Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: IwHfJrDjWbDHb5wg2DbKWRRaeVTqa5sAuBwBtwVY2ZY=
Subject key identifier: 62:6C:D9:51:B6:3A:53:FB:F1:CD:3C:1A:63:00:E1:2E:E3:8D:89:9F
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 01967BA09EA1BF23736A9BC114B0B1A7B2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0AB3
Signing time: Mon 28 Apr 2025 09:00:46 +0000
Manifest this update: Mon 28 Apr 2025 09:00:46 +0000
Manifest next update: Tue 29 Apr 2025 09:00:46 +0000
Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: +S8fbeDawTRS2SeJMkqBAM8yVcquSb8VVGkigH81R5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:9e:a1:bf:23:73:6a:9b:c1:14:b0:b1:a7:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Apr 28 09:00:46 2025 GMT
Not After : Apr 29 09:00:46 2025 GMT
Subject: CN=626cd951b63a53fbf1cd3c1a6300e12ee38d899f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:4e:e5:c4:56:cc:5c:a1:ca:39:3f:a1:06:
c3:cd:2c:fb:fd:49:a5:c4:e1:4b:56:98:0a:89:9b:
89:90:d8:1f:82:fe:11:26:1d:c4:bc:e7:ca:f8:e1:
fb:ed:fd:dc:55:69:9a:78:03:46:d3:fd:4b:b5:1f:
04:9f:84:33:21:e6:10:33:69:ee:cb:0f:4b:28:af:
e5:3c:34:18:06:bb:71:9a:b6:8f:a9:6b:b6:88:38:
54:62:6c:d1:4d:70:c7:5b:28:a4:53:88:cf:4e:a6:
2d:06:7c:b6:24:c8:48:02:35:78:57:b3:3a:65:24:
72:79:ae:c8:a3:ea:84:66:ce:c7:70:4a:9c:18:c1:
af:8e:2a:30:2f:01:28:d8:45:34:73:6d:4c:e8:7c:
90:f8:d5:42:ce:1c:4a:ba:17:f7:33:7e:f5:c9:84:
f5:39:f7:cd:73:ea:3b:8d:8e:63:29:92:95:25:0b:
e7:91:7e:56:71:f7:74:3f:0c:cd:04:fa:b6:01:a9:
ee:d7:6c:8a:8c:59:ec:91:da:41:cf:9a:72:e6:f3:
73:c8:27:cb:b6:89:56:5d:d9:cc:c9:ea:d0:79:a2:
57:60:e8:c6:7b:7d:0f:de:64:e9:27:cd:07:95:60:
ec:fd:2d:b4:81:ba:ca:80:34:79:5c:1b:9e:d0:a3:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:D9:51:B6:3A:53:FB:F1:CD:3C:1A:63:00:E1:2E:E3:8D:89:9F
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:49:57:95:c2:df:48:97:54:e5:fd:02:8e:a4:2b:de:f6:6c:
2f:67:50:c1:a9:cc:29:1c:29:44:88:13:af:ee:b6:d1:bc:7a:
a4:bc:29:09:53:60:65:09:76:f4:3e:e2:c8:11:bb:5f:da:1d:
60:0a:5b:7f:4d:5f:5c:96:b5:8d:b8:35:3b:78:ae:92:27:01:
86:de:1a:9f:74:45:a5:19:e1:10:3c:f6:ae:c7:e9:99:80:98:
51:6d:1b:19:08:42:cc:f0:da:49:e6:97:28:0d:8d:fe:24:98:
bb:bd:be:7d:2a:d5:b9:9b:30:87:00:65:af:e7:37:51:78:f5:
9e:ff:9f:48:45:94:a2:e4:08:9e:86:c9:26:ac:31:8f:6a:8e:
41:93:ec:b0:3a:2d:8d:9b:d1:33:b3:83:9b:b7:41:54:a7:97:
8d:0d:6c:b1:0b:16:1a:2c:75:5c:99:86:ed:5a:36:83:04:1c:
b5:93:b7:df:e9:6a:7c:e1:b6:3b:1b:83:e4:1c:9c:89:20:c9:
4b:40:5e:e8:44:93:37:4a:c6:b6:32:06:23:c4:80:e5:06:15:
bd:58:70:ca:37:01:fb:c6:2f:4f:0e:0b:37:db:51:af:5e:b1:
7f:9a:60:1c:0f:fa:02:7d:0a:eb:30:3b:7c:25:68:26:c3:49:
4a:df:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:42:58 2025 by rpki-client