Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: Z8WzTh7L7gEc+1ECX052aEYmbMqjS7DdtZwBWzXN5T4=
Subject key identifier: 6A:AE:62:04:9E:75:0E:FB:D4:4A:B7:1E:BC:B6:0A:FB:6C:06:8A:35
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01968AA620AB06FD1F645A64E7155A8EBA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 07:01:05 +0000
Manifest this update: Thu 01 May 2025 07:01:05 +0000
Manifest next update: Fri 02 May 2025 07:01:05 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: cRzZHx5k91wT/CCcKFHO3xqFdqNx8f//Uz1ImevFmi4=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:20:ab:06:fd:1f:64:5a:64:e7:15:5a:8e:ba:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: May 1 07:01:05 2025 GMT
Not After : May 2 07:01:05 2025 GMT
Subject: CN=6aae62049e750efbd44ab71ebcb60afb6c068a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:d1:7e:b5:f3:7b:a6:fa:c4:44:86:0c:41:
92:57:60:ad:11:e6:b1:e9:65:3e:01:38:93:8a:89:
8d:f5:91:5d:42:2b:be:1a:f9:c7:6e:46:51:58:6a:
ad:af:63:91:3a:26:85:a5:15:f9:2f:aa:32:0a:75:
8d:24:e4:44:48:18:d8:43:08:b8:cc:b6:46:d5:bc:
ac:0c:f8:a9:f8:b7:c2:38:13:ac:ca:96:67:0c:3b:
ba:d2:ad:7a:6e:62:e4:15:70:59:57:42:cd:be:80:
25:28:aa:9b:6c:6c:56:cd:92:33:c8:19:8e:db:6a:
02:01:3d:9c:3b:0d:8d:17:77:f4:0c:ff:83:c2:7d:
5b:8e:ef:5d:ee:cd:37:a7:21:9c:97:61:15:00:fc:
47:30:05:b7:02:02:6d:ba:18:94:d3:af:67:77:22:
84:d6:24:10:e2:2d:39:d9:28:b2:f7:b7:e5:cb:9c:
5d:36:59:98:c3:52:07:d0:35:78:f0:a0:57:f6:94:
98:25:eb:dd:e9:02:72:d2:24:51:b9:57:6c:2c:02:
4a:f8:b3:17:c3:04:ee:f0:c1:6c:51:ef:fa:2b:74:
f0:6c:d9:65:65:41:db:fa:68:d6:9f:0b:c8:2e:f8:
32:50:27:de:c9:b8:5e:d4:fc:4a:68:58:2c:65:0b:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:62:04:9E:75:0E:FB:D4:4A:B7:1E:BC:B6:0A:FB:6C:06:8A:35
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8e:63:ee:ef:3e:3a:70:97:f6:0d:0e:ea:32:89:f3:0b:7f:
34:08:b7:06:c9:ff:d1:60:a8:7d:5a:f0:84:18:5a:ff:98:91:
37:09:66:ff:be:c5:ee:da:de:cd:0b:4a:18:de:ce:a1:f8:90:
2b:89:04:e1:d5:fc:1f:9e:b8:46:e0:ae:54:1c:98:7a:ad:16:
99:43:d2:ea:86:fb:e6:4f:5c:8c:93:bb:57:b2:0b:91:92:02:
2a:78:d3:99:8a:e8:68:06:af:7a:7a:3c:cb:35:3a:06:4d:7b:
d8:4e:3b:0b:e1:17:57:18:62:7a:83:05:cf:8c:5d:65:25:84:
6f:87:d5:b6:d7:fb:29:ee:85:45:44:f9:08:28:b2:f1:5a:8e:
b9:b3:7d:b5:59:cd:6c:9f:86:a1:e5:03:3f:69:ed:14:c0:11:
28:4d:3f:b8:0a:cf:44:30:0f:a7:75:35:de:57:3b:f3:30:7a:
0d:95:34:0e:33:eb:d9:76:02:db:5b:82:88:e2:26:57:e8:85:
0e:6c:49:4b:18:46:38:e1:a8:13:f1:c5:e6:db:e7:ad:85:e4:
e3:32:df:9f:d3:06:9d:9e:e8:f8:18:0c:51:ac:64:82:e5:00:
87:4d:b0:46:89:af:1c:57:9f:bd:88:e5:06:fd:8b:b3:d2:87:
dd:e2:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:50 2025 by rpki-client