Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: CA2uvDy+9lRL7nV/DOEoTDerbtFfuUWykpOHjSDzz08=
Subject key identifier: 21:49:0B:40:F8:D4:B5:67:8E:00:13:0D:1A:DB:99:D2:6B:F3:91:E4
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 01967378B8E783CF72B79A8F324BF516B8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0BBC
Signing time: Sat 26 Apr 2025 19:00:13 +0000
Manifest this update: Sat 26 Apr 2025 19:00:13 +0000
Manifest next update: Sun 27 Apr 2025 19:00:13 +0000
Files and hashes: 1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: f1gpFppw6BoCBbfrWWIAHeQCU/d3v78q0ThgIBNURTY=)
3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:b8:e7:83:cf:72:b7:9a:8f:32:4b:f5:16:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Apr 26 19:00:13 2025 GMT
Not After : Apr 27 19:00:13 2025 GMT
Subject: CN=21490b40f8d4b5678e00130d1adb99d26bf391e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:18:3a:a3:c4:86:a1:89:12:27:fb:d8:cf:
dd:6e:a5:72:bc:b4:34:6f:e7:6b:1c:16:67:b0:82:
3a:9e:a1:5e:5b:b7:d1:3f:6f:fe:5a:77:1f:8a:5f:
16:09:0a:5f:de:f9:d7:b1:91:dd:64:76:72:73:9c:
42:9a:e7:bd:63:5c:0c:c1:88:20:0d:82:9b:f4:aa:
50:40:39:d8:ec:84:1c:8b:6c:43:53:2c:b4:5c:04:
a4:12:76:b8:89:da:3f:69:7a:38:13:f9:2a:0c:39:
cd:11:c5:a0:5b:56:cc:e5:ad:8f:d8:2d:07:35:aa:
7d:d6:7d:d5:29:69:d5:23:a1:f4:92:4d:7c:40:c0:
84:f2:3c:cf:85:dc:90:88:2c:8f:17:73:e2:fd:c3:
be:c7:73:79:94:20:49:82:36:da:1f:3b:db:ed:e9:
62:2c:29:20:de:79:1c:fd:92:1c:b4:46:8a:e1:e7:
d1:d5:f8:1e:2a:46:67:6c:9a:e7:19:f3:6e:55:ad:
31:bd:43:4f:1e:68:fe:3c:ea:af:2b:e5:1a:00:6a:
a5:82:2e:24:1d:28:8f:f3:45:b9:1d:ac:d9:0a:10:
ca:db:5c:b6:27:e3:b9:3a:d4:b1:02:8f:10:91:d3:
53:21:b5:16:b4:d6:34:0d:91:2b:a4:79:42:3e:97:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:49:0B:40:F8:D4:B5:67:8E:00:13:0D:1A:DB:99:D2:6B:F3:91:E4
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c6:e1:d5:6d:8a:d5:2f:6c:a3:a4:b4:29:b8:ba:94:bb:5c:
92:32:6e:ba:3e:33:70:37:d5:70:0e:e8:c3:cc:3e:b6:bb:0b:
42:65:27:fc:ee:51:67:b1:2c:ce:a5:2d:a1:92:9e:ab:93:95:
fd:a7:54:8a:54:05:42:d7:30:58:ea:9f:30:0d:f9:8b:00:a3:
b2:92:57:65:92:6f:fb:c6:d8:07:d7:50:66:59:fc:46:d6:b1:
29:98:77:2c:99:70:e2:a7:2e:20:2b:56:89:8a:d7:21:e9:be:
39:ec:7f:50:38:78:f9:d2:86:30:79:76:c5:e2:49:a2:68:83:
ae:51:67:ee:8b:37:31:09:94:1e:ee:32:c8:91:83:19:86:1e:
c3:04:8f:66:0c:87:15:52:e7:5b:ef:9f:46:71:10:28:0f:d2:
14:f4:8e:6c:f2:e7:d9:07:73:51:26:03:ea:e1:e2:fc:17:f0:
d0:47:ea:cb:f8:24:8e:d3:73:81:6b:c7:b9:04:db:92:cd:a2:
75:75:ca:92:cb:39:1a:53:83:87:72:1f:53:14:b2:60:68:ef:
9d:c6:c8:8b:3a:a8:52:fd:eb:be:6e:e0:06:98:1c:a9:14:d4:
be:aa:f4:5b:c5:af:1c:1f:87:a8:2c:95:d8:bb:0e:90:74:4d:
60:04:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:57 2025 by rpki-client