Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: cmT3gGHPIPlRtCStOCPhaabvHquGD85OePUwov8Uyag=
Subject key identifier: 56:E2:AB:C7:0E:9F:46:04:04:E6:88:5F:0F:2A:D3:B8:AB:05:91:F5
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 0196876E7546E087021AC79C857D38F07C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 1414
Signing time: Wed 30 Apr 2025 16:01:25 +0000
Manifest this update: Wed 30 Apr 2025 16:01:25 +0000
Manifest next update: Thu 01 May 2025 16:01:25 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: Vnwi2BPOGfqPEQpwW5CeGyjQ31mE3VLc91Ip2q3aKjk=)
2: o1l5BPG8TRspXIfZdrd0blYAUfY.roa (hash: 5xBU1dsBZ1CJDSiFKF5L8bb4B1rGVOEs++4FXuZA5ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:75:46:e0:87:02:1a:c7:9c:85:7d:38:f0:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Apr 30 16:01:25 2025 GMT
Not After : May 1 16:01:25 2025 GMT
Subject: CN=56e2abc70e9f460404e6885f0f2ad3b8ab0591f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:1c:71:58:d0:e4:d8:33:1a:31:6a:ef:b2:
89:e3:f1:21:1b:fe:bf:b7:40:48:f8:16:1d:84:e9:
a5:c8:06:80:46:d8:02:e0:28:a9:c4:c6:12:ef:75:
f8:a6:79:13:82:06:b4:3d:9d:52:f8:a9:e2:3e:7d:
f7:cc:b9:9c:37:b4:5d:8d:93:e1:83:0a:1a:26:3a:
c0:fc:0b:31:06:39:ca:84:45:5a:44:1a:16:75:67:
b7:91:9b:a0:eb:db:43:59:cf:9b:f1:29:58:31:b5:
2d:bc:93:c9:29:8a:c4:f9:dc:c9:37:97:b8:2e:bd:
19:0c:22:ef:47:23:77:4b:a6:d4:75:28:dd:b7:f2:
32:49:82:07:89:5a:d3:26:f2:3b:f4:98:23:b0:43:
a1:37:ba:a7:86:57:08:3f:87:d3:7a:4e:12:f6:91:
a2:62:a2:d7:a9:f2:6c:73:3c:91:ca:bc:15:f5:99:
b4:b6:6d:d9:13:eb:27:80:1d:da:bc:96:46:d2:a5:
75:71:30:ae:d1:ed:14:91:7c:8e:31:0c:d6:c0:db:
17:dc:3c:2b:e8:ee:42:62:92:82:1e:f3:3d:e0:d7:
28:50:d1:96:43:3f:6b:a4:c1:a8:9b:3b:f6:27:04:
bf:98:89:51:0f:4f:16:4d:e1:03:7f:58:bf:57:4a:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:AB:C7:0E:9F:46:04:04:E6:88:5F:0F:2A:D3:B8:AB:05:91:F5
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:27:5f:c5:85:80:5e:05:ac:0a:59:6c:ca:fd:3e:6b:ca:8e:
d5:a8:c6:52:5b:15:f5:3b:64:f3:8f:12:66:42:ba:7a:ce:f8:
64:61:1c:3d:af:0f:5c:19:c6:17:30:f9:e4:49:19:9c:f1:93:
ab:42:4c:45:5e:3f:f1:90:29:75:c1:21:36:15:9a:78:96:a8:
27:23:63:18:3d:d8:8f:27:64:18:c6:50:c2:16:46:f6:a1:c5:
86:99:4e:23:d0:be:84:5c:b2:18:cd:87:04:5f:48:a9:ba:24:
c3:25:ad:0a:0f:e2:b9:ad:3e:78:a5:db:0b:52:5d:60:86:d2:
35:3a:24:b6:6f:c2:2d:0b:b2:26:7d:2d:56:8c:76:cb:56:be:
2d:cb:71:bb:de:5f:39:8b:70:f7:39:92:b7:ca:d4:c9:4d:35:
2b:6a:5e:d0:94:59:76:ea:bd:38:e6:a1:8d:bd:09:8e:ae:ee:
8d:ed:81:7a:35:a9:f7:16:e0:d7:b6:d4:09:57:ae:9b:0b:ef:
c4:86:c1:40:a4:0c:86:45:e5:46:d3:62:fa:5b:32:a0:0d:75:
37:ad:05:83:eb:e5:de:5e:00:0e:96:65:39:4d:0b:f2:8b:59:
9a:48:ec:1c:1a:b3:e1:40:f5:17:6f:80:d5:04:bc:c8:a6:4e:
53:14:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:42:30 2025 by rpki-client