Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: nrvKHCa5Nli/plGYYdTSkZUnD6VYwxMeRp7dPebXr9c=
Subject key identifier: B2:86:D8:E4:A1:6C:86:4F:0C:11:53:F9:52:30:77:72:5A:7B:19:23
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 019680FDC25D84ED9218B541E3524FFF9DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 0198
Signing time: Tue 29 Apr 2025 10:00:36 +0000
Manifest this update: Tue 29 Apr 2025 10:00:36 +0000
Manifest next update: Wed 30 Apr 2025 10:00:36 +0000
Files and hashes: 1: MxQNfpi-fhkY4RJBYH0rmNMo89A.roa (hash: LDqZG0CpfjjbhzqTlBUwL76WIHLWIHUvF2f/c9xQewQ=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: s7bB0JG6BocK3Ee07pO6g8GC8hM4JSpj4pD68QzwQDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:c2:5d:84:ed:92:18:b5:41:e3:52:4f:ff:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Apr 29 10:00:36 2025 GMT
Not After : Apr 30 10:00:36 2025 GMT
Subject: CN=b286d8e4a16c864f0c1153f9523077725a7b1923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:e4:43:95:81:02:3b:48:81:0d:de:f3:2e:
ad:22:50:91:b3:c2:45:4a:48:21:24:7c:3a:6e:d3:
c9:5d:fc:df:ac:1d:11:53:b4:bc:ec:7f:14:61:97:
26:66:c3:09:66:b3:0a:9a:29:b5:66:6a:7a:f6:25:
f7:f3:3b:e0:08:f2:be:e0:26:89:23:b3:f8:fd:44:
48:44:39:7c:d2:37:9a:72:2c:a7:fa:6c:43:5f:c4:
6b:47:4e:12:00:b1:8c:82:ea:b0:3c:fc:e0:90:15:
fc:74:e6:43:9c:9b:58:6b:7c:13:06:28:11:d1:fe:
a8:4f:de:c1:7f:c2:a5:19:09:90:c9:6d:0a:bb:bc:
7f:37:6b:01:f7:7f:cb:3d:10:c7:6b:52:91:94:f6:
6b:39:7b:32:c7:0d:70:fc:fb:e0:57:8b:2d:4c:2c:
cc:39:e6:dd:dd:13:d3:6f:e0:be:28:5d:5a:ff:13:
2d:9d:f3:40:ec:a1:a4:22:8c:08:44:f5:77:c4:cb:
8f:36:cc:c1:e8:96:33:b6:04:42:d6:18:7d:98:eb:
aa:86:70:2d:44:d7:d4:00:fd:4d:e1:da:b4:9a:df:
f0:51:ab:26:0f:b0:7a:e5:58:e0:0f:ea:65:58:72:
69:2c:d4:1f:b2:27:34:53:cb:17:4a:35:88:97:37:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:D8:E4:A1:6C:86:4F:0C:11:53:F9:52:30:77:72:5A:7B:19:23
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9b:fb:fb:fd:c7:2c:f0:0e:b2:1d:50:c0:7a:6c:ab:ca:80:
e5:02:29:c1:f0:11:2d:43:fb:4a:76:7e:4e:0d:8d:89:b3:79:
cd:48:94:5a:29:e6:d1:a5:fe:9f:63:72:40:78:b0:21:5e:40:
d9:eb:e4:a3:6c:5e:8b:73:dd:24:63:fa:9e:39:44:70:14:c3:
f0:4e:a6:ad:02:d5:b5:af:9a:e7:95:57:ad:e1:ed:03:e7:42:
2b:4c:d3:f7:e0:fb:e3:4f:3f:da:ea:a7:64:aa:e0:86:97:5e:
88:38:d7:bb:fd:6d:81:7a:68:33:a2:16:d8:62:d8:54:97:af:
a5:7b:26:17:d9:f6:67:44:c2:5a:ec:f0:bf:d2:70:ea:f2:d3:
0d:f7:ba:20:99:54:0d:67:05:d7:2b:37:69:27:b5:ef:ec:f4:
de:fd:13:49:22:cf:19:0e:7e:15:6b:b6:6c:f9:fb:e9:57:bf:
a0:d0:f6:4e:18:30:0d:7b:42:dc:1c:9f:a7:3e:fe:ed:c5:38:
8a:8b:75:fd:69:a3:fc:fa:1d:6d:4c:6e:66:5d:3e:c2:1b:4f:
25:ca:96:29:cd:0e:ba:a8:db:98:ab:a7:9c:bf:95:ea:5c:8d:
ca:05:19:08:42:a5:97:3d:f9:f8:c5:e2:c7:0b:b2:7a:0d:23:
a8:fd:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:12 2025 by rpki-client