Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: wjIotuBu4WEMfit8uMshN+MAna2PwZ+QglyK/bgVdJw=
Subject key identifier: 51:2F:7D:C9:99:87:E5:EC:21:27:BE:83:51:8F:74:7B:1E:60:A0:C0
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019686C8C1687F51B67F6F75EBE5A2BFA915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 11F9
Signing time: Wed 30 Apr 2025 13:00:25 +0000
Manifest this update: Wed 30 Apr 2025 13:00:25 +0000
Manifest next update: Thu 01 May 2025 13:00:25 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: 7hD9RtqfLoXZ0FakLqDox8MHYftW7bUcYeKQ6A7/KCk=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:c1:68:7f:51:b6:7f:6f:75:eb:e5:a2:bf:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Apr 30 13:00:25 2025 GMT
Not After : May 1 13:00:25 2025 GMT
Subject: CN=512f7dc99987e5ec2127be83518f747b1e60a0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:1f:59:6a:ad:67:2d:31:bf:61:dd:3f:c3:
66:79:66:0f:2f:52:09:ec:62:5f:7c:b4:f9:eb:85:
79:39:e2:ad:3d:d7:5a:55:59:68:d0:d7:54:39:68:
87:f1:8b:20:59:91:5a:a8:ef:f3:ba:50:a7:5b:21:
74:23:03:f6:b0:43:ec:83:47:9b:71:98:19:53:5a:
bc:25:40:7a:67:2d:da:8e:7f:77:87:02:65:fb:f8:
fa:b4:08:f7:02:cf:fb:92:3f:c4:56:d0:8c:0e:af:
c3:7f:72:b0:e7:2f:f4:f3:9d:2b:41:6b:cd:a9:a5:
d9:94:5d:20:36:ce:73:69:92:4d:29:9f:25:66:4c:
d8:5d:30:3e:2b:96:16:7c:11:ec:ee:2b:6f:eb:19:
83:9d:b4:1f:b3:fc:60:be:52:c0:c2:eb:c2:fd:40:
12:d1:e3:bc:f6:b2:38:19:a4:fc:37:c0:89:f6:40:
bc:60:31:30:8c:6d:d1:b0:dc:c5:f6:85:aa:bf:ce:
5f:8e:bd:97:83:f5:76:8d:d8:fa:46:fd:17:55:e0:
cb:5b:ce:6a:0d:3b:66:e1:c5:30:1f:56:9a:d7:4c:
5e:24:db:21:ea:8f:7d:e3:33:70:94:dd:a1:8c:29:
d1:33:50:c4:66:ad:76:bf:64:d6:b8:a0:91:70:3d:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:7D:C9:99:87:E5:EC:21:27:BE:83:51:8F:74:7B:1E:60:A0:C0
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:66:cf:e2:cb:16:8e:a6:0c:61:a8:c3:6c:12:4d:03:e7:
85:56:04:87:1d:fd:ab:6c:8a:c7:d6:f6:04:c9:be:56:63:ca:
b1:f4:bc:1b:3e:94:44:9e:01:e2:e6:f2:d1:67:c8:47:8f:31:
0f:f4:c7:18:b4:7e:c6:9b:af:64:35:71:68:78:b0:21:3a:3e:
fe:f5:ab:7f:e9:17:29:5f:85:86:65:61:6d:b9:b0:90:23:ff:
1f:12:dd:e2:fa:5c:de:b9:17:f8:ec:1b:f3:e8:33:a3:92:e1:
da:5e:ed:bd:40:c2:63:96:4e:f6:93:21:e7:a6:91:9b:1a:ad:
91:23:12:19:5e:6c:a5:57:e8:50:2e:80:1e:a7:df:a2:23:ce:
db:f1:10:06:6a:35:73:f8:a8:90:d1:b8:26:ca:68:e4:fd:0f:
87:c9:d2:8c:66:c5:a2:e7:5d:00:3c:32:2c:c9:18:35:bc:b2:
22:99:d3:57:cc:a9:60:23:fa:e7:63:e2:8f:fc:dc:c2:9b:fa:
8d:3a:9d:b7:68:2b:32:8c:20:0a:0f:d3:76:5e:48:54:e3:b4:
78:5d:f9:99:7e:fa:70:2b:1c:be:09:2f:80:5e:7e:4f:a2:4a:
6d:51:f9:99:f4:ab:d6:35:e2:7f:6b:55:4f:49:92:55:44:81:
6e:75:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:41 2025 by rpki-client