Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: YWSM2gSTxY7yYShz0GrGgyyp2iEXP7S+dZZBnKKizD0=
Subject key identifier: 0E:7D:76:0B:38:5D:03:14:80:5D:F1:1E:C3:C5:82:1A:D9:63:0F:CF
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01967BD788B37C9498245168B4C4561746F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 15A4
Signing time: Mon 28 Apr 2025 10:00:44 +0000
Manifest this update: Mon 28 Apr 2025 10:00:44 +0000
Manifest next update: Tue 29 Apr 2025 10:00:44 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: McDWlWOs7mopWoQmESb8YyT5oG+B6sanxnKreJkxfDs=)
3: znbCSfa62MjugadmDs4WgFylkOE.roa (hash: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:88:b3:7c:94:98:24:51:68:b4:c4:56:17:46:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Apr 28 10:00:44 2025 GMT
Not After : Apr 29 10:00:44 2025 GMT
Subject: CN=0e7d760b385d0314805df11ec3c5821ad9630fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:0c:07:0e:df:36:49:fa:b3:df:fd:60:2a:
1e:75:b5:33:cc:4f:83:61:40:5e:a1:ba:db:0e:4d:
df:1d:85:fd:87:57:1c:95:3f:40:15:9f:93:25:42:
12:88:33:45:2a:c5:98:d2:7d:81:46:d3:32:3c:e1:
a0:b9:a4:1c:ef:75:15:90:7d:b9:71:f7:01:25:64:
52:60:ae:85:28:3f:a0:c5:4c:44:3e:d4:23:dd:d3:
a2:66:17:f6:f0:8c:ed:c5:87:90:92:36:16:54:7f:
e6:8a:db:22:5f:96:b1:7a:7b:8c:7d:91:de:b5:0d:
7f:85:2a:54:e7:be:55:e9:fa:62:a5:68:47:27:57:
91:bd:68:ae:61:d9:ce:a9:1b:9a:e5:ef:6c:91:17:
ca:2c:29:d3:4c:ce:35:3c:d9:96:d4:68:3d:4f:c6:
40:df:fe:65:db:b3:aa:d6:b1:ff:b4:ba:a7:80:6a:
46:ad:e1:20:29:b6:8f:60:0f:7f:ed:1b:5c:cf:d6:
21:81:20:5f:38:a9:7f:73:8b:2b:5d:ae:39:7b:15:
eb:2c:7f:3e:4e:28:a5:61:d5:9d:b5:2b:03:bd:62:
8d:3d:ad:8e:18:5b:b2:2e:b1:16:ad:1c:02:6f:e7:
78:d9:ce:8b:c1:04:e1:58:41:7e:dc:9e:0b:a8:36:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:76:0B:38:5D:03:14:80:5D:F1:1E:C3:C5:82:1A:D9:63:0F:CF
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:5c:d2:b4:7a:17:3c:bf:ed:a3:db:95:80:1c:e6:b8:59:
8c:42:82:2f:53:ef:10:26:f9:95:36:cf:1c:b2:90:29:52:b1:
01:28:3d:cb:d9:ae:96:35:58:76:fa:83:fe:92:8d:da:bf:9d:
d3:04:76:b7:03:b6:b6:04:f3:42:e9:ec:97:63:5e:4e:bd:5c:
58:35:46:d9:a0:24:3a:f2:5b:f7:4e:a3:a2:31:62:24:8e:43:
68:3f:f8:a1:d8:26:05:b7:b1:a5:ab:0e:f7:cc:a1:31:63:39:
26:7d:17:00:43:cf:9d:15:d3:3e:b7:0b:d0:4f:a9:e3:86:93:
e2:46:13:09:dc:db:4e:26:22:6b:29:55:e7:c7:61:0a:3c:e0:
98:be:6b:da:a2:bf:52:da:cf:ba:17:8f:9d:a5:bb:d0:ce:a9:
a4:c1:34:df:cd:3f:6f:e3:f2:b0:a7:cd:39:21:aa:d3:4a:02:
fe:f9:93:f1:80:7c:80:fc:65:70:dc:dc:e1:7f:dd:d6:7b:4b:
dc:cd:9e:72:2a:11:91:18:86:95:38:6b:f5:73:6e:4a:66:14:
88:e2:8a:f6:0f:50:94:ae:77:ff:ac:53:08:ae:aa:16:de:64:
2b:a6:73:49:f6:d7:00:90:8f:33:86:d6:9e:d8:17:f9:90:01:
cf:2a:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:33:58 2025 by rpki-client