Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: KKWtin0zu0oCdFpphO0b5Gw7vIYDvbpUYXW+pJucs/w=
Subject key identifier: 4E:72:F2:90:34:38:F4:C9:0E:0F:11:34:3D:D2:C2:94:A9:4B:51:89
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 01968A6F1F966D041B3854AAC5F07612CABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 06:01:00 +0000
Manifest this update: Thu 01 May 2025 06:01:00 +0000
Manifest next update: Fri 02 May 2025 06:01:00 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: /RMnGtLOPE2mzeO28Cpxkx9viCeTgKcSjY4ePXFXDgc=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6f:1f:96:6d:04:1b:38:54:aa:c5:f0:76:12:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: May 1 06:01:00 2025 GMT
Not After : May 2 06:01:00 2025 GMT
Subject: CN=4e72f2903438f4c90e0f11343dd2c294a94b5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:0c:3d:61:6a:c4:d2:88:2b:ff:4d:4d:f2:
3b:4f:93:b7:3e:10:7a:5e:b9:90:1e:3e:51:47:29:
3f:89:e6:d5:84:9e:b0:ec:88:64:9d:8b:6f:5f:12:
fd:86:54:60:a0:35:0f:79:21:a5:9e:fc:f4:a2:ce:
f0:c9:ea:b5:7d:ae:4d:f4:7c:71:81:f8:19:ac:ba:
fd:45:0e:8e:16:55:cb:60:1e:cf:4e:3e:3e:c0:f1:
a1:c1:0b:cf:3a:e3:53:7e:7c:5f:31:0d:25:22:3d:
fe:89:b2:3d:ad:d1:5e:11:c1:69:11:26:49:6d:e6:
5e:c9:26:d7:60:1d:3c:b9:d6:24:01:32:05:f9:38:
c9:e9:3e:57:c3:12:39:46:54:76:c6:73:d3:1e:1c:
c4:cc:45:9f:38:29:3a:02:d3:f3:54:2d:79:c1:23:
87:ef:e2:14:23:d4:8c:f9:d6:9a:b0:4b:28:90:3f:
4b:1e:f4:23:28:c8:65:f6:7f:d9:4d:59:b9:a1:cb:
fd:ba:c8:90:bc:a3:b7:6c:fa:b2:46:94:14:af:0d:
97:12:70:68:bc:60:65:ee:61:a7:b1:10:15:b5:94:
d4:62:a7:44:01:20:15:ff:ba:23:68:45:a8:a6:72:
c0:4f:eb:cc:f2:06:93:af:1f:ab:81:e2:1e:85:7c:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:F2:90:34:38:F4:C9:0E:0F:11:34:3D:D2:C2:94:A9:4B:51:89
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:cb:2a:24:82:3f:f8:99:1b:e9:48:95:4a:44:61:41:1c:
ba:3c:47:39:21:a8:17:9c:1f:6f:c3:65:3e:b9:3a:85:49:3d:
92:f5:5c:92:63:2f:90:7c:4f:99:67:1c:ff:76:cd:cb:09:60:
d0:27:16:4d:70:65:ec:60:c6:16:1a:04:7f:5b:93:94:0c:e0:
0f:9c:32:2f:6a:7a:60:85:f8:e3:a2:8c:0a:4f:cf:1e:67:f3:
21:8c:2e:de:9a:e8:72:92:b0:ff:3f:ca:fe:25:ef:16:37:8c:
04:8f:ee:91:f5:13:66:2c:ca:bd:e6:82:d6:6d:30:c0:98:64:
31:0e:cb:8d:2c:21:85:32:a0:21:61:b9:68:96:4b:a7:42:64:
b4:54:b2:11:4a:6b:88:12:7b:fd:3f:e5:46:12:ce:7b:0e:2e:
57:48:dc:73:c6:83:ad:4a:00:5c:3f:20:f8:7f:cb:f1:b8:a5:
ab:fd:3c:de:24:b4:32:a3:2b:a5:aa:cf:e9:a2:ad:b5:00:dc:
29:ba:94:53:3c:1c:51:e0:17:e6:ed:67:c3:fc:b7:56:cd:aa:
2a:b8:46:db:7f:b7:ec:1b:85:0b:64:d8:c1:85:01:9e:01:7b:
45:76:5d:ec:59:3b:59:11:65:0d:a8:89:4b:f7:9a:f8:b6:e4:
7a:30:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:15:00 2025 by rpki-client