Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier: Km99rO2yakrD/Kkauj6oquhbW4jmvNd79Y8eLzCdvlY=
Subject key identifier: F5:2E:E5:C7:E0:E2:50:F7:A2:E2:91:8B:B2:4F:EA:B4:9F:63:67:CC
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 01967EA158F936E1F67D320215351AC2ADD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number: 1256
Signing time: Mon 28 Apr 2025 23:00:25 +0000
Manifest this update: Mon 28 Apr 2025 23:00:25 +0000
Manifest next update: Tue 29 Apr 2025 23:00:25 +0000
Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=)
2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: g/st+p/eaGWUPaHIfDHrd9tWx6DpoHbDOFRHwu7WzzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:58:f9:36:e1:f6:7d:32:02:15:35:1a:c2:ad:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Apr 28 23:00:25 2025 GMT
Not After : Apr 29 23:00:25 2025 GMT
Subject: CN=f52ee5c7e0e250f7a2e2918bb24feab49f6367cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:1f:90:70:2a:f2:82:e7:09:a4:36:8b:95:
d6:4f:20:5b:5e:ef:3c:5e:a5:65:32:9a:cd:20:e4:
55:9c:45:3d:e6:0e:35:ce:3d:b0:3b:0a:54:74:0a:
09:c8:37:11:c4:5e:97:f8:85:6c:47:98:ab:26:83:
00:62:84:20:f8:e2:f0:4a:ec:02:2a:d9:e8:17:c3:
95:03:6a:e8:e4:e8:2d:5d:56:0e:ef:ff:c4:87:ef:
5e:3c:fb:58:0d:bf:23:ba:6e:2c:86:c7:13:a3:16:
aa:d4:e8:2d:dc:5d:63:0b:f2:de:58:70:41:c3:07:
65:91:e6:f8:71:a9:c2:0e:09:e9:ee:1f:19:84:d2:
cb:a2:af:92:45:a2:1f:9d:48:cc:c5:7c:2c:74:59:
d5:0c:1f:f7:ac:53:59:1e:7f:6a:0e:93:8f:5b:f6:
b9:86:c1:61:74:03:54:59:15:53:6a:ca:8a:aa:11:
90:57:e8:e6:32:09:9b:37:6f:7a:5c:54:f7:f3:91:
4c:de:9b:05:02:3f:d5:9f:7d:4b:e8:65:48:ed:44:
2a:fe:6b:ab:86:28:09:22:89:65:5c:23:04:2b:42:
77:53:c4:92:87:a2:e7:d1:f9:90:7b:19:47:d0:60:
af:a1:db:16:01:21:87:da:6c:bf:6a:df:1c:8d:2e:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:E5:C7:E0:E2:50:F7:A2:E2:91:8B:B2:4F:EA:B4:9F:63:67:CC
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e4:57:e4:d3:84:e5:ce:b7:14:1d:69:12:84:86:2e:65:a3:
dd:1a:ef:a8:b6:ab:6b:a5:0f:d1:a7:0e:97:54:a1:ee:19:38:
e6:e3:d1:54:99:64:6e:0c:d6:a2:74:79:a0:58:82:6e:db:e7:
b6:62:d0:92:69:10:b8:4d:e7:6b:05:e1:1e:98:73:0b:b0:0a:
42:a4:f8:09:6a:82:f6:c1:bd:7c:27:e8:f2:bd:fb:02:fc:77:
fa:9a:36:fe:4e:2c:23:0e:fb:67:87:ca:13:cb:99:b3:85:17:
d5:f1:c6:45:49:41:94:72:60:45:3e:af:83:7d:57:12:bd:d5:
d4:43:eb:34:0a:98:09:69:a7:07:2a:8b:82:b8:46:ff:be:dc:
21:b6:eb:4c:7c:17:13:b4:6c:1c:4a:24:63:9a:49:7c:70:af:
89:41:a7:26:2f:0c:fd:21:8f:2f:24:f9:8b:cd:fc:6b:e1:29:
48:80:a2:b5:6b:dc:14:cb:d9:c5:81:24:8f:51:85:a1:e2:91:
a5:af:02:f6:66:28:b9:f4:42:13:f1:8e:15:74:f6:c2:25:49:
c3:ef:27:17:05:a7:97:06:98:d4:f5:18:4a:39:1f:d9:66:46:
60:81:5c:51:58:52:2a:22:7e:a2:ed:92:19:30:87:18:dc:4e:
60:50:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:55:18 2025 by rpki-client