Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: 6KIKyyo7gTjoLSIPFjeLdvZT5UvpaCT2EAXEtBdFlnA=
Subject key identifier: 33:68:BC:A0:D5:EB:E0:75:97:FC:26:05:A3:DD:01:5E:D6:F2:47:51
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 0196745492420E1E2EDE08D51BB7A7EFEF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 03D6
Signing time: Sat 26 Apr 2025 23:00:21 +0000
Manifest this update: Sat 26 Apr 2025 23:00:21 +0000
Manifest next update: Sun 27 Apr 2025 23:00:21 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: 6kukE/ZihAkx8+Q5RLurGPkQZNMQ4Ay2tgaI+p2Lksc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:92:42:0e:1e:2e:de:08:d5:1b:b7:a7:ef:ef:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Apr 26 23:00:21 2025 GMT
Not After : Apr 27 23:00:21 2025 GMT
Subject: CN=3368bca0d5ebe07597fc2605a3dd015ed6f24751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:ff:2c:01:49:50:d8:02:27:39:b4:a6:ff:
63:bb:cb:46:9e:94:53:9a:c0:9d:c2:ef:a3:b7:47:
0b:09:8c:e9:cf:22:61:8a:f1:89:67:4c:65:a7:7b:
a3:b1:e1:2b:31:4d:37:cb:86:32:ac:12:f1:a3:bf:
2e:d8:8e:cf:6a:d7:93:b8:ce:8a:cb:b6:c6:50:e2:
8e:1f:80:bd:91:3b:35:3e:53:e7:d7:a2:e7:87:69:
a3:8d:23:f1:e0:18:b1:a3:9f:30:d9:cc:a0:c2:e3:
5f:87:a3:1a:f3:97:09:e1:21:48:64:52:5d:c1:55:
01:cd:77:1a:65:36:2f:b9:d5:db:9f:81:24:f4:7a:
57:0c:be:cf:b4:55:3a:52:ee:a2:6e:4e:93:bb:c5:
35:cf:60:b2:e6:c0:32:62:0d:5e:6c:c3:f3:be:99:
22:99:d0:bd:e2:8d:99:2a:2c:9c:cb:fe:d2:cc:60:
70:2c:17:ad:ec:f8:8a:3d:60:c9:a3:8e:4d:62:36:
cb:b2:9b:d5:e8:ed:24:9d:bb:c4:fe:9d:80:c9:ae:
d2:b0:8f:7b:80:90:2c:9f:cf:74:60:01:a4:4d:d3:
61:5e:7b:c2:83:90:a3:30:66:05:f1:a9:f1:b3:34:
4e:3d:2b:13:c0:e5:3d:f6:43:ca:f5:df:54:9c:c5:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:BC:A0:D5:EB:E0:75:97:FC:26:05:A3:DD:01:5E:D6:F2:47:51
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:10:7e:15:37:b7:0b:d3:71:aa:e1:77:1e:00:d8:9a:9a:97:
25:b3:e6:d4:dd:0a:42:32:d9:13:ec:a5:4e:11:e5:66:a5:fe:
61:f1:8e:9e:fc:6b:62:b2:d6:b5:d1:d3:7c:9a:38:84:6e:04:
56:33:08:91:1e:b5:6c:87:41:9c:1a:a9:86:d0:74:a7:be:11:
bb:0b:eb:b0:6f:1e:52:50:a2:a5:b7:0f:52:be:7b:d3:a4:c2:
c6:a5:c0:bb:17:ea:a6:ba:4e:5e:6b:dd:fa:88:f2:82:a4:22:
fc:d9:f0:36:2d:cf:dd:3a:05:20:80:d3:0c:b9:3f:51:d4:35:
c7:ae:f3:e0:a4:48:87:c4:8a:b3:45:3d:f5:72:ca:78:dc:79:
60:91:bb:d1:54:b9:4f:bf:3e:80:10:34:8f:9a:6c:9c:c2:78:
b1:26:d3:4e:96:74:14:fc:a1:79:ce:ea:82:7b:a1:0f:ca:89:
60:6a:c9:9d:6f:b0:1f:90:74:2e:08:59:6e:9f:00:be:92:ad:
be:f1:e5:89:3e:eb:b6:8f:99:3b:4f:bb:25:fa:7c:bf:95:af:
dc:cd:58:31:c8:e1:d8:c5:d8:54:e5:2a:de:2c:2d:d1:93:90:
f2:7d:b5:2c:f6:d2:c7:68:b0:92:42:ad:49:c4:4b:c2:52:b5:
7c:21:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:36:21 2025 by rpki-client