Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: b/6rXIBhm29NVSI9sq9Bo2hMFHUEqTf+3/2IBjfMJkU=
Subject key identifier: 14:5B:93:C0:54:D5:41:31:42:C7:99:26:F8:66:CC:0C:D2:C7:A4:D5
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 0196839137CDE08234F3347EE5C3B240B353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 22:00:54 +0000
Manifest this update: Tue 29 Apr 2025 22:00:54 +0000
Manifest next update: Wed 30 Apr 2025 22:00:54 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: leakjjUpoGVs9chMFWh5BD4dUWLiqK7reUoYcP0QtS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:37:cd:e0:82:34:f3:34:7e:e5:c3:b2:40:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Apr 29 22:00:54 2025 GMT
Not After : Apr 30 22:00:54 2025 GMT
Subject: CN=145b93c054d5413142c79926f866cc0cd2c7a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:07:cb:53:a1:aa:da:7c:78:05:4a:b1:ec:
ab:8f:ca:93:ce:8a:bb:40:70:9a:50:7a:c6:8d:5c:
53:a3:9a:d4:97:99:a6:86:7f:a5:20:cf:27:b1:96:
da:e9:df:41:0c:17:14:09:c7:ef:30:c6:72:83:dd:
62:e1:b5:77:bc:a7:0c:a9:eb:c4:c0:79:11:00:d1:
12:10:72:7e:d9:8e:89:2b:29:ab:34:ba:bd:9b:22:
51:f4:21:8e:06:e1:15:a0:8d:5f:62:f4:fd:c2:eb:
68:b3:7e:39:f1:0c:46:bd:dc:45:0e:d6:32:12:99:
e3:94:1d:34:9d:b9:7c:81:17:03:38:e4:36:8f:fd:
7c:f1:d2:39:27:e8:8d:12:68:32:9f:e8:33:a6:f2:
85:ac:d8:0e:95:4c:c1:76:e1:46:35:17:92:fc:e7:
03:13:34:3f:b0:76:db:c2:5b:17:91:cc:ac:15:a3:
82:dc:fd:9c:98:7d:e4:29:04:b3:0e:8b:06:66:b1:
b3:d1:41:ae:dd:b9:fe:3f:62:40:7e:84:28:ae:c7:
a6:e1:6f:62:84:04:64:8a:5f:c8:85:f3:b2:cb:3f:
c4:85:8d:a9:52:44:82:66:2c:6b:99:03:2a:de:e3:
de:06:f1:8f:5f:09:0b:7a:87:f7:e1:05:77:d5:28:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:93:C0:54:D5:41:31:42:C7:99:26:F8:66:CC:0C:D2:C7:A4:D5
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:f0:10:02:8e:c1:b3:4c:88:3f:f1:a9:f0:ba:12:d1:67:
21:1a:6b:1b:ef:99:7e:06:7a:0f:fe:0d:23:5c:8a:56:13:2e:
6f:18:82:ba:9e:7f:c3:d5:86:d5:fc:b4:e0:1f:f4:70:c0:df:
a0:0d:8b:c9:5c:e4:58:83:b9:a0:fd:5d:28:4a:40:4e:5d:f3:
85:98:bb:55:bd:67:3c:97:60:ec:21:c3:ed:ee:74:fd:db:e2:
21:08:82:48:ab:f6:8b:37:60:91:b1:cd:8a:01:a4:1f:d4:e4:
20:f2:19:da:7c:f1:de:23:1f:c4:91:0d:6e:fb:82:b2:21:81:
94:f8:39:0f:9c:85:d0:ea:c0:e3:8f:6e:10:4f:3c:66:3a:ad:
b3:c2:a2:d8:65:9d:ed:21:8a:c6:3c:d6:81:4f:f6:e7:53:f5:
ff:a9:6b:29:12:a6:59:93:8d:3c:85:97:5f:94:01:fd:69:6c:
eb:5a:bd:c9:ec:4c:4d:98:e7:62:70:d8:40:1e:a6:35:5c:e8:
a7:94:b5:a2:e9:f1:72:f9:fe:6d:8a:a6:00:b9:86:96:18:d3:
ef:9f:9f:4a:41:8c:a9:a8:26:9f:e4:d3:89:8c:8d:36:4b:08:
6f:db:3c:aa:82:1d:2b:d6:4f:f7:16:86:2f:ba:6f:7b:83:78:
fc:84:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:32:32 2025 by rpki-client