Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier: Qz8JCs2ia6/efjXujXQdUcizyUO6jFlM6Nv6kZ68cbo=
Subject key identifier: 58:4B:73:FD:98:8F:D8:B8:3B:E4:3B:CA:49:88:D9:61:59:64:67:4C
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 019683912B08DC943F81D652767CE02F023A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number: 151E
Signing time: Tue 29 Apr 2025 22:00:51 +0000
Manifest this update: Tue 29 Apr 2025 22:00:51 +0000
Manifest next update: Wed 30 Apr 2025 22:00:51 +0000
Files and hashes: 1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: 868hKv9p2A1AbmZYSubjnmCKRfhdJZBG38eDOJxZonc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:2b:08:dc:94:3f:81:d6:52:76:7c:e0:2f:02:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Apr 29 22:00:51 2025 GMT
Not After : Apr 30 22:00:51 2025 GMT
Subject: CN=584b73fd988fd8b83be43bca4988d9615964674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:a0:61:9a:b4:82:04:5a:2c:9f:d8:28:a0:
22:d6:43:49:9e:b5:c7:f6:4a:cb:0a:07:fc:11:7a:
82:44:e7:2c:48:ed:56:f3:9c:11:1b:2d:56:ad:2a:
d6:c6:d9:f1:47:77:dd:c2:1f:1f:82:71:4c:dc:35:
6a:2f:19:53:65:00:b4:e6:aa:79:36:3f:7b:19:7b:
66:2e:11:c1:f9:ed:a3:93:64:4b:af:ca:bd:8e:6f:
85:b3:82:3c:dc:4e:e2:c9:fe:76:ac:b4:1a:74:b4:
0d:05:a0:69:5c:85:48:e8:32:f4:ff:74:45:18:58:
a5:97:94:b0:ba:bd:84:ca:b2:38:7d:cb:ce:99:6b:
39:8c:db:dd:d0:a8:d4:e1:0d:b7:41:29:19:88:f2:
b4:8d:9b:1c:eb:ca:56:e9:5e:99:31:68:2a:47:d7:
bc:96:2e:1b:0f:05:b3:71:0b:dd:39:2a:85:2a:03:
17:fe:d8:41:39:f4:e6:f2:d1:57:b6:fb:54:5e:d0:
36:79:25:b8:b0:30:73:f6:67:58:e7:a1:35:67:19:
bb:dd:87:fa:8b:04:d3:f6:b0:ef:bf:7a:75:2e:61:
47:15:bd:fc:de:69:d3:3d:d5:df:61:c1:1b:32:15:
28:7d:69:62:32:a1:14:50:53:ca:0b:e2:b7:98:a2:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:73:FD:98:8F:D8:B8:3B:E4:3B:CA:49:88:D9:61:59:64:67:4C
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cb:81:9d:ae:c6:7d:b8:0f:2a:5d:4b:06:f2:33:04:18:42:
e4:53:17:65:c5:a5:4e:e6:b6:e4:9b:c2:60:fd:49:81:06:f4:
21:50:b4:ba:54:cd:a0:dd:e4:99:a8:60:32:07:d7:44:82:f7:
b3:4e:9b:d8:1b:5a:96:0a:00:ad:4d:c4:e8:29:9f:4e:f0:a7:
ed:e5:da:10:82:c7:32:41:db:d7:48:75:18:a5:29:4d:0a:54:
70:d9:43:eb:2f:8f:3e:00:1b:5b:86:e3:f9:14:fe:ec:cb:09:
43:32:63:a6:8d:3d:9f:35:aa:0d:ab:a0:34:d6:79:da:1d:f7:
3f:05:4a:58:75:2a:a2:bd:10:d7:a8:37:1a:be:37:b5:b2:2b:
1f:3d:66:a9:ab:b7:9c:fe:96:cc:4c:d0:06:da:35:78:06:82:
27:07:a4:44:77:bb:05:7c:e1:fe:fa:d1:75:6e:d2:6a:8d:da:
bc:21:5a:18:f7:32:93:7f:c7:33:d2:5f:c8:3a:bf:bb:f8:54:
3d:94:f5:10:36:69:b4:a0:3b:f7:2a:23:89:0d:30:b6:47:b1:
f0:54:2a:7a:28:50:98:7f:65:a2:ef:56:94:59:46:aa:76:91:
b0:ca:67:99:3f:a2:b8:3a:0c:a7:b1:5a:38:44:dc:33:20:0d:
3c:d1:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:30:08 2025 by rpki-client