Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: CAuI1QgJUXF6eM2EhS5GGwpYhs/8xFv4er7E5j6CIlI=
Subject key identifier: 34:6D:65:0E:E0:83:63:ED:3C:A4:75:6B:21:D7:84:3E:AB:D1:51:1C
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019677FAA1136709EB69532942D303309B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:00:35 +0000
Manifest this update: Sun 27 Apr 2025 16:00:35 +0000
Manifest next update: Mon 28 Apr 2025 16:00:35 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: 8Bxm8LvpSkdA5WtboVtHEBmhiobJot1LXxNYh9Pk0JQ=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:a1:13:67:09:eb:69:53:29:42:d3:03:30:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Apr 27 16:00:35 2025 GMT
Not After : Apr 28 16:00:35 2025 GMT
Subject: CN=346d650ee08363ed3ca4756b21d7843eabd1511c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:f0:47:43:be:77:25:3b:21:dc:ab:27:70:
ad:23:c0:8b:1c:74:7e:6a:83:1a:9d:75:ce:52:df:
e7:7e:ee:29:2f:6a:23:a7:09:c5:56:b0:6e:3f:09:
2d:af:14:2f:9b:f2:dc:f5:7c:df:2a:ae:64:ea:08:
10:64:f7:c1:15:3d:36:de:74:e2:8b:0a:9c:dc:9b:
30:b9:47:94:af:0d:90:de:66:b1:a3:c1:2f:49:ae:
a8:3d:14:6b:f9:0e:ff:06:a6:b1:f7:4a:eb:10:06:
94:9c:7e:4f:67:8f:57:50:dc:a2:48:e2:90:ba:4f:
22:15:af:4e:07:21:6e:37:69:7a:40:8b:df:f3:3f:
48:f5:81:74:36:e1:1e:0b:f4:7d:9e:18:47:98:c0:
cf:e0:49:50:d5:f1:84:8f:76:75:b4:d3:75:02:b6:
d9:72:35:98:a4:6f:e4:f9:a8:73:66:e2:1c:50:f7:
f8:a4:87:b7:c6:63:22:86:b6:ef:6d:da:0c:4d:2f:
e0:20:5b:bc:4b:a8:d5:c4:a6:fe:3b:55:8e:ee:2c:
1c:2c:d1:b0:eb:6d:aa:d1:7d:a2:dc:b5:5d:e5:ec:
06:30:99:91:ae:5a:c0:ba:11:65:11:88:8f:93:d6:
8e:63:17:fa:7b:3f:4f:67:15:1f:0d:29:c1:98:6b:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:65:0E:E0:83:63:ED:3C:A4:75:6B:21:D7:84:3E:AB:D1:51:1C
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a1:c2:d3:a5:1c:ce:43:08:a2:51:e8:04:b7:cd:47:cb:74:
f9:37:60:8f:5f:8b:90:cc:39:6a:f8:e6:59:3c:ba:0a:5f:90:
25:97:48:1e:1b:76:f5:28:25:13:4c:71:fe:19:9c:14:6a:bf:
51:81:c7:c6:09:7d:8d:2c:e2:70:8a:2e:c6:d6:99:b6:eb:1c:
57:e1:57:4f:9e:14:5a:91:63:dc:bc:eb:f5:7c:a2:8d:b0:5b:
10:e5:c1:7e:7d:f3:73:a4:83:e8:ca:6e:dd:a8:c3:62:5a:ae:
87:2e:44:2c:b5:a0:14:51:ba:d0:43:65:58:a3:7e:74:5e:1a:
ae:38:82:fd:61:93:a0:d5:e1:90:e0:24:9f:b0:b0:6f:2b:a2:
67:f2:21:7a:a9:5e:8b:26:d6:49:7b:bb:91:5e:63:53:2b:7e:
20:71:64:bf:4c:67:80:0d:d2:4e:b3:9b:34:d1:ec:71:ac:cd:
0d:9f:28:23:49:1a:58:a2:3d:9e:9b:5a:28:82:af:87:60:3b:
cb:31:92:61:c8:f4:7a:33:bf:c4:f9:a3:18:34:50:3e:ad:39:
56:8e:72:c5:c2:8f:78:4d:eb:15:dd:95:c2:d7:b8:2a:18:98:
e2:53:c8:4b:6c:52:ba:a9:d3:b8:60:20:19:60:fa:d1:05:59:
da:6e:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:28 2025 by rpki-client