Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: wqVPU1N5xs3Zospxprwk4+Ua0stJALvw3qgrs+hNI08=
Subject key identifier: 4A:44:91:2E:EF:E5:36:DA:0A:4A:11:55:8C:1F:B0:7B:BF:22:95:E5
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 01968ADC9376DBE23D8C4B067EF143ECB9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 042D
Signing time: Thu 01 May 2025 08:00:33 +0000
Manifest this update: Thu 01 May 2025 08:00:33 +0000
Manifest next update: Fri 02 May 2025 08:00:33 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: 0JYSOWJUphQ8eKTaIBEEiSLam9BolWM+v09GDoVTY4s=)
2: r0qME3D6vnHPgW7FfIJR7qyiR6U.roa (hash: +N7ZuBvhriEjaq14DPYwTSmD1pr2ezeFoDJODymMVSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:93:76:db:e2:3d:8c:4b:06:7e:f1:43:ec:b9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: May 1 08:00:33 2025 GMT
Not After : May 2 08:00:33 2025 GMT
Subject: CN=4a44912eefe536da0a4a11558c1fb07bbf2295e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:22:f1:50:e8:c1:42:3e:5a:af:dc:aa:2b:
64:ab:7b:59:1d:65:8e:24:05:f5:86:77:82:c9:b9:
b4:d7:30:88:35:60:8b:c5:3b:33:a5:97:94:cf:74:
a8:77:b4:1d:4d:e3:11:65:e4:eb:3d:b1:fa:13:10:
3c:e9:16:4a:9d:d6:97:ab:c2:9f:ff:cb:99:ca:95:
4d:f6:50:f4:52:43:eb:e6:73:c8:ea:76:cf:c8:54:
6a:f8:4d:84:3a:c1:f8:f0:1a:bf:6a:4a:86:48:07:
14:6c:29:f9:f8:e2:2f:23:b1:e8:e9:df:ff:e4:0a:
27:81:cd:d5:d8:9c:2b:09:4b:4e:21:30:32:06:cf:
d0:fe:85:4f:57:07:e2:8d:de:09:fa:8c:a2:26:9b:
bf:e4:82:55:cc:c7:9e:40:8a:43:94:f8:78:ed:40:
4e:62:ea:42:dc:72:12:1d:16:cb:1e:9c:85:ee:19:
af:71:bf:23:31:cb:a8:a9:3d:7b:4c:5b:71:20:e3:
af:e6:da:5a:de:ea:1a:ba:a6:19:96:c7:fa:32:86:
01:2f:86:bb:32:54:d5:4e:65:4d:38:62:f0:9a:ff:
04:09:b3:e0:b8:4e:3a:7c:26:b3:5c:51:8e:f4:4f:
21:42:7c:0e:23:11:37:17:92:b4:6f:87:72:c6:3d:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:91:2E:EF:E5:36:DA:0A:4A:11:55:8C:1F:B0:7B:BF:22:95:E5
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:25:35:fb:20:e1:6a:91:23:a7:f1:8a:12:47:d2:c6:98:
2e:37:46:b4:d9:cb:26:68:ce:30:2f:7c:47:da:55:b7:3c:b9:
c7:c3:8f:95:84:83:70:7b:78:e4:6f:15:53:97:31:10:b8:68:
7e:bb:1a:4b:3f:ac:f1:22:ac:26:b6:11:5a:e2:84:06:e6:22:
9e:c6:f9:fb:2c:fb:c5:18:7b:a0:c8:5b:0f:35:54:5f:e8:87:
4d:41:0d:48:ae:84:84:e1:bf:9d:35:ba:b8:c1:17:e1:42:5a:
6d:5c:86:41:94:dd:44:30:c0:15:ab:45:1f:46:8d:5b:f1:9c:
a0:45:8c:a5:94:5c:63:d1:75:69:07:b5:cc:46:4e:05:2e:bc:
9e:f9:74:b7:a3:ea:fb:a8:6b:f6:6c:01:72:76:2a:00:69:d9:
18:cd:c3:42:2c:46:6b:41:d8:7b:03:45:83:58:6a:96:51:1d:
c5:88:66:e1:82:9b:33:b3:29:53:d7:26:21:1d:01:51:12:8d:
97:50:35:3c:b3:94:91:03:13:df:ee:93:3d:09:b5:8b:b5:e6:
b4:39:a3:e2:30:98:b9:c2:f0:a4:03:d3:ff:ec:96:af:1e:01:
56:14:d9:98:d9:21:5a:30:16:38:69:d7:bc:c5:7e:43:b9:8f:
44:08:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:57:03 2025 by rpki-client