Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: C74iA9dnYUB8K1M2P0PYNQXSRps2SjDToCuZku5dugo=
Subject key identifier: AB:31:DD:04:68:A5:82:FF:91:6F:CE:09:AD:A6:EA:91:3A:F0:B7:14
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 0196730B50B3FEBE2F1E4A8FA78613F8FC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 17:00:43 +0000
Manifest this update: Sat 26 Apr 2025 17:00:43 +0000
Manifest next update: Sun 27 Apr 2025 17:00:43 +0000
Files and hashes: 1: C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa (hash: 7Q2JdX8Sk5ec7oQfahOu2+Hx1b1UUmWGaNbADZbL4l4=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: FobT/97IQakHrpwIt/e9NBcHnsw9OYk3FO4+iKIxnK4=)
3: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:50:b3:fe:be:2f:1e:4a:8f:a7:86:13:f8:fc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Apr 26 17:00:43 2025 GMT
Not After : Apr 27 17:00:43 2025 GMT
Subject: CN=ab31dd0468a582ff916fce09ada6ea913af0b714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:32:6f:7c:1e:55:3a:29:f7:4d:74:5f:a3:
9c:a5:a2:a4:88:02:ee:24:78:6a:1f:01:79:1f:be:
29:15:b2:73:42:61:cf:f0:81:ca:de:03:09:dd:ae:
fc:d3:4b:ff:f7:29:28:ee:a4:ae:da:65:32:80:67:
23:33:55:48:32:46:c3:93:ce:7a:74:90:f0:65:1c:
42:81:d5:d2:03:22:17:b3:ff:4b:ba:70:0a:64:3c:
97:c2:22:30:f5:3e:a1:86:27:1e:c0:4e:1c:60:76:
f6:c4:ab:1b:70:ba:fd:f9:0c:b5:77:2a:22:16:74:
e6:79:3c:33:7a:90:28:41:00:b8:94:be:96:d0:2c:
96:0f:89:91:b7:89:0c:af:53:84:45:2d:28:38:47:
82:40:35:85:f2:f8:08:cb:1e:b9:cd:57:2b:c3:22:
e5:45:56:4c:e9:08:5d:48:d6:ce:ac:7a:e3:e4:a2:
ae:e7:55:0a:e9:c7:48:b8:8a:18:5c:e6:13:34:78:
fc:58:fb:72:39:9e:e0:13:53:fb:e3:71:c8:51:95:
81:ff:3f:64:68:e1:80:bd:f7:b3:04:b9:aa:2a:d0:
83:b4:61:62:7e:55:2c:04:17:74:73:89:b8:a4:45:
2a:bb:b3:7a:9c:fb:f5:8a:de:2f:54:45:1c:c9:3c:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:DD:04:68:A5:82:FF:91:6F:CE:09:AD:A6:EA:91:3A:F0:B7:14
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:24:c8:68:63:ea:7a:12:e5:80:dd:3d:61:09:4b:63:5b:7c:
12:e6:ce:66:b6:4d:9c:3e:11:3a:3d:c5:b5:06:8c:b0:2c:79:
fc:de:e3:8a:88:21:62:b0:88:25:3f:47:40:08:13:6d:3f:a0:
f8:a0:fd:69:9d:54:f0:9c:78:76:e4:09:8d:65:d4:60:fa:4a:
55:c1:e5:a7:3b:a8:23:03:91:39:27:8b:00:11:11:7a:c2:ca:
aa:41:d7:c3:b3:9c:41:cb:f5:03:2f:d6:b9:65:e5:22:ab:a8:
03:9e:39:97:e0:21:08:e3:ed:a5:fb:4e:06:b2:41:89:b5:57:
a1:8b:66:33:91:17:fa:ff:a1:cf:22:65:bb:5b:0e:a9:2e:94:
eb:bb:77:c8:07:0f:9d:22:71:6d:3c:8c:cc:e8:9a:42:91:38:
13:8a:d0:d1:83:c2:48:a5:38:b0:78:34:1e:b9:bb:55:27:dd:
9b:63:b1:68:3d:a8:de:a8:b0:ee:01:f0:9d:2d:23:77:ee:2f:
e1:92:12:e6:5f:8d:77:0c:fb:e7:ab:60:f7:09:24:4c:99:30:
1e:5d:8e:57:3a:bc:78:ba:03:f1:4c:91:45:d0:91:fc:36:ed:
51:16:ee:70:2d:9d:4c:8a:5d:30:8c:6e:85:91:64:0a:f1:65:
80:8d:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:21:38 2025 by rpki-client