Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: ma77KUhuF8HFavR3Rl9ekBrjHyW72R3pDV4FuNAixp8=
Subject key identifier: BA:BB:49:51:B9:E5:94:26:4B:D3:D2:34:02:D6:C2:E1:9F:A9:EC:74
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 019693049513077936C49E20888405E2ADC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 22:01:12 +0000
Manifest this update: Fri 02 May 2025 22:01:12 +0000
Manifest next update: Sat 03 May 2025 22:01:12 +0000
Files and hashes: 1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: vZfdrZsazcGA4008tFdhvCObwWCieA0pW01/u2O6utU=)
4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:95:13:07:79:36:c4:9e:20:88:84:05:e2:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: May 2 22:01:12 2025 GMT
Not After : May 3 22:01:12 2025 GMT
Subject: CN=babb4951b9e594264bd3d23402d6c2e19fa9ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:45:4e:4d:82:88:21:0b:4c:27:99:f0:40:
66:e9:c1:1b:fc:37:93:db:c2:99:0a:56:64:6f:f9:
34:82:1b:56:00:2f:52:6b:bb:b1:dc:ac:ee:88:42:
17:a1:34:e4:c6:e7:13:0f:96:2d:a4:c1:8c:02:ce:
67:a6:f0:60:21:70:81:7b:d3:3d:48:de:9e:ed:d3:
7c:b2:5d:e1:4c:7f:c7:74:a6:9a:3b:d4:a2:36:d8:
5b:a2:70:02:a2:1c:27:1c:0c:20:1e:e7:d8:2e:10:
f9:e4:44:19:30:b8:40:bf:6e:92:87:1f:64:8e:25:
f2:c5:b2:dd:b5:2d:9f:c9:df:a3:a1:71:fe:12:12:
c1:df:7c:5c:ea:bd:0f:d4:27:a1:69:ce:de:38:cf:
bb:5b:e5:30:a1:2e:a2:09:c2:1e:4d:98:46:2a:e3:
a5:57:5b:93:30:22:b1:0f:c3:b3:cf:7a:56:01:b3:
39:5a:31:83:f4:96:3a:a8:47:fc:3a:a6:36:4a:b0:
b2:1d:48:93:fd:ec:09:16:3a:bd:60:7c:89:94:12:
fa:64:9f:89:16:60:f7:ad:d7:c0:94:a4:2d:ea:06:
de:df:ef:db:d8:70:3d:52:03:aa:1a:ab:77:cb:96:
8b:06:ea:e4:4c:6c:6a:9f:46:f4:cc:1a:0a:88:0a:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BB:49:51:B9:E5:94:26:4B:D3:D2:34:02:D6:C2:E1:9F:A9:EC:74
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:bb:50:73:bf:89:e4:cb:ab:01:02:a9:ea:2f:64:d2:37:
37:20:3a:65:28:35:f6:c4:a8:6c:1a:73:7c:dc:d7:89:b1:3f:
d8:da:c2:ac:9c:67:39:2e:57:30:b1:ee:cd:02:86:17:12:4e:
47:5c:f9:54:60:b9:ac:d9:18:3a:bb:4d:4b:21:65:e7:f6:37:
e9:5a:7d:7b:95:7c:69:00:00:6a:99:96:f3:d6:f0:b0:8e:3d:
97:46:82:39:fe:8c:ff:84:54:ba:ea:72:b3:52:87:b8:03:99:
97:b2:54:88:b9:3e:9e:56:ab:b4:95:92:0a:6c:ac:2e:2b:7a:
d9:b5:5c:17:d5:fb:d4:60:ad:94:c3:c1:f6:f6:9f:04:53:52:
f9:5b:83:db:07:58:03:78:06:9a:5c:7a:63:32:43:5a:d9:36:
39:5f:65:72:26:97:51:a9:c0:ff:d3:fe:58:1e:22:f5:76:55:
b1:04:3a:b7:fd:39:c4:41:25:d9:2f:9b:45:fa:c9:be:82:d1:
ad:18:f1:37:60:79:2c:cf:4f:c1:f7:19:e2:60:79:c0:71:00:
a2:a4:12:b9:62:a8:ea:fb:ee:b2:3e:c3:1c:9a:fb:63:c6:55:
82:ba:45:d0:18:7a:fc:e7:0a:69:f2:63:d2:c4:42:fe:0c:f7:
9d:6b:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:17:59 2025 by rpki-client