMT
Not After : May 3 07:00:44 2025 GMT
Subject: CN=0dd49e306d0d3a61976c3306047fdb46be556c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:cf:1f:46:78:1b:a7:6a:9d:cd:dc:92:22:
d0:dd:f3:e9:ab:f1:37:f0:32:75:d9:14:5c:e9:c6:
5a:20:80:9d:89:7e:94:30:8e:43:bc:4d:dd:de:74:
05:d2:ef:8d:12:a1:be:eb:db:1e:fb:34:24:c6:cb:
5e:ca:3a:e0:8b:c2:ec:6b:61:3a:92:73:0d:7a:b6:
a8:51:a7:e2:39:43:88:d9:a0:bf:4f:b0:48:c3:e5:
75:3b:3d:8f:5b:63:ae:59:c3:b8:cf:02:b4:ea:58:
ac:96:99:2f:fc:90:ee:6a:3f:71:86:79:42:36:8c:
97:61:47:ad:4e:ba:7b:0a:38:c4:ad:bf:15:95:ba:
98:62:59:72:1a:73:8b:36:b8:b4:b3:d3:b2:85:62:
73:37:cf:1f:88:05:97:26:ba:21:e5:73:d8:fc:da:
6c:30:40:1a:b7:e6:12:76:58:11:97:e5:06:ed:22:
1f:22:0f:ca:4d:cf:f0:63:2a:29:3d:96:ce:2b:a2:
55:3d:5c:30:f0:87:7d:3a:20:a1:38:5d:31:24:91:
75:15:39:fc:33:1e:1a:30:2c:81:23:a3:02:fd:8f:
b3:47:d0:1f:77:56:55:f8:b2:da:1a:b0:ef:19:67:
bb:c6:ca:e0:34:b9:ff:c4:06:a4:e6:96:2b:de:1f:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:9E:30:6D:0D:3A:61:97:6C:33:06:04:7F:DB:46:BE:55:6C:99
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e1:cc:62:5d:cc:97:62:68:d7:61:b4:49:47:77:cd:c6:b6:
00:7e:7a:92:bd:6c:ea:7d:4b:0d:74:eb:39:8f:43:5b:1a:48:
d2:e9:49:43:26:06:f6:f0:28:7f:e0:76:4d:c0:7a:62:32:68:
22:96:97:fb:47:e1:d8:1f:0c:80:4c:c8:c8:ee:41:fe:00:45:
6d:a2:36:5a:a0:8c:08:00:b1:c3:01:66:ec:7e:74:38:61:67:
e9:1d:f5:2d:29:6e:55:5c:76:53:14:6a:43:ae:3c:97:2b:99:
e4:36:79:d7:85:ef:8b:ba:e2:fb:d1:f1:5c:71:6a:18:36:27:
59:68:96:08:c0:e5:78:67:62:c4:a1:65:cc:24:03:e7:c6:e6:
68:21:d0:dc:25:e5:e7:ec:e9:c3:e3:b2:74:40:7d:4f:f9:64:
fa:78:e6:ba:d8:67:07:9c:d0:ce:5a:53:9a:49:1c:6a:ca:65:
94:cd:e9:fb:1e:0a:29:76:18:1d:7e:e1:6c:ee:48:92:15:9b:
c5:0e:e1:28:c6:7f:c3:35:90:3e:3d:c3:db:8b:fa:71:97:fb:
01:f9:3c:3c:c3:bc:52:bc:4f:7a:69:e1:0d:99:1a:7e:47:33:
a0:d7:b4:f0:d3:80:b2:7e:ed:76:0a:45:70:ca:ac:9f:94:1d:
4e:26:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:50:38 2025 by rpki-client