Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: g8msXZwk4FdEuek6hb36F/x6z2GzoBpl8G3IRAeIjs0=
Subject key identifier: 95:1C:6F:AB:0B:F7:7F:DE:C2:B0:0B:CC:4B:6A:AE:DD:FC:7C:6D:B4
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 01967F464DE73DF226AB11F10B841819BE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 02:00:35 +0000
Manifest this update: Tue 29 Apr 2025 02:00:35 +0000
Manifest next update: Wed 30 Apr 2025 02:00:35 +0000
Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: XWNGQi3xXGmwQTtL8IqSzx5BaEgDJ7+y8LZ6DT1/Fug=)
2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:4d:e7:3d:f2:26:ab:11:f1:0b:84:18:19:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Apr 29 02:00:35 2025 GMT
Not After : Apr 30 02:00:35 2025 GMT
Subject: CN=951c6fab0bf77fdec2b00bcc4b6aaeddfc7c6db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:fa:6f:df:3c:48:5a:f4:0e:50:7a:ae:33:
9c:56:4a:5b:c9:e6:26:af:7e:53:3c:49:e2:52:fe:
a7:04:79:80:7d:0d:29:17:cd:58:b6:81:c2:7d:bf:
33:ca:d7:26:64:7a:f7:1d:72:61:93:78:8a:4a:bd:
1b:69:37:1c:e4:62:6d:96:55:d0:3c:d0:5c:43:b2:
ad:97:6d:7a:3d:be:f4:f7:bf:5d:46:ed:55:79:72:
30:5c:98:bf:4b:7e:cb:8b:5e:ef:23:f8:7b:71:9d:
9b:0d:f4:21:96:a5:68:e6:60:20:0a:7f:5b:29:7a:
3d:45:e0:ff:21:aa:7b:76:44:21:71:fd:4c:a7:b2:
39:41:a0:12:36:52:a0:3b:f4:23:b3:0c:11:c9:0f:
cc:f0:65:45:6c:6a:ac:ca:04:f6:4e:f6:5d:ce:be:
63:91:80:0e:67:37:7e:1b:6b:3c:3b:8b:9c:d7:de:
96:65:26:ca:03:cd:ab:44:78:f5:52:14:f0:eb:3a:
c9:51:29:15:b4:c9:a1:cd:01:ec:cf:84:2d:56:69:
8d:df:50:18:da:c3:57:62:29:e1:2d:5e:07:66:6d:
18:5c:93:bb:09:7c:ae:c4:2e:88:18:18:5b:47:7a:
f7:3c:01:83:af:c9:9d:90:9e:2a:c7:5d:93:5f:e7:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:6F:AB:0B:F7:7F:DE:C2:B0:0B:CC:4B:6A:AE:DD:FC:7C:6D:B4
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d3:7b:5c:a7:2e:4a:5e:af:86:cc:04:95:7a:25:ac:1d:5e:
0d:88:09:60:34:ba:e3:f9:87:0b:99:2f:7c:cf:6e:9d:fa:dd:
40:d7:4d:1e:ee:3d:4c:01:83:2f:75:c5:a4:65:f3:6a:c7:b1:
61:d9:1b:6b:79:6e:31:91:3b:43:bf:23:98:a0:1f:de:3c:3a:
2b:68:06:77:86:cc:49:6f:6a:77:31:5b:6c:53:ef:0f:01:95:
e3:15:2f:42:f9:23:22:76:ab:38:ee:12:eb:99:e1:5f:14:2b:
73:18:5d:20:e3:78:4a:63:19:bf:d9:9e:16:87:ed:7a:1b:c5:
d4:be:54:eb:f5:f2:e0:e5:bf:c0:74:9a:b4:ec:ae:07:ff:fb:
48:62:e7:e5:db:a3:82:91:86:94:9f:31:10:0f:70:0f:24:e7:
03:fc:af:10:74:8c:c8:26:2c:67:fa:f8:92:6b:33:27:ae:46:
6c:61:fa:25:cd:fe:f0:cc:14:2e:d2:22:25:f1:fd:9c:83:dc:
9a:82:d8:6f:f4:28:90:94:2c:cd:3e:eb:6c:a8:b3:99:9f:f4:
77:4c:0f:79:5b:af:6e:b9:b0:1f:a7:e2:83:80:da:9e:4b:a2:
5d:0c:80:52:38:66:4b:24:9f:c7:04:43:82:ea:08:7f:8d:58:
2e:21:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:05 2025 by rpki-client