Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: QyvjXTxgp8ihMif1kLX1XHXuMKyQzNzsNgPqSNclHlk=
Subject key identifier: A8:86:32:C7:B9:82:58:D3:CF:A8:7F:F5:E0:EB:15:57:C4:D3:15:18
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01967BA014924AC86982141566F54924D7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 09:00:10 +0000
Manifest this update: Mon 28 Apr 2025 09:00:10 +0000
Manifest next update: Tue 29 Apr 2025 09:00:10 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: QfkL6lvYFUnoKECBLMPfTYfuIRyNhzLldQFF2f5VQj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:14:92:4a:c8:69:82:14:15:66:f5:49:24:d7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Apr 28 09:00:10 2025 GMT
Not After : Apr 29 09:00:10 2025 GMT
Subject: CN=a88632c7b98258d3cfa87ff5e0eb1557c4d31518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:04:5d:63:2f:fe:4b:9c:71:04:10:1d:b0:
12:6c:ca:3a:1e:ad:5a:1f:ee:e1:3e:e3:a0:25:60:
a6:77:29:68:29:c7:1d:15:6b:d8:9a:ab:be:bc:d0:
85:b3:4c:0e:ce:35:f0:ac:18:dc:35:40:b9:5b:2b:
81:5a:5a:94:80:03:13:66:5d:bf:d4:f3:7a:6a:31:
05:08:8d:28:9a:6e:50:e9:e6:08:c5:e4:26:72:9f:
d7:9f:7a:e8:95:d0:1c:0b:c2:91:71:02:c9:08:2c:
05:c7:e3:96:f5:bf:c5:25:e3:2b:d1:8e:98:41:e9:
64:28:e5:99:f5:89:5d:6c:ba:77:ce:de:ff:5a:0a:
fd:80:7c:43:a2:52:bd:4e:7e:bc:bc:4e:2e:d9:69:
bc:38:af:0d:b0:36:26:c1:0c:09:2e:12:92:af:65:
79:57:b9:a3:67:61:21:4c:e1:40:59:f2:44:f2:1b:
1d:c3:01:1c:ab:84:2e:5c:08:86:08:a3:ea:7e:82:
8d:16:14:92:06:da:c8:4f:2b:71:24:79:ed:5d:38:
83:6b:03:2e:4e:69:6d:1b:5d:99:bd:f2:1b:db:8f:
b7:57:0d:d1:2f:a3:24:fa:ff:90:61:59:5b:f0:ca:
82:17:1e:05:d9:06:4a:b0:25:4d:18:33:fe:9c:ec:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:32:C7:B9:82:58:D3:CF:A8:7F:F5:E0:EB:15:57:C4:D3:15:18
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:de:68:db:bf:09:54:5c:a7:fa:da:c6:3a:dd:ba:16:dc:
20:1a:2f:05:bb:7b:70:7c:c4:d2:bb:e4:38:99:6c:bf:10:c9:
f4:7a:e3:0a:64:40:d3:05:7f:ad:63:1f:a1:3d:bf:dc:fa:fc:
a3:8e:3c:e5:18:1a:f3:3a:6a:85:99:ed:4f:b9:4a:a7:f9:00:
3e:b0:38:80:d9:16:63:c2:64:8a:61:b3:df:ee:51:04:ad:87:
d0:90:79:a5:da:c3:d8:94:a7:36:d4:17:19:a2:54:20:fb:d2:
7b:98:6d:89:b2:72:fb:29:b4:f4:a5:d3:9b:68:55:32:d1:91:
e5:cf:b3:73:df:6b:80:2e:f0:83:ba:a3:1f:c3:63:a8:30:55:
93:72:7e:24:58:89:d9:1d:4b:bb:5c:fa:6c:66:8b:3d:a2:9a:
ca:c5:2f:f7:1f:cb:be:7a:2e:92:e8:16:3b:f6:ce:6a:0e:ba:
9a:33:53:2c:c1:f2:6c:51:db:ea:2d:80:95:ca:63:c5:6d:58:
c4:b1:db:24:aa:80:64:e5:ea:1d:b9:9a:f3:20:f6:bd:d8:36:
48:04:fc:f3:ec:52:38:83:b4:e1:67:f7:f9:45:f3:c5:a2:97:
d7:af:c6:b9:bb:ee:9a:ae:6d:6d:8e:2e:1d:8d:c0:93:f9:1c:
fc:0c:d7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:11:31 2025 by rpki-client