Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: pJsfbxdNb94x9ZxKAx/82+PAfijU9xFZE1iPR7flm+k=
Subject key identifier: 3E:66:5B:57:B7:C3:32:17:4B:47:68:1D:B3:BE:64:D4:E3:1C:B4:4D
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 01968ADC3FFE14622721E7E1551392D6031E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 07A4
Signing time: Thu 01 May 2025 08:00:11 +0000
Manifest this update: Thu 01 May 2025 08:00:11 +0000
Manifest next update: Fri 02 May 2025 08:00:11 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: kYD/DeXD6eYr8PiC+AwWds10aaEMIjZ0Ab2X0N5hCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:3f:fe:14:62:27:21:e7:e1:55:13:92:d6:03:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: May 1 08:00:11 2025 GMT
Not After : May 2 08:00:11 2025 GMT
Subject: CN=3e665b57b7c332174b47681db3be64d4e31cb44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:68:c3:3d:0c:1b:b5:1e:7d:d2:9f:7e:f8:
81:a8:71:96:8c:56:53:16:39:35:5c:9c:1c:5d:86:
29:9d:56:c3:3c:ae:cb:76:16:10:12:f7:45:2a:6f:
19:de:cb:9c:17:d0:88:ec:cf:1e:04:a4:7a:64:7e:
f6:cb:fb:77:a7:1d:e1:33:2f:a7:aa:b1:2e:d8:8e:
2c:76:21:77:94:24:fe:8a:85:62:7f:93:0c:f3:7e:
06:8d:86:2f:73:e1:80:3b:5b:fb:90:5d:57:7c:21:
35:98:89:de:2a:f3:e1:39:29:bb:58:9a:81:9f:51:
4d:db:ab:b1:fa:7c:d7:c2:17:90:1b:1b:02:f3:a5:
70:4c:d9:51:47:bb:22:a5:f5:d6:96:aa:eb:be:6c:
15:6f:a7:81:88:62:47:b4:d1:45:82:c5:d8:cd:31:
34:85:ef:85:d2:bf:bc:e8:8b:ba:48:72:5d:57:42:
34:c5:bc:56:8a:b8:82:41:08:c6:53:ea:3b:1f:02:
8c:2a:04:ea:b9:30:1f:46:85:1b:fa:1a:22:a6:b4:
bc:89:cd:17:c5:85:64:92:04:bb:7e:96:81:90:46:
40:4c:09:d4:69:95:d3:5f:09:1c:f8:b0:18:f7:b3:
71:8f:9b:e6:bc:50:00:7a:29:34:14:57:a3:25:1a:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:5B:57:B7:C3:32:17:4B:47:68:1D:B3:BE:64:D4:E3:1C:B4:4D
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:74:52:ab:2e:42:90:c5:c4:97:cd:51:b2:ce:d2:e2:92:48:
6f:c0:25:a9:4e:e0:ec:14:c1:0a:f9:7a:a7:c1:b4:ef:c6:4f:
0a:d1:01:22:63:b9:75:ec:34:bc:e5:58:f0:93:19:a1:14:b8:
74:dc:bc:ca:bb:de:05:f3:aa:36:ff:b4:fa:aa:4e:13:1a:f4:
9a:4d:c0:08:61:5e:be:ed:67:4b:62:5b:0f:96:23:f2:bf:69:
92:d4:1c:78:18:6d:85:e5:bb:70:ba:83:ae:1a:c0:59:e9:df:
23:7d:09:84:80:ee:2e:68:67:b7:43:43:b5:51:19:24:77:b0:
de:83:bd:ff:29:b1:69:85:c3:98:e0:33:5e:3c:b2:8c:0f:55:
f5:61:f9:05:58:37:08:5c:1f:aa:74:89:a9:7c:43:8e:0a:7a:
91:27:29:ee:ce:f1:cc:e0:49:c9:e4:ac:6a:94:cb:84:be:40:
6b:11:1f:44:fe:59:0a:d4:7c:7c:20:82:69:64:e0:59:b5:c1:
c5:1b:79:5d:70:79:fc:63:db:03:5f:ce:36:db:9d:a3:7c:05:
c8:30:6e:f2:42:c1:07:c3:ba:5a:83:de:c7:ad:d8:63:45:77:
f8:33:5d:1e:cb:49:bd:02:1d:49:84:83:fa:a9:96:cd:9f:eb:
7e:63:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:55 2025 by rpki-client