Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: ICRxNY2BdXLYU+jHNzA0T//3vtzK/95SvJPwlL/g2a0=
Subject key identifier: 5D:74:C1:10:0C:A1:A8:DF:47:CA:EF:A3:B4:5D:16:A9:9C:CA:BA:2B
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 01968BB8856FD23E976EDE5A622B14C5C069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 12:00:47 +0000
Manifest this update: Thu 01 May 2025 12:00:47 +0000
Manifest next update: Fri 02 May 2025 12:00:47 +0000
Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: 99sb9ok2p1MOhQV7EMnvtu66tDT4VJGeLtlg8JS1Mfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:85:6f:d2:3e:97:6e:de:5a:62:2b:14:c5:c0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: May 1 12:00:47 2025 GMT
Not After : May 2 12:00:47 2025 GMT
Subject: CN=5d74c1100ca1a8df47caefa3b45d16a99ccaba2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:a1:83:fb:a1:56:48:b2:dd:eb:a2:ab:98:
33:f5:8c:15:2d:c7:74:72:62:e7:af:89:47:1b:04:
41:46:b0:8b:7c:fa:7f:d5:a3:e1:3e:e3:d3:2f:3a:
c6:4e:ab:50:82:08:64:9c:b2:8d:d2:3e:7a:27:5d:
95:0b:fe:17:98:89:89:05:16:50:f5:51:ab:19:4b:
15:37:07:60:58:b6:2d:fc:d7:f9:32:9c:95:e7:8a:
b2:08:75:69:a5:82:a5:d0:7d:8b:9c:b9:92:02:86:
c2:99:12:c0:49:21:8f:b2:fe:4f:74:0d:c1:38:45:
25:22:98:fc:8c:eb:7c:e9:7d:8b:f1:40:5c:46:61:
b7:6a:b2:fe:a7:23:bc:31:fc:60:cd:76:32:e2:fc:
cf:e4:4b:f3:cc:34:8a:e1:90:28:b4:cc:94:11:a0:
f6:b1:2c:26:c5:e4:2c:5a:24:aa:b8:01:c1:7e:e3:
6e:93:96:f8:16:7f:54:57:09:2b:c7:cd:37:9c:09:
11:cf:aa:07:f9:b0:19:fd:3d:95:5c:e6:a9:db:81:
fd:45:c8:aa:94:28:28:28:4e:79:c9:d8:8f:12:05:
97:d1:37:9d:0b:53:c9:76:c1:8b:c6:c8:b5:b3:85:
da:6d:b3:d3:87:eb:4c:0a:80:01:49:7a:39:16:7f:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:C1:10:0C:A1:A8:DF:47:CA:EF:A3:B4:5D:16:A9:9C:CA:BA:2B
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:06:44:32:b3:f2:95:13:ee:dc:3c:69:a7:a0:0c:b9:20:56:
8f:9d:d9:1a:b8:b2:e3:80:48:72:d1:12:5a:8a:00:2f:49:b6:
16:c8:95:26:13:09:f2:32:7a:0e:41:2d:3e:25:a6:6b:cc:64:
4f:9e:eb:38:0e:cc:19:24:d9:c0:b7:14:f1:9f:80:8f:c9:4f:
8d:0a:df:e9:70:ce:73:dc:17:1d:9e:3d:fe:73:4c:eb:31:35:
52:d5:4e:92:ee:c1:30:31:55:bb:c8:24:65:86:55:dd:ed:8a:
84:95:b2:63:2a:43:8a:24:89:3f:14:d5:63:17:7a:75:a0:62:
e7:0e:14:b4:a6:63:73:13:b5:99:fa:86:61:a6:1b:50:d8:50:
a3:32:90:5c:7a:f2:0a:0f:92:5a:3d:12:54:01:85:0f:27:75:
4c:18:45:d6:ff:81:e5:94:b7:0f:41:a1:ca:01:d2:e3:96:e2:
6b:70:b2:74:12:88:ef:5e:89:e2:f0:a7:cd:ab:db:7e:4c:a8:
3b:02:c0:87:ef:16:d9:2a:13:75:2a:8e:90:e9:d5:f3:99:97:
36:01:b9:ec:64:11:58:dc:b3:47:ef:6a:16:1e:1f:14:d5:2c:
54:87:3b:1e:72:1d:99:9d:86:d9:49:37:88:db:80:73:f3:28:
9e:eb:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:37:58 2025 by rpki-client