Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: 3i8CsfWfCQfCChBwmEbPul+xM9QeYMJ43hi3nE1r1rA=
Subject key identifier: 2F:8A:22:46:7D:3A:F8:B0:7C:CB:4F:71:B8:EB:3D:AB:48:06:39:A5
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 019688B7287BE39EA2BE76547105CC1BEBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0BE9
Signing time: Wed 30 Apr 2025 22:00:26 +0000
Manifest this update: Wed 30 Apr 2025 22:00:26 +0000
Manifest next update: Thu 01 May 2025 22:00:26 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: UxFUm5EBpWFipBNiRmG4sgIdQp7lp9lj13uvvbii4l4=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:28:7b:e3:9e:a2:be:76:54:71:05:cc:1b:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Apr 30 22:00:26 2025 GMT
Not After : May 1 22:00:26 2025 GMT
Subject: CN=2f8a22467d3af8b07ccb4f71b8eb3dab480639a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:74:dd:e7:ed:45:09:ba:6c:f4:c8:dc:be:
2a:4c:e0:e6:c9:af:b3:2f:f1:b6:8c:03:29:73:7e:
80:ce:89:83:eb:ef:f2:d7:9c:9a:02:00:61:47:35:
05:ca:31:72:6f:c4:5c:26:1f:53:88:52:09:a7:fd:
0f:ed:0a:b1:95:1c:d0:19:16:d9:30:97:25:b2:d4:
90:b2:01:8f:c1:70:1f:a4:9b:6a:13:0d:32:05:0a:
51:08:24:57:d5:30:97:cb:a6:e4:e3:64:e1:48:83:
e8:10:a1:85:97:f1:c7:20:c7:f8:81:b3:48:1e:86:
65:9a:64:0f:aa:a3:00:74:b2:72:20:09:e3:ba:de:
ae:57:c2:ff:04:87:97:a7:c7:07:78:13:cc:19:06:
04:76:db:27:b9:7e:9c:31:ef:0d:49:5f:d2:95:7f:
f0:64:66:07:1e:a4:90:28:d4:83:32:ab:a6:2c:fd:
b9:5d:ce:e0:30:7f:2c:42:28:c9:25:5f:2b:cf:22:
f5:3c:ca:37:29:cc:13:e4:3a:34:9b:06:7c:29:c3:
ca:c8:d8:55:39:da:7b:c0:0c:7a:55:9c:7b:b9:21:
c3:4e:e1:63:62:5e:70:04:83:c6:2e:ed:a7:f3:16:
92:3e:64:5d:16:88:20:53:5e:02:c0:6c:90:63:c4:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:22:46:7D:3A:F8:B0:7C:CB:4F:71:B8:EB:3D:AB:48:06:39:A5
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:45:1e:b6:a9:5e:4e:19:26:29:d6:cd:41:cb:65:4c:c2:
ee:b8:82:4e:c7:df:f9:0d:08:ea:4e:d2:d3:51:d7:25:e2:36:
85:9e:de:ea:5b:9d:6e:1f:a2:0e:03:29:2c:f1:6b:66:89:f3:
a2:72:f8:bb:1b:8e:45:2e:a0:62:97:96:f3:cd:f5:d6:50:e2:
bd:2e:b9:bf:c3:69:03:05:4a:e5:b5:99:82:d0:cd:6e:89:67:
e2:24:b4:d5:34:20:2c:90:21:1f:4f:07:47:8b:31:a4:58:cc:
31:ee:34:3a:0d:d7:57:b4:09:b7:4b:0b:7d:e3:6d:07:17:27:
24:61:fe:a0:94:ef:f0:d1:a5:e5:f0:98:43:6b:41:9c:20:5d:
08:c0:96:92:2b:12:34:11:29:e4:2e:fa:0c:01:bb:2d:92:a6:
44:b3:f6:b9:11:69:27:4c:7e:35:36:42:b9:7d:a4:51:1a:9f:
6d:65:7e:38:15:a4:63:1b:ec:bd:ed:b3:10:29:8c:d6:30:ba:
6c:08:05:0d:82:32:80:3d:40:69:c6:b6:89:13:b8:c3:68:c1:
b6:50:a8:34:fa:86:a2:fe:66:55:53:81:e1:93:02:f1:7e:56:
1f:a8:fd:c0:22:81:f2:f4:dd:1c:cb:ec:56:8b:8e:5c:9c:f2:
fa:17:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:46 2025 by rpki-client