Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: x8WfftKxg/PPRWFGngYeo7JU1cxvAwXEkNwXkPDUZtY=
Subject key identifier: 14:A5:8B:48:C0:0E:64:64:55:85:AB:6E:26:DF:F2:90:8B:96:68:64
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 0196857F3A888C411794F3A4BBD46F565AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 12FE
Signing time: Wed 30 Apr 2025 07:00:29 +0000
Manifest this update: Wed 30 Apr 2025 07:00:29 +0000
Manifest next update: Thu 01 May 2025 07:00:29 +0000
Files and hashes: 1: C29j8BjW64hUTo90rvT2p7vncMk.roa (hash: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: 1gVSKdjJeX/uE15V+ht+U0XpiHOlE8PXhF4osaoZPos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:3a:88:8c:41:17:94:f3:a4:bb:d4:6f:56:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Apr 30 07:00:29 2025 GMT
Not After : May 1 07:00:29 2025 GMT
Subject: CN=14a58b48c00e64645585ab6e26dff2908b966864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d9:91:85:b4:59:9c:90:71:41:2e:0c:ac:b8:
65:81:1d:46:b4:f6:fa:8e:6c:71:22:99:79:d2:fd:
7a:61:1a:9c:c5:1a:84:86:99:f1:99:0c:c9:38:50:
3d:04:25:f2:1f:08:56:77:0f:f3:03:b3:c1:f3:27:
09:f6:37:24:f9:d8:b3:56:dc:f4:8d:1a:8a:a7:78:
c2:93:86:97:a4:d2:dc:4e:d2:e8:88:0a:a6:3a:cd:
d6:b2:77:32:b3:15:b7:9a:c8:fd:cc:74:21:99:35:
9b:6d:7c:fd:6d:5c:a5:8e:5d:d0:98:5d:91:d1:70:
5a:49:cf:26:ff:28:09:fa:78:60:fe:de:e5:0e:23:
15:dc:b2:c5:a5:90:5a:ce:5b:47:f0:58:83:69:47:
83:6d:98:29:5f:3e:d1:50:e9:fc:1b:b7:12:e2:4b:
11:b2:3b:c4:3c:25:65:53:ca:53:c1:d3:e0:f8:77:
38:0c:a2:28:55:12:60:c8:dc:5c:ae:a3:c2:be:52:
44:2a:7a:ef:d4:f8:05:fb:b6:1a:a2:b9:70:de:37:
ed:fa:60:36:68:ec:b5:1d:db:ab:b9:7d:61:93:f2:
5b:98:2a:dd:3d:38:ed:de:c3:3a:e8:75:e7:52:66:
28:0c:01:f3:e9:f5:8f:54:83:13:83:18:a2:18:57:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:8B:48:C0:0E:64:64:55:85:AB:6E:26:DF:F2:90:8B:96:68:64
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:1a:9d:52:13:af:da:e3:79:f0:a2:ad:9a:1c:7d:94:2e:
64:eb:9c:3f:83:27:9e:86:94:b4:3a:a0:12:28:e4:c7:0a:cb:
12:f6:36:61:25:4b:0e:bb:c3:25:af:3e:27:ea:dd:ce:d9:32:
54:cb:ce:82:f4:76:42:79:20:d1:0e:cc:27:04:cf:01:59:8c:
87:97:49:92:a1:47:37:b1:de:51:89:a7:c5:a8:0a:4e:0d:13:
d4:4d:87:e6:d9:b8:19:1f:20:82:ae:7d:59:c2:22:4b:3b:47:
41:01:85:8d:e7:8d:f6:77:2d:2c:58:38:9e:f3:c8:1d:6f:41:
8a:c9:80:2d:88:71:fd:4d:c3:d4:e0:08:bd:41:4d:12:fe:9a:
0d:a8:84:f3:e6:7b:fc:cf:c7:8c:9e:84:64:1f:79:50:4a:bf:
17:36:13:58:6c:be:21:b9:4f:4a:d6:af:da:bc:42:d8:7c:6b:
e8:91:52:94:bf:8c:49:39:a8:59:e3:ea:e0:0a:14:33:58:b6:
40:8f:b0:d1:75:36:68:28:de:0c:c6:f6:6d:d4:06:7a:30:8c:
7e:8d:85:e7:14:73:06:d6:98:41:bc:7e:9b:7f:00:a4:af:94:
d8:e5:ab:27:66:01:7a:55:a1:d5:da:ad:d3:d0:21:bc:db:85:
c2:27:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:07 2025 by rpki-client