Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: igSjlH8sSGbFc7Cl9dpz3NKLvhBQgz6r1+pocuO3KFI=
Subject key identifier: 21:34:23:EE:4F:47:2B:A8:7D:93:F5:6F:C9:1A:0C:60:4C:D1:71:11
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 01967FB3DD6D8180FFF03AEB0F41802C6B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0692
Signing time: Tue 29 Apr 2025 04:00:16 +0000
Manifest this update: Tue 29 Apr 2025 04:00:16 +0000
Manifest next update: Wed 30 Apr 2025 04:00:16 +0000
Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=)
2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=)
3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: U5CvYB83pkd0wW5qW9nojfHfpSH2xNPii710InjWTD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:dd:6d:81:80:ff:f0:3a:eb:0f:41:80:2c:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Apr 29 04:00:16 2025 GMT
Not After : Apr 30 04:00:16 2025 GMT
Subject: CN=213423ee4f472ba87d93f56fc91a0c604cd17111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:48:fc:3b:f1:f8:2d:bc:94:fa:76:dc:95:
4d:2e:95:bd:f4:48:c7:06:d1:8b:9a:5a:43:b1:a0:
34:e6:b1:42:2a:ed:30:c2:f9:2b:99:1d:24:83:3a:
0d:5c:1e:3d:32:b0:ac:41:9b:eb:1d:f4:96:80:04:
d2:14:6a:00:bc:5d:eb:6b:ad:c0:4c:6c:67:f4:2d:
e0:4e:5a:d8:88:48:02:c6:cf:b7:6e:b9:1b:7d:e5:
ff:58:71:6a:a6:1f:9b:9e:ea:64:e6:60:e5:9c:70:
0d:fa:78:01:bb:72:cc:50:9b:bc:75:fe:2a:a2:fa:
58:5c:90:7a:83:92:84:38:12:62:c0:a1:3c:34:34:
16:26:a1:0a:1d:20:da:a8:47:24:50:a8:ae:6c:13:
e3:c9:8b:c1:95:4f:4b:ef:da:fc:6b:5b:84:45:bc:
ad:25:22:09:f9:13:2b:99:03:59:ea:ea:18:9d:fc:
95:79:5f:5e:bc:2d:f0:43:4e:08:a7:d3:04:7b:80:
54:71:07:f3:c1:44:82:e4:22:67:58:ee:44:6d:45:
99:89:00:4d:7f:71:17:57:08:44:5a:64:f3:4b:44:
3b:54:7d:33:ae:15:cc:6a:e9:6e:a8:a1:f3:f5:25:
33:1e:7b:f9:a3:2c:8f:3d:0a:31:56:3a:8d:7c:09:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:23:EE:4F:47:2B:A8:7D:93:F5:6F:C9:1A:0C:60:4C:D1:71:11
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b5:69:b6:a3:df:01:23:bb:0c:16:84:64:6f:81:bf:e5:4a:
b1:79:da:92:e3:f0:dd:bf:73:92:25:aa:25:47:ad:5e:95:2b:
24:d3:99:fc:58:26:cc:41:4d:b6:24:7b:be:34:4a:5c:9d:44:
05:96:8a:1c:1c:63:33:8a:94:ee:f2:47:fa:b6:04:ff:d3:ae:
80:f6:68:ff:c0:78:84:23:8a:cf:7a:7d:1c:35:77:f0:34:8e:
22:1a:60:16:f4:42:cd:ec:c3:ca:3b:a3:b6:5f:bb:d0:23:0d:
31:21:27:74:0a:68:54:5a:fa:b1:7a:b8:10:4c:63:e7:84:7a:
a2:e0:cd:72:2d:58:15:71:9e:ca:01:85:af:25:8d:df:68:6e:
ae:5e:ae:59:09:35:4f:55:ae:8e:4d:5c:e9:f1:2c:e8:15:f6:
57:6e:9c:9e:c4:eb:17:45:a0:03:c3:92:b0:bb:0b:3d:fa:ec:
fe:66:eb:0f:06:29:64:a7:c6:2b:bc:23:89:a4:e9:1d:15:fc:
82:1a:52:a0:3c:3e:56:57:4d:90:d4:34:5f:bb:e8:51:28:79:
f3:56:4c:71:09:12:68:45:31:2c:2a:6f:92:8c:f2:d8:c1:72:
56:35:83:21:a9:e8:fa:16:ac:fa:4b:2b:eb:e5:cd:24:61:48:
73:41:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:56 2025 by rpki-client