Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: kVkF7SgjuanREoNbkhWcnukp0RNbeT3q0b/qEq8DGsk=
Subject key identifier: A4:56:E0:E6:C8:EB:13:ED:C1:C8:72:9C:49:7F:21:57:9E:2D:C6:78
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019679EA1CF256E2C522FEAC5AC82F567837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 0239
Signing time: Mon 28 Apr 2025 01:01:47 +0000
Manifest this update: Mon 28 Apr 2025 01:01:47 +0000
Manifest next update: Tue 29 Apr 2025 01:01:47 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: 817VQfu369Mvpe2JRKKdihuAgmu7sn9VONbvarLsVFY=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:1c:f2:56:e2:c5:22:fe:ac:5a:c8:2f:56:78:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Apr 28 01:01:47 2025 GMT
Not After : Apr 29 01:01:47 2025 GMT
Subject: CN=a456e0e6c8eb13edc1c8729c497f21579e2dc678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:2f:8e:72:fc:5d:47:a3:87:af:84:ba:7c:
af:65:25:00:bb:bb:61:d4:9b:ab:24:62:a9:4c:f0:
60:a1:45:09:97:a3:ca:f0:2a:51:a6:48:8d:2b:e4:
c9:66:78:aa:2c:fd:51:0c:e2:9f:28:85:29:de:18:
96:2f:2c:45:f6:36:49:c4:ef:d7:e8:60:eb:e6:47:
e7:69:37:b1:4c:9a:4c:9e:56:a8:82:e2:9a:b5:64:
62:2f:14:ad:9b:2f:9c:75:2d:1b:4e:ee:0a:ee:77:
c3:86:52:a4:22:b6:55:f8:ca:c0:9f:35:6a:4d:00:
26:82:08:de:e1:a8:38:19:07:9c:20:1c:a0:25:ea:
aa:29:bf:fb:28:92:02:1a:71:a5:4d:ce:4b:29:e6:
41:0e:8a:99:a6:49:9b:3b:61:01:4e:b2:d0:de:3a:
87:52:7b:95:d6:05:fd:d7:49:ec:d1:1d:50:84:7e:
2b:3d:18:25:c7:35:4e:c2:5d:ef:32:86:83:04:7c:
30:b6:9c:71:c3:f0:7c:b7:ec:47:11:35:d9:a7:1d:
d2:68:8d:21:a1:ac:1e:c5:ce:d5:ac:30:83:b7:d4:
fa:4e:64:b7:f5:ef:69:21:64:e1:3d:d0:82:ab:13:
6b:4a:00:6f:46:98:95:13:42:4e:5b:4f:8c:37:93:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:E0:E6:C8:EB:13:ED:C1:C8:72:9C:49:7F:21:57:9E:2D:C6:78
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:78:9a:d3:54:ed:84:92:80:58:16:65:67:6b:33:27:2c:
ad:14:ee:e8:03:93:bf:e1:af:6b:68:91:9f:d4:53:3a:84:c3:
fe:9a:03:78:47:fc:51:e6:19:14:b1:be:fc:b6:f8:83:45:e1:
f9:6f:97:1f:a7:bf:24:57:a0:b8:19:76:88:ad:2e:71:6d:1c:
e1:3e:6e:b2:a6:fb:d3:23:14:a3:a7:5d:7c:7b:6f:45:6d:4b:
10:3c:9f:11:e2:cd:28:9e:ce:73:67:ad:8b:9d:41:f8:e3:48:
59:a9:f3:17:be:9b:b5:12:2f:07:16:d3:1a:a9:58:cf:12:98:
1c:73:55:e3:72:38:c6:4c:ca:bc:ca:41:f8:2c:43:48:71:00:
b6:a9:64:84:cd:ec:ce:de:77:a4:05:da:4a:da:2a:c5:87:68:
e4:51:85:78:e2:c5:d1:e8:2d:15:d8:25:70:f9:89:c0:73:66:
10:9a:c9:5b:ce:78:69:ef:a3:c8:99:a6:d1:11:27:84:03:76:
70:b5:2c:62:61:80:54:42:76:cc:78:08:45:9a:b8:61:2b:b1:
c7:82:a6:2c:95:34:fc:d9:24:9f:0a:6f:82:e8:da:7f:21:25:
be:50:39:48:e7:75:53:c8:a8:ae:0f:70:54:63:b4:f4:9a:91:
a8:2e:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:34:02 2025 by rpki-client