Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File: gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier: PFwmLM3pJF32224jobZ8VDvkNCB9LK/P4R9obccVSZE=
Subject key identifier: 05:A9:FE:D5:94:32:F1:51:28:AC:82:80:5C:C3:21:75:45:B5:CD:17
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 01967F0F1C55B78BCE03942269844A252131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number: FB
Signing time: Tue 29 Apr 2025 01:00:18 +0000
Manifest this update: Tue 29 Apr 2025 01:00:18 +0000
Manifest next update: Wed 30 Apr 2025 01:00:18 +0000
Files and hashes: 1: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: 3L8y1/MF80XF7Y1OP+/jxMAz0ZttbXoQRD8YDo/9jBw=)
2: moIHrCUIysvqre1db9iG8YhXiD4.roa (hash: 3qmhRdBwt3IbZM/x/JJkjl8tv0bK7oEsrL8A8nVm2tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:1c:55:b7:8b:ce:03:94:22:69:84:4a:25:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Apr 29 01:00:18 2025 GMT
Not After : Apr 30 01:00:18 2025 GMT
Subject: CN=05a9fed59432f15128ac82805cc3217545b5cd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:c7:c4:70:25:1b:65:2e:f7:5b:5f:dd:5e:
b1:29:f0:f5:96:e8:4c:f9:93:2e:2e:d1:72:39:af:
b1:5b:03:d5:af:a8:0c:7d:4a:d2:5c:23:7f:f5:e5:
d9:2a:2b:a7:d5:7c:50:7b:7a:6b:f1:0d:75:97:d6:
76:f9:61:e8:c9:e6:41:39:a6:16:c7:d5:b3:72:fe:
b6:11:25:7c:c0:f1:2e:b1:e0:c5:cc:0f:fe:eb:f8:
45:b4:08:7e:e6:36:c6:ca:ef:ff:31:13:e2:b2:3c:
37:24:28:8c:db:46:ea:b2:cc:8d:46:c0:95:7a:42:
8b:1f:7f:65:86:25:00:1c:6a:4b:69:b6:7d:4b:98:
11:d2:f4:5c:01:5f:d2:7f:fd:9a:47:5b:f5:85:3a:
e6:f3:bf:3a:12:63:7c:4e:78:c4:2d:3d:10:fa:15:
d7:fb:28:97:7b:b2:1a:b3:ee:d3:85:9c:6c:0e:db:
6e:1b:83:25:e5:20:10:62:0a:fe:9a:9b:4d:8f:10:
af:f1:fd:5d:21:38:42:d0:d3:81:20:82:16:a7:4c:
85:6f:43:07:71:d9:59:12:41:c4:c6:da:6d:51:e5:
70:76:9f:6f:0b:cb:ae:f3:23:50:9e:19:75:48:83:
33:2e:d7:cb:0b:c0:f4:d9:7c:4c:74:1e:e6:b8:3e:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:FE:D5:94:32:F1:51:28:AC:82:80:5C:C3:21:75:45:B5:CD:17
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d0:07:08:7a:97:c4:03:78:4b:e5:f4:73:63:13:23:f2:b2:
8a:5a:df:ea:cc:c5:fd:89:4b:34:03:8b:a8:73:a3:b1:1b:54:
30:7e:16:cb:6e:dd:9e:5f:29:ff:7a:c2:e5:e9:c2:96:21:2d:
7c:8a:2e:d5:51:4f:37:d8:86:9f:0f:eb:6c:db:6e:ef:b9:e7:
ab:01:78:38:e3:46:47:11:b1:1d:c1:ed:e9:a2:ef:43:22:8c:
ca:48:84:0d:f0:01:a0:78:96:94:98:17:51:95:70:16:71:fb:
ea:17:cc:2f:63:c6:d4:62:8a:23:89:fe:02:f7:7b:6a:4f:d1:
25:2e:72:66:63:d0:57:98:cf:39:82:33:07:b2:91:d0:7a:e0:
d8:ba:c0:bb:02:23:4f:9b:7f:70:f2:8f:17:11:65:0a:4d:f2:
a7:e5:1d:a9:4d:0a:df:c7:e9:86:b4:6e:74:9e:71:95:3c:ba:
55:19:a8:67:14:4c:ca:7c:c4:69:aa:cb:33:76:f2:84:50:af:
7a:2a:f6:1f:52:98:2f:41:71:1b:38:23:f1:c8:c7:62:e0:05:
31:92:5d:a2:fa:0c:c8:7a:b9:6d:a8:97:98:c8:5d:31:c0:2a:
4a:00:ee:fb:3d:0b:22:d3:c9:22:ae:5f:1a:f7:60:72:fe:74:
4d:e1:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:10 2025 by rpki-client