Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json)
Hash identifier: n7PqnVdhmKEekcyXU8mZ5NI8W4oY0pvy5BghY1r1qYE=
Subject key identifier: 41:85:56:10:87:8B:71:67:E9:4A:CF:69:A2:3C:37:2D:AF:35:64:A2
Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Certificate serial: 0196748C316A2245DDB982C8A76ABCE80286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
Manifest number: 1B
Signing time: Sun 27 Apr 2025 00:01:06 +0000
Manifest this update: Sun 27 Apr 2025 00:01:06 +0000
Manifest next update: Mon 28 Apr 2025 00:01:06 +0000
Files and hashes: 1: GQ42kTqn472NU0Utg1aKLG7W0bI.roa (hash: oM3P06tzeH7/sG3RLnC5jVN3WHhv6hvEc5nYDWBm418=)
2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: wDee0QpPg20p/Fqg8SAEFuMZ0J5bFEDEBgk9GIUM6Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:31:6a:22:45:dd:b9:82:c8:a7:6a:bc:e8:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Validity
Not Before: Apr 27 00:01:06 2025 GMT
Not After : Apr 28 00:01:06 2025 GMT
Subject: CN=41855610878b7167e94acf69a23c372daf3564a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:a9:a0:f4:7c:84:e7:10:bc:97:8c:22:c7:
37:c8:22:e2:c0:cb:5e:22:5e:81:d9:16:7a:13:20:
e8:30:cc:df:3b:a5:e8:d6:fc:f8:29:f5:86:c2:6c:
c0:e7:b4:71:b1:e4:17:5d:89:6d:87:42:4b:b9:f9:
b0:83:68:8c:df:b6:ca:fe:ec:12:8a:66:94:2a:ea:
b6:fe:46:a2:7c:da:bf:66:77:8e:1f:e4:cf:2e:b1:
ca:c7:df:d0:f3:f7:63:97:c7:d6:fc:68:d3:a0:a8:
3a:24:8a:29:f1:d4:2e:2e:81:30:cd:ac:58:98:5f:
34:d5:4e:ba:e1:c7:05:10:cf:0d:0d:28:88:82:42:
dc:cf:d0:2a:fe:df:1c:18:8d:26:9f:cb:a8:5c:82:
7f:a2:f1:09:e7:d8:d5:f1:c1:e3:15:c9:ed:67:b7:
64:6a:c7:a8:9c:2d:68:e9:eb:92:4f:18:56:e1:2f:
c9:52:0f:f9:c9:36:89:a4:3f:2a:7c:36:d7:ac:6b:
09:37:b6:a2:f6:0e:ca:69:01:6d:b9:ff:ea:fa:33:
56:cc:8f:78:dd:c2:aa:f8:cd:3f:3e:45:1e:f8:54:
e5:c1:0f:9d:ff:70:14:2a:26:5a:06:58:3d:4c:2f:
ac:48:bb:e1:b3:5e:f5:4a:c1:c5:6b:20:12:b5:1f:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:85:56:10:87:8B:71:67:E9:4A:CF:69:A2:3C:37:2D:AF:35:64:A2
X509v3 Authority Key Identifier:
keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:17:83:5a:52:91:35:a3:d6:45:15:13:ae:fe:61:69:79:28:
4d:3f:75:72:c3:10:80:b2:72:7b:5e:5c:84:11:1b:b6:23:03:
60:a5:2d:b9:9a:9d:67:16:13:0a:d8:42:99:b6:01:0c:8e:bb:
3a:3f:47:53:08:b0:32:d4:d4:e6:df:24:40:46:1e:a3:e9:7c:
08:11:66:be:41:eb:26:9f:b4:43:a2:a4:22:be:28:ab:9e:ca:
02:af:c2:d1:69:9c:c4:5a:19:ae:e8:33:43:68:70:f0:b3:ce:
b0:0c:16:51:50:7e:2a:9c:bd:21:af:a0:59:c6:d0:00:35:a0:
0b:09:67:6c:4c:04:37:7c:1f:33:4d:33:5a:cd:f9:83:59:76:
f2:c3:23:b0:23:ec:fe:aa:10:eb:30:27:9c:d1:13:ec:11:b6:
7a:7d:c9:b2:6b:31:ba:33:e1:15:de:d0:80:0c:11:49:61:4a:
64:bd:bf:46:64:6f:e3:40:bb:a6:18:7f:fc:c5:d6:4a:cb:f5:
a4:81:f4:7c:fc:4f:8a:b3:29:92:09:78:80:1f:03:b2:d6:25:
91:e1:03:4e:84:43:c3:aa:92:46:52:93:9a:ff:ac:ce:83:59:
fb:23:46:f1:04:bd:af:e4:2b:16:35:c1:7d:b0:0c:00:2e:a8:
86:3c:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:51 2025 by rpki-client