Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: 2GcA/IGZOhkdelZYpXHAR1Ml4PtU5f2OUA44x3qsWFk=
Subject key identifier: EB:14:8B:A4:87:0D:9A:DF:8D:50:99:BA:21:4E:9A:63:B1:9D:02:64
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 019679B2319B544B0A650BD9B09F159A81CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0BF7
Signing time: Mon 28 Apr 2025 00:00:43 +0000
Manifest this update: Mon 28 Apr 2025 00:00:43 +0000
Manifest next update: Tue 29 Apr 2025 00:00:43 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: v0u614V5kRw0aXk1QmXNs04fO6WWU8g44vAJ0NY7494=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:31:9b:54:4b:0a:65:0b:d9:b0:9f:15:9a:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Apr 28 00:00:43 2025 GMT
Not After : Apr 29 00:00:43 2025 GMT
Subject: CN=eb148ba4870d9adf8d5099ba214e9a63b19d0264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:2a:e7:27:d3:06:69:0b:f1:f6:8c:34:96:
cb:b5:9b:92:99:23:f0:4d:30:7a:31:e2:28:ad:24:
a4:b4:fc:b0:a8:3f:c3:6b:c6:77:06:90:07:b6:d9:
f1:54:e2:78:5f:f7:d0:dd:a5:74:2f:b5:70:6e:04:
fc:5a:4a:23:6a:b7:9c:a4:3c:96:56:53:bd:1e:8a:
99:81:8e:d6:10:56:3a:5e:12:78:0c:d9:f4:2a:ff:
4a:3d:6c:28:4c:b3:6e:75:3d:01:1d:57:f4:49:66:
b5:fb:03:60:1f:ed:20:e5:39:97:bb:1e:d3:4a:8e:
bc:e4:25:c9:42:d8:fc:93:25:22:b9:38:1d:a6:7f:
11:8b:5e:49:0a:95:2f:f3:df:78:bf:a8:0c:11:7d:
10:ff:7b:27:ba:07:5e:9b:13:15:d0:b0:64:c6:e5:
41:02:7c:59:98:81:d8:c5:b4:e6:c9:98:7d:df:f3:
d6:2d:8f:5b:ad:56:72:e1:d7:3b:86:c5:a3:71:fa:
91:f2:ae:ca:ee:db:27:ae:72:de:00:e5:38:2b:19:
f6:5b:de:2a:4d:d2:c8:de:46:8d:81:7a:b4:d1:ef:
3b:67:e1:fe:d8:86:c3:11:7b:c6:84:f1:36:c1:69:
6b:c1:56:72:15:38:98:e3:ef:49:63:af:8e:8d:d1:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:8B:A4:87:0D:9A:DF:8D:50:99:BA:21:4E:9A:63:B1:9D:02:64
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9e:ef:7a:53:3b:32:31:00:04:e3:ef:e8:0d:0d:44:6b:32:
d4:38:50:bf:e5:2b:b9:18:df:37:18:57:d3:9f:f4:54:f3:aa:
9a:12:9d:89:e4:c3:38:34:f7:33:53:8f:78:12:72:81:4b:48:
9b:66:11:15:90:ea:d4:a2:2f:cd:a3:e3:bd:02:2b:01:79:72:
16:f4:33:29:9f:ba:bc:0f:6d:1c:33:b3:f0:d7:08:ea:58:78:
01:2b:b4:e3:0d:ce:9d:de:87:e8:51:4b:96:97:af:92:7c:e6:
31:6c:c5:75:34:30:8b:d6:77:f3:09:d5:2a:07:67:41:47:c3:
13:34:a0:83:bf:22:1e:42:a6:2c:2b:95:7c:d0:f3:9e:c7:1a:
e6:2a:53:c3:e5:9e:15:a0:2a:91:ee:53:e4:66:55:1d:ba:83:
ef:ba:d6:5d:cf:c0:d6:fa:f5:19:09:72:28:59:8c:fa:c8:e5:
88:b2:4e:13:13:e0:dc:ac:88:b5:79:ba:a0:1e:fd:23:61:cd:
b2:fa:fe:aa:92:89:7c:04:83:aa:e5:93:38:ba:f6:7d:92:30:
dd:df:13:9d:1d:c0:02:e1:2f:a5:e8:54:80:46:56:56:da:86:
bf:2d:7c:68:a9:8b:d9:c6:1d:ce:08:75:99:d6:de:c3:05:2b:
70:52:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:13:04 2025 by rpki-client