Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier: nvaVX1f6oPEqPNZP2hmv4GGScJ1n+7L7hyUaTNojdLM=
Subject key identifier: BD:EB:00:73:76:E3:ED:17:2D:08:61:EA:FD:5C:38:FC:56:E0:90:35
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 0196759EB38135FF4D07DC17850EE64B8702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number: 06F3
Signing time: Sun 27 Apr 2025 05:00:57 +0000
Manifest this update: Sun 27 Apr 2025 05:00:57 +0000
Manifest next update: Mon 28 Apr 2025 05:00:57 +0000
Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: sfN5Vv7KA/39H/68s/hhRtrrz4pWWpmbrCJihz/AUKQ=)
2: xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa (hash: XpFkMfmlY0imCtGtKPRW/lTcymGc5XbfGzDPyUvzl8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b3:81:35:ff:4d:07:dc:17:85:0e:e6:4b:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Apr 27 05:00:57 2025 GMT
Not After : Apr 28 05:00:57 2025 GMT
Subject: CN=bdeb007376e3ed172d0861eafd5c38fc56e09035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:4a:d5:02:18:5b:c0:fd:63:72:57:8f:38:
dc:bd:0a:af:70:20:f3:93:d9:63:b2:fb:48:de:1e:
06:39:de:c6:54:5f:39:4e:00:67:7e:12:50:07:16:
cc:83:11:6a:b3:dc:00:48:09:b0:b4:98:c0:f3:04:
ab:48:7a:76:e0:e4:46:5b:5a:84:e5:16:d5:a3:48:
98:72:b9:9f:4d:12:0f:8a:7a:02:4e:c2:95:96:98:
85:0d:fa:d6:48:34:05:1f:c2:03:9c:a8:92:c7:8d:
db:88:fe:96:08:3d:c8:a9:19:b3:ad:f3:80:a4:1f:
af:b4:50:95:fd:d0:50:79:e8:58:11:d0:1e:bc:69:
a5:d0:4d:67:27:66:80:63:d5:07:9a:00:6b:67:54:
48:fb:dc:c8:a8:20:69:9f:5b:23:cb:2d:2d:34:89:
98:0f:e3:f3:a8:4b:64:17:e4:3e:7d:ee:a0:0b:09:
5e:6b:e9:bc:6c:be:1c:59:5f:9f:ef:3f:10:d4:c0:
30:74:98:2b:b4:78:b1:59:9e:99:1f:a4:89:c9:1b:
f1:8d:02:54:94:37:58:90:f5:23:d8:c7:5a:d4:f2:
45:7d:90:33:b5:67:52:d0:4e:26:1e:82:a1:89:c2:
c5:0c:80:b0:32:3f:92:7a:a8:d7:13:3e:3f:bc:e5:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:00:73:76:E3:ED:17:2D:08:61:EA:FD:5C:38:FC:56:E0:90:35
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:ed:86:74:9f:43:2e:9d:cc:ee:2f:db:bd:f6:5f:98:f8:
ad:ce:b1:b0:c1:c9:91:56:97:e0:31:8a:b2:db:ed:0e:58:ee:
0d:87:f3:98:ef:eb:2d:95:6b:9a:d4:7f:59:b3:be:a7:5c:ff:
b2:7b:78:0d:84:bb:b3:d6:7d:2f:dd:07:a6:58:c0:d0:9e:d9:
39:69:5b:f4:f6:ea:d7:ab:f8:79:07:4e:4b:dd:07:1a:d9:f7:
ae:27:30:de:80:2d:f3:85:b2:e3:9f:53:04:f4:de:cf:28:73:
79:88:62:27:a6:43:bb:2e:6e:37:a9:81:8a:2e:c5:49:a0:5b:
59:f4:68:cc:ba:89:bc:62:30:b2:a0:e6:4a:f3:61:df:40:d1:
9e:d1:d6:80:1a:f4:74:58:96:b2:27:32:7d:1e:ab:c0:59:f6:
fc:c4:0d:9e:07:cc:2b:0e:d6:32:ce:1d:40:f7:ba:ff:70:1d:
1f:a7:80:28:4d:8f:fb:ff:d6:a7:19:6b:e5:59:56:c6:30:3e:
c3:3c:81:5b:74:93:06:1c:68:0b:30:7a:51:1d:96:46:c4:af:
23:77:bc:d3:90:ed:20:6d:60:6a:5a:7e:b9:71:b0:dd:5a:c0:
bc:e2:f8:d4:f1:95:40:8b:f4:36:de:16:ef:70:07:0b:9a:d9:
03:4d:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:55 2025 by rpki-client