Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: 3ga0iqWYYY0xdmktOGMs99t8z5AWcrf4RH5wPMQ1PTE=
Subject key identifier: BB:53:93:D0:0E:AE:0B:1C:DA:D1:D9:B3:FE:DA:60:8B:8D:3A:A0:60
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0196821086D47E0F2B2DC42FAF6CFE52DDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 15:00:43 +0000
Manifest this update: Tue 29 Apr 2025 15:00:43 +0000
Manifest next update: Wed 30 Apr 2025 15:00:43 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: IOB8qbcjQltYyWoy/SxjuEmVKrv81aAiYCx1SZrOySQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:86:d4:7e:0f:2b:2d:c4:2f:af:6c:fe:52:dd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Apr 29 15:00:43 2025 GMT
Not After : Apr 30 15:00:43 2025 GMT
Subject: CN=bb5393d00eae0b1cdad1d9b3feda608b8d3aa060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:ae:51:ef:4b:92:84:b6:1d:ef:73:9a:53:
7d:98:89:89:18:62:9b:e2:b1:45:f4:fc:39:78:e0:
f4:52:20:5d:c5:46:5b:5d:2c:3c:87:07:f6:68:a4:
a8:05:5c:8c:40:9b:da:09:6f:80:c2:c1:89:80:d4:
79:22:41:a8:34:11:2d:03:1f:53:50:36:76:ae:89:
01:30:35:0f:b8:23:6b:4d:79:00:c3:42:c4:29:33:
5b:1f:aa:7e:ad:c4:b4:9f:b4:7c:4f:a2:85:1b:92:
d8:f2:33:48:e9:52:79:8b:d7:5f:b9:aa:8b:94:f2:
3b:f9:93:55:fc:ac:01:30:5c:04:6f:26:d2:7c:a9:
0b:05:12:f7:49:f3:00:fd:9e:78:22:a8:83:e4:9e:
e5:b8:5d:db:6d:13:19:9f:61:86:2e:ad:a2:eb:9b:
10:08:dd:b3:65:c5:82:11:c6:6e:30:06:19:22:66:
f3:bb:cc:06:e0:d1:07:8a:82:94:ab:24:6c:27:db:
26:e7:ab:58:80:5c:f7:f4:7a:4a:43:13:5b:4d:c8:
96:3d:87:89:cd:87:d5:fb:8f:dd:67:70:0f:23:47:
fc:cf:49:12:23:a8:27:f8:a0:92:b0:6b:ac:30:57:
06:26:d4:fa:c8:83:d9:35:42:8e:1d:de:85:42:9a:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:93:D0:0E:AE:0B:1C:DA:D1:D9:B3:FE:DA:60:8B:8D:3A:A0:60
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:dd:96:ed:4c:71:1e:c4:44:39:af:cf:52:78:81:ef:13:
34:be:0c:7d:a4:13:27:ed:9f:6a:9e:19:7e:85:f5:cc:30:bd:
d8:48:04:71:07:aa:20:b6:17:e5:eb:11:30:e3:e9:25:8b:00:
f9:84:1e:22:cc:f2:33:9b:69:3d:e8:94:37:bb:9c:bd:55:57:
d6:96:4d:58:c9:e2:88:4e:69:38:c3:22:a4:f2:9f:68:1d:7e:
6e:6c:59:4b:b7:13:b8:35:29:86:d4:a3:16:b8:28:da:78:39:
28:64:07:1d:98:a6:77:c6:ad:66:9a:56:12:4d:47:17:27:3a:
7a:30:76:62:00:b5:45:76:85:68:89:ba:db:19:93:f2:92:bb:
49:e7:52:4c:38:de:97:d8:18:3a:14:67:4b:61:05:8b:c1:38:
48:84:7a:87:0c:5d:9f:f6:fc:4a:29:8d:40:e2:ae:ed:58:b1:
71:4e:51:69:6b:33:91:f9:63:04:3f:7b:90:c1:33:c8:9e:33:
3e:54:a3:2d:53:e7:42:a7:7a:bb:74:75:36:85:4f:42:83:b1:
8f:be:86:e2:d5:fe:ad:9c:81:a3:7e:ef:dc:52:cb:00:ab:21:
4e:7d:f8:ed:a3:63:32:a7:25:29:61:b3:f9:87:9c:09:bb:f5:
0c:8a:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:34:21 2025 by rpki-client