Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File: gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier: TjXAVovyP9RordIqMq8ZLZZz9VFwoOPfkVfpvWOqg9o=
Subject key identifier: 2C:72:B9:18:73:B1:33:C6:9F:8B:92:1B:A2:52:86:10:19:1D:CD:39
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial: 0196846C4949A17D1392C18A1FC7ED9119B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 02:00:11 +0000
Manifest this update: Wed 30 Apr 2025 02:00:11 +0000
Manifest next update: Thu 01 May 2025 02:00:11 +0000
Files and hashes: 1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=)
2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: JfzpTDD2k1qRb85hc2o8xj/q+a9rF04TY3gdPxVh/4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:49:49:a1:7d:13:92:c1:8a:1f:c7:ed:91:19:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Validity
Not Before: Apr 30 02:00:11 2025 GMT
Not After : May 1 02:00:11 2025 GMT
Subject: CN=2c72b91873b133c69f8b921ba2528610191dcd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:aa:70:17:7f:1b:fc:a8:02:b5:ff:a6:c4:
cc:f1:8c:b3:c0:df:4d:82:cc:9d:df:42:b0:94:4c:
3c:34:2b:17:d0:97:f8:64:96:1a:67:5e:9b:b5:7b:
3e:34:51:81:35:e4:8d:4b:dc:8a:be:09:5e:bf:79:
11:6f:71:ed:fb:66:f8:b5:e8:c0:fa:fd:f3:61:8f:
c0:02:3a:f0:26:43:50:8a:b5:3e:ac:bf:31:00:4c:
0d:78:0d:39:59:aa:3f:a1:f9:6c:79:50:48:2a:63:
8d:61:f5:c3:28:e7:ad:8a:2c:17:70:d6:1b:bf:f3:
6f:8a:7f:57:9e:66:78:41:03:ee:dd:4c:1b:aa:30:
f7:ae:96:60:16:ec:9f:dd:b6:8a:41:50:fd:73:b4:
bf:72:48:2a:fc:55:3a:22:44:25:bd:d4:c4:01:35:
ff:53:5b:00:58:58:5b:5d:08:6f:8e:78:0c:ec:ef:
3b:5f:8d:a5:07:9d:ba:bf:e7:50:74:3c:5f:68:66:
5e:22:a7:6d:29:9d:b2:03:b9:ef:34:06:dd:cb:a2:
8f:0d:87:60:16:58:aa:c2:49:f1:58:8f:e3:dc:f2:
36:c4:7c:ed:6e:84:c8:44:dd:80:6a:66:3b:ff:e2:
f2:d4:5e:8d:d0:53:62:88:14:94:d5:d1:b1:14:ec:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:B9:18:73:B1:33:C6:9F:8B:92:1B:A2:52:86:10:19:1D:CD:39
X509v3 Authority Key Identifier:
keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:96:57:33:4a:bc:8d:b5:85:02:cc:77:94:04:14:5a:29:e1:
71:11:76:1e:50:e2:54:79:06:6c:fb:13:5a:5c:b5:32:d1:20:
fe:73:7c:1b:7e:b5:12:02:22:b3:b1:fc:b4:c9:65:ec:35:d2:
e8:6f:0d:7e:69:58:be:90:d0:8c:be:98:99:1c:7e:bf:b6:a4:
6d:38:4a:1d:dc:e7:a5:42:a9:2d:dd:3d:e4:97:87:31:cf:30:
5e:8b:17:49:ff:cb:fd:75:e4:81:b0:32:a8:3f:46:93:ad:85:
5c:f4:f4:e6:10:7f:27:9d:45:4a:cb:0d:ea:30:10:66:f2:17:
54:87:34:e8:85:98:8d:b3:5e:2a:51:43:3e:d4:20:e9:92:fc:
60:bf:30:85:8f:fb:cf:b2:af:2a:79:52:ea:09:c9:9f:ca:a2:
5e:e1:69:d6:09:b7:84:a0:2d:b0:6a:a1:5e:54:02:57:9e:16:
40:24:92:2c:a3:b7:36:4a:6a:44:c3:88:e7:89:fe:70:02:18:
2e:3b:9d:a7:1d:6e:60:d6:ac:8b:3c:75:68:8d:21:f2:73:5d:
b2:6f:f9:d8:8d:c9:8b:57:bf:06:99:b1:b5:e5:d3:9d:62:fb:
4a:6d:23:17:5d:c9:19:f0:61:43:c2:fd:ac:58:2a:32:14:09:
ad:4e:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:44:29 2025 by rpki-client