Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: NLI4yxAM+NeHkysEkFO5x/oJ4/etos4far/Jr/QEsQM=
Subject key identifier: FC:9B:51:03:EE:63:B1:83:20:5B:3A:04:D3:6D:58:68:04:8D:26:07
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 019690036F3DCFDCF4EFE20B47561B32D4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 0E1F
Signing time: Fri 02 May 2025 08:01:06 +0000
Manifest this update: Fri 02 May 2025 08:01:06 +0000
Manifest next update: Sat 03 May 2025 08:01:06 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: fcQZYf2IvB4WdXm+jpYMok7fP8LkcHY6HdyJqqpeUuc=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:6f:3d:cf:dc:f4:ef:e2:0b:47:56:1b:32:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: May 2 08:01:06 2025 GMT
Not After : May 3 08:01:06 2025 GMT
Subject: CN=fc9b5103ee63b183205b3a04d36d5868048d2607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:e0:e0:dc:fe:9d:4d:88:a0:da:13:3c:de:
e9:d1:d7:f6:32:df:87:1b:5e:65:e2:ff:f6:06:6a:
29:24:a4:eb:88:db:f6:ea:41:ac:68:c3:09:36:bd:
54:93:83:ef:e7:14:64:32:5b:fd:d7:85:4d:50:89:
20:44:d0:0a:e6:f0:20:f6:3b:18:29:da:48:d4:a7:
30:7c:ca:15:b5:d4:71:9b:6e:59:85:8b:d1:22:95:
5f:07:10:11:d0:e8:f8:f9:fc:b5:6d:08:d8:6d:88:
fc:15:9d:cf:49:89:66:34:05:b3:74:0b:6b:fe:4f:
8b:d8:da:23:7f:ff:40:6a:50:16:f6:67:65:e5:38:
63:bf:9e:3e:1b:a1:c7:35:0e:75:24:1d:2b:be:7e:
23:51:93:c2:75:cf:69:07:8d:36:9a:1c:97:ca:98:
4a:5c:ae:5d:ce:0c:cc:4c:77:1f:c3:9a:37:0b:a6:
bf:e5:83:6f:1d:53:ce:d9:67:c4:0e:83:e2:74:1c:
fc:49:17:5c:cd:f9:af:b4:c3:5d:f0:c6:f5:3b:36:
b7:dc:96:d3:88:c7:10:0f:c7:71:65:4d:30:b0:10:
94:8c:85:2c:76:c5:3e:56:b2:f9:d8:fc:1a:e4:42:
35:e2:e3:47:39:4c:3a:87:24:48:90:ce:67:5a:f8:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9B:51:03:EE:63:B1:83:20:5B:3A:04:D3:6D:58:68:04:8D:26:07
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:42:a2:33:de:b3:e1:08:fa:a2:03:07:29:cb:53:ab:6c:
ae:1f:c2:ed:b1:08:47:6d:8f:d1:97:ba:f5:26:34:e0:8a:ce:
2a:8a:8c:66:49:b3:4d:5d:e6:d1:2b:9d:98:ae:64:85:7b:86:
a9:e2:4f:d6:ee:5d:c9:9d:11:f6:f4:8d:8f:89:15:9c:fe:47:
29:2e:f6:2e:3d:c6:bf:be:0a:6a:68:31:0a:77:54:bd:1b:67:
69:4d:f9:91:44:e0:e4:e2:7e:0c:1e:a5:f8:b4:34:48:59:ac:
fe:96:0a:17:09:e7:e4:f9:12:66:a6:32:40:ad:d0:c4:a9:6e:
ee:a7:8f:2d:da:b9:f7:6f:50:66:0c:32:52:0d:93:bd:23:c0:
32:e2:1a:45:91:1f:b6:0b:c5:75:92:c5:a9:8e:6e:30:55:d8:
08:b6:ee:9d:60:0e:02:b1:6a:04:90:2d:2a:06:8e:26:40:30:
61:f6:ab:2c:f7:d6:d8:44:b2:41:92:10:40:1d:b1:5a:27:f2:
97:5f:11:9a:61:56:0f:62:a3:b1:9a:b2:38:a3:6f:30:52:19:
ee:64:53:c9:e4:5a:78:bc:68:6e:2c:89:44:84:45:bc:8e:8c:
22:db:62:92:e0:40:da:71:a0:bf:15:bd:6e:ed:ba:a8:44:6a:
f7:87:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:20:58 2025 by rpki-client