Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier: d6SasZLN5DPos9OCJfUkhoBHOZjICkWWt/vF8CzgNjs=
Subject key identifier: A7:C1:AD:98:E3:13:E4:BC:EA:70:31:4A:7C:C0:19:D1:3A:14:45:8F
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial: 01968FCC2585F572CEA0EBF47624FF9F5C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number: 05AA
Signing time: Fri 02 May 2025 07:00:42 +0000
Manifest this update: Fri 02 May 2025 07:00:42 +0000
Manifest next update: Sat 03 May 2025 07:00:42 +0000
Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: 7jq6lnXKSSF8jcOqBFONxfsVG9oTAz/xBs77bOgdUzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:25:85:f5:72:ce:a0:eb:f4:76:24:ff:9f:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Validity
Not Before: May 2 07:00:42 2025 GMT
Not After : May 3 07:00:42 2025 GMT
Subject: CN=a7c1ad98e313e4bcea70314a7cc019d13a14458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:2a:bb:6f:54:cd:5d:95:99:54:94:6a:14:
c3:f9:04:40:03:9e:03:a3:27:e8:ec:f1:d9:fc:c2:
00:20:f8:5b:0d:61:67:1f:0f:b6:ec:58:29:c7:87:
a3:e6:db:ed:b6:0c:8d:33:d6:ab:bf:2d:c2:f8:f8:
e6:a1:c4:00:c3:bb:4e:e4:b4:16:e9:d5:ff:b5:da:
17:6b:f4:ab:77:3f:9c:ac:6b:30:77:c7:e4:a8:2f:
60:be:b5:49:3f:5b:46:10:64:02:fe:ae:5a:0f:f2:
52:33:7a:a4:76:78:6e:f8:0f:0c:73:64:bd:0a:d7:
c1:17:0f:7c:fe:21:9f:f0:90:7a:58:a5:b7:c0:ba:
61:5a:a6:f0:3f:ab:88:5c:96:34:53:de:71:b2:16:
15:70:f6:8c:20:2f:8e:bb:35:2f:26:10:a3:df:ae:
b5:e3:31:39:de:a7:64:d7:d1:5e:7b:27:0c:33:4f:
d0:6d:7c:4e:41:39:94:fa:37:1f:25:7f:3d:1c:cb:
0f:d6:70:b7:19:5d:ca:5b:e1:1d:ed:c8:34:09:34:
19:b3:d5:aa:e2:2d:c9:75:e2:26:db:ea:41:72:8b:
9b:3c:c3:24:16:c9:9f:69:f0:d0:36:b5:cc:ca:b5:
1e:18:41:f2:9c:53:35:30:ca:88:55:ce:cd:81:e4:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:AD:98:E3:13:E4:BC:EA:70:31:4A:7C:C0:19:D1:3A:14:45:8F
X509v3 Authority Key Identifier:
keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3b:cb:10:be:3a:f4:d1:83:87:5e:19:81:7e:47:d3:e5:34:
04:37:3f:4d:6d:d8:ca:cc:6d:36:fe:3e:0e:12:d8:00:c1:b1:
bf:b2:58:ed:ed:3e:e4:45:e2:b0:ec:54:56:26:eb:7f:5e:ef:
20:18:af:33:68:f6:c2:54:b8:29:59:7a:d5:45:3a:fb:20:62:
73:86:0e:ea:aa:81:b7:fa:45:82:1c:5e:3b:33:60:70:91:d0:
45:b0:11:5c:e9:4d:35:3e:93:1c:86:c0:f2:c7:46:b8:54:2f:
a3:86:bb:e4:0c:a8:70:5a:24:a9:18:6d:57:e8:94:0c:ec:62:
86:1b:7c:b2:f2:04:74:f4:dc:b9:b1:68:b7:2a:01:05:63:60:
73:2c:9b:9b:90:c2:7b:3f:3d:6f:9b:da:5c:f0:5c:2a:53:18:
38:e0:ff:73:e6:8b:2f:8e:23:5f:a9:69:37:d8:a8:41:15:55:
1a:be:88:8a:51:d9:94:93:b0:ee:7a:41:f9:67:81:de:72:9e:
dd:1a:8d:75:b2:a2:32:40:63:8f:29:71:62:ee:ca:c6:af:6d:
1d:8c:d5:de:ab:e5:a0:74:b2:7a:2b:76:28:13:22:03:8f:e2:
54:68:a5:f2:1d:ee:3b:a1:81:42:60:fb:19:aa:4f:ec:6f:85:
c0:9d:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:04:57 2025 by rpki-client