Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: xcD+5onZ70wWkGXmSg3CZ2L74L91hUP2I5I4VeY4Cyg=
Subject key identifier: B5:60:71:0B:0E:7B:1E:BD:55:C9:95:98:45:FB:1B:BB:92:4A:EC:F8
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 01967A56ED5BB4D8AC5E449375357167BB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: B6
Signing time: Mon 28 Apr 2025 03:00:39 +0000
Manifest this update: Mon 28 Apr 2025 03:00:39 +0000
Manifest next update: Tue 29 Apr 2025 03:00:39 +0000
Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=)
2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: 9fv0dzxxqyM75G+1ktL/3J/Eu3IgcHTCx2SG1QFN9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:ed:5b:b4:d8:ac:5e:44:93:75:35:71:67:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Apr 28 03:00:39 2025 GMT
Not After : Apr 29 03:00:39 2025 GMT
Subject: CN=b560710b0e7b1ebd55c9959845fb1bbb924aecf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:c7:74:c0:79:6a:d8:16:ad:0d:57:9a:9b:
80:a4:cd:27:14:c9:e4:1a:8a:d2:44:9c:6c:7e:7f:
65:a6:a0:b5:43:35:58:f2:c8:71:d7:60:40:91:a6:
eb:e2:e0:21:63:c4:49:0f:13:ff:fc:ec:fd:fa:4a:
48:c1:9e:5f:5a:dd:02:c2:ca:b5:be:5e:37:ec:51:
6f:97:01:3c:de:6a:ef:37:d6:d2:45:98:6d:cd:38:
47:e0:f0:46:ed:5a:cb:38:13:fc:36:12:4f:f8:f3:
27:9b:28:a1:b1:bf:3e:66:cf:28:f1:ee:c7:f8:bc:
66:f5:34:78:1c:e0:d5:37:ce:c6:60:64:72:bf:12:
25:6f:45:46:2c:d2:b5:07:2f:62:4c:4d:f2:b0:e2:
62:a4:12:28:45:b6:cb:0c:4f:51:80:dd:dd:34:d8:
8b:95:59:d9:ae:24:16:27:15:7d:03:3c:e4:cc:80:
c0:71:7c:e8:c9:ab:b7:08:e4:90:87:d7:f6:0b:fe:
f0:a1:cf:10:95:31:b2:6c:70:2f:a1:ad:25:4d:73:
02:14:17:f1:1a:23:9a:9c:e4:f8:a6:a6:16:e2:89:
39:cc:f1:43:43:5e:3a:58:0c:e2:8c:fb:cb:04:44:
62:10:9d:6c:c7:13:71:4f:03:50:ea:df:7e:91:6d:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:60:71:0B:0E:7B:1E:BD:55:C9:95:98:45:FB:1B:BB:92:4A:EC:F8
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:3b:29:e2:2d:b0:38:e4:9f:b4:1f:5c:03:dd:a5:c1:91:
fd:6e:62:dd:92:b6:c3:cd:3b:98:0d:e0:0a:fe:37:84:4c:fe:
d4:fb:1b:c7:dd:0b:53:2c:d6:e4:fd:d4:23:c6:14:ec:83:4a:
54:46:82:be:60:1e:8f:10:da:92:20:17:a1:6c:c5:1a:33:b8:
bb:b1:c2:45:9b:aa:bf:a4:1f:f3:4b:25:82:74:7d:97:0c:10:
80:78:15:ff:14:aa:78:d5:5c:12:95:d9:93:18:c5:5d:2d:5b:
33:87:e7:35:a3:ae:be:16:36:2f:3b:69:cb:7d:de:bd:ed:a8:
80:5a:de:51:82:c7:c0:16:32:86:4d:14:a7:91:4a:2a:2f:42:
93:91:89:57:7f:03:d8:02:e3:7c:2d:73:53:1c:57:44:c4:44:
33:c3:18:6a:3b:bc:4b:e2:38:5d:da:ea:3c:82:72:8d:b7:d6:
b3:f0:13:74:ff:01:07:67:4c:09:65:28:b9:fa:f9:5d:31:df:
5e:32:18:22:5c:fb:1b:bb:85:b2:e7:43:51:f8:02:ea:c2:8b:
84:9c:02:c9:f1:3d:a5:c9:c1:f8:55:3d:e5:82:96:6f:50:6a:
47:7b:93:76:72:17:14:2f:12:3c:fb:de:0f:3a:15:b2:14:62:
6e:0e:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:55 2025 by rpki-client