Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: ZjiMk/yFgbLbv9c4mUI9gdHYmtrurPwakp+MrAN+xQI=
Subject key identifier: E2:61:53:39:5B:F0:0E:F8:BA:60:45:37:37:B2:DF:AC:A2:77:A7:5B
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01967FB49F7414517C20B56B8D7E4650F4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 04:01:05 +0000
Manifest this update: Tue 29 Apr 2025 04:01:05 +0000
Manifest next update: Wed 30 Apr 2025 04:01:05 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: u+sl0yuXZG+AbAiEy393uF3iQJvR/vhRr//8QPeI/cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:9f:74:14:51:7c:20:b5:6b:8d:7e:46:50:f4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Apr 29 04:01:05 2025 GMT
Not After : Apr 30 04:01:05 2025 GMT
Subject: CN=e26153395bf00ef8ba60453737b2dfaca277a75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:70:fe:18:3e:75:c6:ce:fc:23:26:51:21:
a3:6c:93:45:09:bc:ca:b6:a7:cf:2e:75:df:53:fa:
f4:ec:c6:82:90:c7:97:11:ba:ee:2e:28:94:f6:22:
01:67:69:bf:05:5b:ab:81:19:57:f1:83:05:08:68:
44:d1:53:0d:2c:4e:d4:cb:5e:03:49:06:c8:b1:03:
85:4c:b8:fd:0b:18:cc:3b:70:64:24:7f:f2:30:44:
f9:42:1d:66:39:e0:c1:d0:f6:b3:25:ed:59:df:21:
97:04:2b:f8:9c:52:1e:30:d6:99:0e:f3:ed:5b:32:
be:f4:f3:16:ab:dc:6f:9e:e1:44:b2:bb:e7:34:c7:
b2:6a:fe:18:29:13:89:37:f5:97:29:86:c8:f7:07:
79:66:e8:45:f9:ba:6e:74:6a:99:44:93:c3:bc:c3:
f2:9f:09:03:8c:82:73:cd:c4:ae:b3:40:09:19:69:
10:3a:a8:cc:00:16:1b:50:f0:33:82:ae:34:74:3d:
7f:48:3e:0b:b0:a7:31:73:e3:4b:34:a3:cb:3d:27:
d4:6f:f0:0e:ba:be:49:22:23:57:e3:57:aa:bb:9e:
5c:d9:23:2e:9a:5c:a2:27:03:ec:8c:67:d0:bc:d2:
1d:cc:0c:a9:98:46:d9:9b:c1:68:61:34:a3:6d:ce:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:53:39:5B:F0:0E:F8:BA:60:45:37:37:B2:DF:AC:A2:77:A7:5B
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:08:0c:05:4a:7e:c8:44:25:58:2d:36:07:e8:5b:d0:91:
14:6a:fa:c3:4e:10:6d:c1:5a:e8:4c:7e:0c:c8:f7:bb:a2:d4:
69:15:14:ef:14:36:73:70:4e:06:1b:8b:8e:fa:a2:59:1a:3e:
75:f5:53:d0:bc:31:00:8b:0e:43:03:86:0b:93:68:c5:b0:f8:
76:ec:62:ea:71:36:e8:a7:95:2c:5b:c2:59:30:93:6b:50:38:
d6:17:c2:a2:be:7f:81:8e:91:d8:8a:c9:a2:9a:fd:94:18:47:
53:dc:d9:e2:75:a0:63:26:6e:75:bb:cf:26:42:00:4a:a4:c7:
63:a9:2e:69:fc:3c:04:b3:82:4f:fe:66:61:63:db:09:43:9d:
44:98:ff:77:17:75:23:25:ed:b5:07:41:47:31:33:b7:4c:13:
ec:ec:49:99:fa:31:2e:d4:33:12:e3:82:be:05:7a:d1:84:12:
82:68:19:3e:04:bb:5d:53:87:a7:fa:b1:61:95:77:a8:50:c8:
40:ff:a7:ce:36:10:fd:49:98:90:da:47:1b:ac:d9:ea:11:51:
c8:ce:c4:48:77:ce:88:67:fc:6a:8b:a0:0c:79:88:af:dc:5c:
3f:80:1d:b2:95:39:a6:7f:c1:5f:61:a9:e1:41:d3:aa:10:0a:
d1:1b:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:54 2025 by rpki-client