Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
File: gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json)
Hash identifier: IBIVB/rJvOXElfGct28pu4y/ORZZA2Vnr5gN+VqUR+g=
Subject key identifier: 91:4C:FD:54:0F:69:64:3B:22:08:94:1B:01:2A:3C:D0:A2:D1:0D:23
Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
Certificate issuer: /CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Certificate serial: 019679E964D56B71DF50AA1C1E98E96F6B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
Manifest number: 10A2
Signing time: Mon 28 Apr 2025 01:01:00 +0000
Manifest this update: Mon 28 Apr 2025 01:01:00 +0000
Manifest next update: Tue 29 Apr 2025 01:01:00 +0000
Files and hashes: 1: gPvG8JKXbj-vvJrpNLZ9cDnUs8w.roa (hash: JKRD+vgt19aGbPFmkdV1fkgtJNWsit5Cuia9bEn2uRY=)
2: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: DEDPv9HIouwa/JILmOfOkKVLeHE/qOI1G81GJYQdmDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:64:d5:6b:71:df:50:aa:1c:1e:98:e9:6f:6b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Validity
Not Before: Apr 28 01:01:00 2025 GMT
Not After : Apr 29 01:01:00 2025 GMT
Subject: CN=914cfd540f69643b2208941b012a3cd0a2d10d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:43:0e:50:39:c8:89:c0:34:09:89:6a:c5:
fd:6b:fa:69:30:2f:20:97:26:99:fc:e1:b2:04:b2:
80:e3:32:d3:fb:60:01:18:ce:ee:34:42:35:4c:dc:
c3:6d:16:95:f6:d5:db:df:50:96:ea:0d:fc:cd:69:
8a:fc:e2:35:59:d5:8f:8f:b2:70:91:3a:b4:30:a3:
6d:fa:88:9f:8f:f9:7e:a3:d3:b8:b0:d7:15:47:45:
3f:37:18:af:1a:90:03:14:7f:4d:42:c9:a8:7b:0a:
c5:3f:dc:32:22:c0:ea:7e:1b:78:cb:93:f6:d6:88:
0c:d5:06:ff:b0:eb:05:1a:dd:35:58:3a:85:15:1e:
61:78:61:a2:f0:90:ca:03:d6:db:03:3f:21:37:82:
c8:2c:07:7c:64:e7:a6:7a:fa:fc:64:c1:b0:e5:51:
73:d9:b4:35:1d:c8:6a:98:f3:1d:49:16:3d:3d:49:
95:35:ac:e1:24:55:3d:09:51:b9:c0:bf:b8:74:91:
b8:48:f9:88:c1:5d:da:6b:07:e4:36:f1:4e:ac:15:
10:22:e6:77:02:fe:7e:c2:db:fa:43:b1:02:55:cf:
23:ca:35:60:7f:82:c9:f2:8f:50:49:8d:1e:d5:de:
4b:13:28:41:d5:b7:ef:64:d8:3f:e5:ad:04:39:8f:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:FD:54:0F:69:64:3B:22:08:94:1B:01:2A:3C:D0:A2:D1:0D:23
X509v3 Authority Key Identifier:
keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7e:0e:24:07:8c:b8:c8:38:55:66:e3:87:bc:da:a4:23:d4:
0e:85:1c:0e:cf:f1:e3:e4:ba:95:c9:cc:6c:3d:23:0d:2c:40:
a9:59:52:63:77:95:d9:26:bf:a2:ab:8d:2f:e1:27:78:d0:f4:
ed:e3:78:41:3e:f4:9b:fe:44:74:a5:a9:40:8c:32:7b:a8:ac:
53:1f:a1:73:c7:35:8e:ca:52:9b:d3:8e:12:b0:ce:56:18:47:
50:68:16:14:f0:88:b3:8f:43:d9:19:a8:3a:ac:41:c9:19:f9:
ec:b3:e8:7a:c8:77:1b:b8:e4:7b:75:07:f1:e7:82:2f:eb:46:
b6:21:42:9c:6f:83:4b:2e:02:2b:ec:17:e2:75:26:89:42:cc:
ee:4e:78:83:02:a6:a1:f8:78:22:70:52:34:bf:13:47:8e:bc:
f2:f0:67:41:7e:6e:e4:04:2d:97:79:29:d5:4b:ef:c9:96:f7:
16:ee:40:d4:4f:1a:7d:d4:73:ca:b3:78:e7:8a:92:cb:6d:d8:
6e:ab:d9:d0:e4:65:d0:78:de:20:28:01:d7:5d:bc:b4:cc:e3:
b3:53:6a:e5:6a:4c:19:e7:db:a1:11:0b:53:e3:09:f7:e4:59:
7e:73:4a:b5:ee:f2:89:7b:5d:99:77:ac:a6:d0:aa:2b:e4:34:
97:ae:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:40:32 2025 by rpki-client