Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: 1MeFgrgDuoEI6FZcKl6brCn72EV+mTUZTUD61RK+cM0=
Subject key identifier: A0:70:3B:C7:EC:C4:0B:74:45:24:3D:3C:62:A5:1A:4A:16:D3:07:2F
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 01968A00BA510B4283ABCE6737A6D293548B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0930
Signing time: Thu 01 May 2025 04:00:25 +0000
Manifest this update: Thu 01 May 2025 04:00:25 +0000
Manifest next update: Fri 02 May 2025 04:00:25 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: DqWQz0+xflgDIxnUc15LUJAwXhscTP9JcyxyGT9U0LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:ba:51:0b:42:83:ab:ce:67:37:a6:d2:93:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: May 1 04:00:25 2025 GMT
Not After : May 2 04:00:25 2025 GMT
Subject: CN=a0703bc7ecc40b7445243d3c62a51a4a16d3072f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:36:d8:85:23:39:5f:48:e9:16:55:73:ad:
8d:f3:fe:9d:00:a4:23:01:a7:3f:3b:23:2b:e4:5c:
5a:47:dc:03:89:7d:0e:27:d2:04:8a:bf:56:5d:b8:
d8:5e:1c:a6:fd:8e:b3:cd:32:c0:55:21:ac:54:cc:
40:f6:dd:43:1c:27:fc:18:63:7b:d1:ed:3e:86:c8:
52:9c:03:55:3c:70:0b:f9:66:8f:31:88:df:eb:e6:
b2:63:b6:ff:69:19:be:30:40:23:83:e2:9c:9c:d1:
29:d9:c4:9e:2b:f5:3d:6c:f3:21:89:92:92:5c:b2:
9c:f4:73:68:f3:ff:fa:04:a7:31:d2:c9:1f:fb:19:
a0:f2:b3:c5:d6:88:b7:c3:74:88:59:59:48:b5:4d:
7e:c5:49:fd:97:69:8d:c8:35:0d:26:d6:c2:a0:be:
0a:ba:a8:4e:84:ca:2b:1f:be:15:e9:23:d9:7e:6b:
04:9d:60:75:7c:f2:a3:3a:40:8c:e0:bb:a1:02:48:
fa:77:3f:54:b1:d4:e0:79:82:c9:b2:a7:e1:dc:08:
e0:1a:a4:a5:9b:13:11:bc:a8:f0:4a:4f:f3:a5:e2:
f2:16:83:0e:db:ce:e2:53:d9:28:ff:32:2d:e6:83:
6d:c1:97:5e:c1:52:f2:1f:82:61:67:b6:eb:36:70:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:3B:C7:EC:C4:0B:74:45:24:3D:3C:62:A5:1A:4A:16:D3:07:2F
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:92:e7:28:8d:f5:5e:51:ab:6c:5c:d2:d9:80:a0:61:fb:94:
9f:6a:e7:d4:b3:0f:a9:f7:14:a3:69:14:13:a9:8d:b3:36:61:
2a:98:50:2c:a0:ae:db:ff:c9:71:c9:23:4b:01:ca:5c:b6:f5:
e1:be:ea:39:a2:ca:21:78:d5:16:a1:72:50:6c:d4:3d:62:5a:
e7:d5:ba:f0:95:ef:4a:99:e9:f2:04:a5:57:ac:a4:7f:06:0f:
53:56:34:7e:b1:92:26:9b:5d:40:65:c2:2b:ff:7e:96:3d:b5:
92:84:6f:b9:ea:d9:ee:47:8e:3e:1b:16:4e:7c:ca:b5:88:77:
a6:fd:dd:cc:73:6d:7a:e2:0f:2b:3f:6d:46:de:ff:ea:39:95:
c5:d0:13:61:7e:2a:e0:cc:84:2e:28:21:f1:ff:4e:1e:42:74:
d4:3d:54:a6:b1:ed:5f:b7:4c:3b:c8:56:c3:16:5d:e7:fc:00:
22:84:15:b4:ed:1e:82:b3:c7:58:cb:7a:96:0e:3f:25:47:49:
bf:e7:45:ce:38:f3:b6:b2:ad:19:45:65:83:26:e0:b7:a6:08:
87:65:75:b7:9e:41:55:12:ce:c5:65:53:51:6f:bc:5d:37:8d:
80:32:23:ae:9c:e9:dd:0d:e0:44:3b:08:1d:23:31:0e:73:02:
db:08:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:27 2025 by rpki-client