Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: bOTDlQ8iRz+j5G+KJR9KBGh1x5z5yNdaopwZFWPVZhk=
Subject key identifier: 4C:B5:FC:09:4A:D7:10:E2:A4:5C:C3:00:CF:E0:F8:48:61:BB:E7:72
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 0196760C2873E1C9E6289D41FC2CAB3BDCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0BF0
Signing time: Sun 27 Apr 2025 07:00:30 +0000
Manifest this update: Sun 27 Apr 2025 07:00:30 +0000
Manifest next update: Mon 28 Apr 2025 07:00:30 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: 1HaE49ATrzkFp7o7CdCtgdPeRW2x/iVXWi0cO/OLhcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:28:73:e1:c9:e6:28:9d:41:fc:2c:ab:3b:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Apr 27 07:00:30 2025 GMT
Not After : Apr 28 07:00:30 2025 GMT
Subject: CN=4cb5fc094ad710e2a45cc300cfe0f84861bbe772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b1:53:17:9f:07:d0:1d:9c:62:f9:de:4d:f0:
30:bd:01:78:ff:bb:0c:77:b7:63:72:08:7d:e6:5a:
1f:4c:bd:2a:3e:8c:c6:6d:da:a5:21:5f:e5:46:a1:
e4:fa:d4:ea:83:72:82:5a:68:7b:2a:6d:20:47:14:
3c:b0:78:fc:82:06:fe:b8:77:0b:e6:5a:9f:6d:ed:
40:7f:ff:1d:b7:9e:e7:b4:83:63:13:eb:af:fb:64:
0e:eb:99:c4:11:44:67:89:0c:0d:8e:19:4f:82:5a:
c8:e8:02:9e:86:1d:0d:34:ec:ba:d7:44:d6:02:ad:
68:e9:6f:12:c6:7f:a1:d7:ab:fa:af:5e:56:6f:ab:
8c:18:3b:07:a2:85:eb:13:e6:3c:56:06:7c:af:fb:
2d:fe:2f:b4:a8:b3:25:4c:fb:d2:2e:21:59:bd:11:
c2:9a:6e:16:e3:b5:81:03:70:0f:ee:a8:46:ec:0e:
ac:dc:57:f2:c5:d8:01:8f:0a:7a:50:77:e5:45:c9:
c1:84:98:97:58:a0:50:47:a9:88:33:7b:5e:6d:27:
e9:32:dd:8b:f3:6c:c9:af:c2:de:8f:ae:c7:c2:48:
88:08:6e:a5:a0:97:d7:5e:91:89:8a:09:93:b2:7c:
79:1c:50:b3:40:f2:6b:96:b0:59:1c:74:b1:d0:85:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:FC:09:4A:D7:10:E2:A4:5C:C3:00:CF:E0:F8:48:61:BB:E7:72
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5f:ff:00:10:91:70:33:47:df:1c:08:46:8c:75:ce:99:3e:
3f:65:71:c4:da:54:70:db:96:ff:ac:40:e3:83:37:a9:e3:b0:
e8:5f:17:6b:0d:52:3c:21:ed:ec:a2:cf:c1:86:d8:b9:cb:03:
84:94:c1:87:e7:ea:6d:7e:ba:da:ef:8f:bb:3e:b1:bf:77:9a:
71:f4:d7:56:be:00:ff:3e:82:1e:57:a0:b7:a5:a2:9f:4c:0f:
02:25:b7:aa:59:2a:06:68:7a:2b:80:e6:aa:41:03:c6:84:e3:
38:10:be:ba:8e:25:fe:89:e8:02:96:c4:3a:f6:5e:fc:ce:f9:
6c:ee:40:31:ec:8e:83:bd:85:f9:ab:8e:e3:1c:f3:39:55:f2:
c5:f3:66:c6:bc:22:29:7f:40:c1:6e:b6:5d:1d:ab:24:5e:43:
07:1a:48:21:2f:76:94:1b:a0:3b:cf:ce:a0:5d:d1:1c:6c:8e:
42:5e:30:ed:6f:4b:33:0e:e1:b6:a2:56:0d:4f:2d:48:d2:62:
64:bf:5a:d8:69:b7:73:db:8c:a0:95:2f:5c:8c:c3:7f:92:38:
48:5d:81:ed:a1:c2:3a:9a:6e:4d:2a:fb:cd:0e:4b:77:9b:fc:
c1:15:c1:da:fd:00:b4:68:de:7d:33:5e:8c:2b:e5:36:cf:d2:
24:85:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:13 2025 by rpki-client