Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: Qo1764giWde+i0xAQVf2HiOulVoFbqPTAL5pH7Fv6Fw=
Subject key identifier: C4:F5:F2:E8:51:3B:D8:6D:F8:87:BF:1F:AA:38:2C:C0:3E:9B:C7:98
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 0196767A44C8EC7A46AE21AFBE649661AC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 09:00:46 +0000
Manifest this update: Sun 27 Apr 2025 09:00:46 +0000
Manifest next update: Mon 28 Apr 2025 09:00:46 +0000
Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: +VBELp1ofg0HkP8BdSD6I7Px5Y9J9mJYQAGGd0XKxwQ=)
2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:44:c8:ec:7a:46:ae:21:af:be:64:96:61:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Apr 27 09:00:46 2025 GMT
Not After : Apr 28 09:00:46 2025 GMT
Subject: CN=c4f5f2e8513bd86df887bf1faa382cc03e9bc798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:72:86:40:cf:47:11:91:14:57:e1:fa:91:
c6:4b:59:7f:c1:b5:39:f5:66:a6:21:74:7d:1b:c2:
7c:f2:63:3d:61:cd:8a:8a:cc:90:bf:00:6b:e7:2a:
eb:4d:92:cc:06:fa:16:30:e3:1a:bd:fb:40:e7:12:
d1:84:47:9b:19:6f:ab:43:58:f8:f4:22:c4:e9:32:
9b:67:08:a6:56:dc:98:a0:ae:b6:7e:77:26:94:68:
11:49:94:8f:ff:9b:e5:93:27:2e:c6:65:44:1f:5c:
59:f0:8c:14:6a:cd:a6:8f:e4:ad:b3:6f:e5:2f:f7:
d8:b0:1c:b7:cd:2d:c7:22:23:62:d8:ea:af:c5:e1:
92:ef:59:7c:8a:7f:15:07:3d:6a:86:30:2e:15:bc:
60:f3:f7:62:69:46:eb:5a:14:2d:c3:cb:fd:42:0e:
66:6b:5b:d5:b8:a9:f3:23:b6:90:c3:36:3e:5d:67:
57:67:d6:f7:a9:85:38:b6:44:a4:00:89:93:ce:d9:
bb:52:e2:5d:5e:ef:24:40:ff:17:50:02:e4:76:f7:
6c:bf:f2:b5:70:6b:cd:23:e5:99:6e:3c:79:56:78:
81:a7:cb:f4:1c:9d:dd:aa:ae:f1:c9:a4:ec:11:42:
34:71:fd:cb:1e:c7:b6:1a:14:28:53:28:94:d2:44:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:F2:E8:51:3B:D8:6D:F8:87:BF:1F:AA:38:2C:C0:3E:9B:C7:98
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:95:ed:cc:1a:b8:b6:39:e4:4c:2c:10:18:61:d8:8e:fc:
73:28:1a:db:ee:88:21:da:92:c1:c1:53:e0:92:25:65:cc:a2:
dc:10:b8:31:d6:af:4e:cb:af:d1:13:04:00:f3:92:91:1e:21:
62:88:ec:7c:ba:b6:b1:e1:e0:ce:59:40:20:14:ff:ed:de:e6:
28:b6:66:6d:30:18:91:9a:47:6d:2a:18:f4:d9:02:3e:9d:22:
25:95:33:35:96:44:1c:db:0d:7d:b2:5b:6a:05:4b:30:89:f6:
9b:af:bf:85:14:82:c1:d1:0e:7d:21:b0:c2:2f:5e:51:cc:95:
25:be:5f:3f:68:47:7f:01:be:55:ee:81:d4:98:ed:e5:be:9e:
18:eb:cc:9e:67:e1:86:62:02:34:89:c8:ed:d3:9c:df:6a:be:
d0:b6:ca:3a:a1:56:4a:5a:bc:92:ed:f2:9c:78:f6:60:f8:45:
2a:a8:e1:5e:2f:2a:da:b7:d6:50:e8:03:8d:04:07:6d:63:d2:
de:7b:fd:3b:d8:20:ab:b6:27:d2:20:93:eb:44:95:b1:66:76:
b5:2d:6a:1e:81:7e:86:ba:29:f3:3a:db:88:26:87:c6:79:5a:
00:15:b0:0d:39:88:52:3b:26:88:91:7e:73:e5:8a:58:81:a6:
b9:6e:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:55:16 2025 by rpki-client