Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: K47vM/qjq4usAUcy/LaCMhrrVAtsXNZWXoa3J5gwOt8=
Subject key identifier: 93:10:27:2E:1B:CD:CD:93:FA:DA:19:8D:51:AE:93:1C:BC:A9:70:B9
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019674C2A8CB580A17D17BC92E1931075810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0851
Signing time: Sun 27 Apr 2025 01:00:36 +0000
Manifest this update: Sun 27 Apr 2025 01:00:36 +0000
Manifest next update: Mon 28 Apr 2025 01:00:36 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: UmwebpQRXkvW1isow2gmPsZ3F3t0NbzEzOkISloK82Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:a8:cb:58:0a:17:d1:7b:c9:2e:19:31:07:58:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Apr 27 01:00:36 2025 GMT
Not After : Apr 28 01:00:36 2025 GMT
Subject: CN=9310272e1bcdcd93fada198d51ae931cbca970b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:7e:fc:1e:b2:69:43:cb:e5:bb:b2:29:8b:
cb:bd:ab:83:ea:10:a0:da:45:38:f9:a0:49:63:24:
cd:a5:36:a9:8b:a9:45:d0:d3:92:7e:30:2d:4c:ae:
08:f6:f4:92:fe:6d:4d:c3:94:58:a5:39:b9:00:c1:
b9:2a:d1:57:89:82:55:2a:ed:7b:48:7e:d3:d1:be:
11:d0:fc:b9:03:94:6c:08:37:71:bc:f7:d6:24:be:
5e:7d:04:51:9b:09:25:96:6b:90:fb:fa:a7:98:53:
f1:3a:57:9d:92:52:8e:11:41:13:bf:6a:ef:64:2c:
f7:6c:02:df:5b:11:f4:8d:d7:3c:d9:9a:a6:b2:1d:
c5:e0:5a:d1:a4:85:b8:a9:b5:6e:22:33:55:47:fe:
0f:34:77:11:8d:04:6b:2c:98:49:57:64:b6:62:c8:
cb:16:e3:3e:05:b2:8f:47:a7:79:81:5e:a0:ad:00:
4e:26:85:17:d1:5f:43:32:2c:70:d3:8d:e0:1c:c5:
d1:11:c3:7b:f2:cd:9b:89:0d:37:ee:dc:44:a1:78:
65:ce:ea:d1:7f:51:48:bd:f6:36:2c:4e:2a:35:f2:
99:2b:ad:df:f4:1b:ff:4b:f9:6b:52:e9:8d:df:b1:
fa:32:b3:79:5e:a8:8e:44:ae:b8:1d:d0:73:29:4f:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:27:2E:1B:CD:CD:93:FA:DA:19:8D:51:AE:93:1C:BC:A9:70:B9
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f7:05:db:46:54:07:bb:f5:66:ab:e2:db:43:ff:29:ae:2c:
c8:b6:99:b4:f5:f1:55:76:84:07:2b:f0:ee:a4:ad:10:9e:b7:
b4:b1:5c:d1:63:aa:f2:4d:57:67:ef:6e:15:d3:43:ee:76:26:
09:2b:1e:bb:05:d9:b8:e8:50:3a:b5:e1:ca:1c:36:57:f7:01:
a5:45:df:70:9d:cc:05:7c:dd:c2:3e:be:8d:bf:2d:10:67:a1:
b7:15:ba:19:ee:b4:b8:51:1b:be:a6:9f:b5:ad:76:f1:aa:8e:
08:23:78:b5:b2:2b:7b:29:5a:cd:60:a6:de:b9:b7:e0:75:49:
8d:ab:58:53:7c:f5:b8:58:84:53:5e:dc:54:f7:e5:3d:dd:8d:
75:04:44:b2:23:48:b7:29:31:54:69:37:ff:be:bc:93:23:74:
dd:ef:ee:fe:65:09:a5:6b:11:df:a8:bc:2c:a5:7a:aa:4e:7b:
0c:32:c1:78:37:e0:1a:38:48:9c:70:3f:a2:9d:d9:70:56:8d:
1f:0f:db:33:69:f4:04:dd:8e:e9:4f:54:8c:f6:36:d5:78:cb:
0f:3d:b4:37:f7:28:e0:7a:62:07:47:34:00:c2:62:64:a9:65:
57:da:0a:2c:bb:c0:e9:da:cd:af:d3:f1:b2:6b:d9:c5:f4:b5:
bd:e5:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:34 2025 by rpki-client