Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: PSciNDh+Rujb/vtTKVpslv0sKbO/YC+u0tT/xkXv9IY=
Subject key identifier: 0C:2F:77:E5:8A:1D:5F:D8:EA:83:13:3B:47:78:5B:62:6C:FB:EA:31
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 0196748BA14FAACBE3D74C7D614ED9A17EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 00:00:29 +0000
Manifest this update: Sun 27 Apr 2025 00:00:29 +0000
Manifest next update: Mon 28 Apr 2025 00:00:29 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: SLfZEfF64NyiUBTpGA3AA513bfYU5rbDZUwV+1NXXWI=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a1:4f:aa:cb:e3:d7:4c:7d:61:4e:d9:a1:7e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Apr 27 00:00:29 2025 GMT
Not After : Apr 28 00:00:29 2025 GMT
Subject: CN=0c2f77e58a1d5fd8ea83133b47785b626cfbea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:61:85:d5:f0:38:6e:c0:11:40:2c:2d:1a:
e3:59:bb:03:1e:f8:6b:f9:51:b3:d3:e4:77:e4:93:
3d:3f:7f:1c:b6:6c:b8:bc:ea:df:3c:e3:7f:5a:6e:
27:d2:9b:33:40:8d:17:da:8d:ad:a7:88:41:f4:54:
2e:5e:8c:d5:b0:f8:ca:8b:79:12:e2:7c:51:6b:3e:
b1:8a:27:a2:27:67:08:4b:63:05:45:a7:d8:55:63:
35:64:ae:37:44:58:54:70:e5:09:d6:af:f3:81:d8:
94:fd:8e:e3:ad:98:34:a1:6d:b5:eb:d8:38:3b:c2:
47:57:08:03:dc:1e:de:fa:fa:bb:e8:6a:78:56:fa:
0c:fe:f5:8c:0a:d1:81:ac:c0:b0:21:a9:31:94:22:
4b:f7:b9:34:08:d7:9b:be:b6:c0:3a:02:00:5f:19:
6c:62:47:a1:6e:b3:44:dc:f4:98:2f:fd:86:e9:02:
6a:f7:d4:8c:2f:af:95:d1:fc:b6:b9:d4:4b:3e:e4:
d8:4a:98:c5:0a:d1:52:a7:e9:7c:21:4d:99:ab:fa:
f5:87:fa:83:c8:ea:c6:e4:79:49:46:24:83:f2:ee:
b4:d3:12:51:0e:51:75:a6:a7:07:83:56:0d:90:f6:
1f:23:97:ce:56:0a:3b:24:85:4e:bc:ce:f2:ca:3a:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:77:E5:8A:1D:5F:D8:EA:83:13:3B:47:78:5B:62:6C:FB:EA:31
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:52:71:5c:4d:d4:b2:3b:b7:68:74:9f:f1:4e:98:f3:de:bc:
61:5a:fb:02:73:e5:98:47:68:6b:31:53:6a:fd:75:e1:84:cc:
7f:4a:b9:eb:fd:58:c6:b9:ec:c2:56:e4:6b:e1:82:2c:c9:33:
a6:da:11:1c:9a:ae:21:05:c9:02:a0:04:ab:70:14:18:5c:ca:
a5:7d:53:dc:54:0e:2f:45:71:1d:65:cb:1c:3c:2e:b8:06:ef:
17:66:14:5f:2e:24:17:00:f2:e9:09:eb:02:00:0d:48:81:67:
7b:37:03:c9:84:48:56:c0:0e:cb:5a:b0:b4:35:46:e5:81:d8:
00:7e:f1:55:e8:36:30:4d:42:7a:d1:87:2b:3e:c2:55:f6:44:
d0:f7:b6:8f:96:35:e9:ab:30:aa:1b:21:6a:0b:1b:8b:e0:68:
17:16:f7:1b:9d:13:4d:44:26:c0:d9:3e:b9:15:44:2f:c9:14:
9b:87:42:60:49:b3:ff:a5:05:c0:6c:34:ea:75:13:ad:3b:9c:
ba:43:47:64:64:f7:41:58:fc:bb:b4:1c:6f:da:5d:ab:33:42:
d7:a6:91:06:87:59:a6:6d:d6:d0:e9:6f:b1:c5:f6:95:8f:04:
2d:71:df:dd:bd:af:6e:a7:5b:1b:b5:5f:53:6e:62:15:36:1d:
e7:a1:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:37 2025 by rpki-client