Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: x57OMbypKWo+G7lp8nRfaerOlWaelqvU7DnOynMojpk=
Subject key identifier: D0:18:C6:F2:8E:35:C4:63:8D:35:D7:45:9A:34:CA:8F:D3:D5:DF:11
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 01967C7BD16839C950378A6FBBAD8A9473AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: B6
Signing time: Mon 28 Apr 2025 13:00:11 +0000
Manifest this update: Mon 28 Apr 2025 13:00:11 +0000
Manifest next update: Tue 29 Apr 2025 13:00:11 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: EAwz/vv8myPOvotgsi0fT8UyF0MNn0Y0tXXoitPADHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:d1:68:39:c9:50:37:8a:6f:bb:ad:8a:94:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Apr 28 13:00:11 2025 GMT
Not After : Apr 29 13:00:11 2025 GMT
Subject: CN=d018c6f28e35c4638d35d7459a34ca8fd3d5df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:10:b2:bc:aa:39:03:70:16:b9:f0:56:99:
85:e8:e1:5a:80:c5:80:ae:34:32:45:8e:46:da:50:
d8:54:8b:bb:29:57:be:c2:73:e4:d0:27:a9:32:c8:
9c:b1:e4:3c:99:6b:c6:fc:1d:46:d8:03:bf:36:53:
4a:78:b1:54:16:7f:28:b7:ba:b2:92:14:1d:84:a3:
d0:c4:ce:71:5b:e5:a9:d3:2c:34:4f:42:ea:c0:7b:
35:83:17:d3:98:99:c3:0c:1f:d3:f9:4d:fc:40:d9:
50:e7:53:31:3f:21:5a:d1:d1:b7:48:db:74:4b:c7:
9c:0b:c1:42:94:54:eb:f5:7d:43:b3:34:10:7f:64:
b2:1f:73:6d:0f:0d:3a:04:aa:6a:97:85:8c:4a:d6:
02:9c:62:39:ab:e7:30:f1:bc:70:67:6c:f0:2e:5e:
3e:fa:93:5c:3b:c3:88:4b:ce:76:c1:2e:0f:01:4f:
87:df:a3:48:7f:dc:48:2f:62:e0:2f:2e:4d:d1:6e:
d9:93:9a:31:36:37:ba:a4:a0:9f:14:f4:e9:9e:74:
2b:5f:f8:1a:34:4b:40:16:2c:88:07:9f:bb:e0:d9:
13:39:03:45:b3:79:58:f1:45:b5:38:64:c1:23:53:
31:ee:03:40:45:6a:0c:7b:0f:36:85:cf:7c:03:49:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:C6:F2:8E:35:C4:63:8D:35:D7:45:9A:34:CA:8F:D3:D5:DF:11
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:15:40:fa:ca:db:93:99:c0:16:30:17:35:a4:3d:cb:bd:
29:45:bd:a4:74:04:1c:8d:77:26:13:40:7e:56:0c:f6:15:db:
17:70:f2:8f:63:a5:93:62:bc:4d:b1:03:8f:4d:d0:24:ce:6b:
00:2b:b1:f8:2a:d9:3c:d1:92:fd:77:f5:cb:f1:66:fe:cf:8b:
29:54:62:d8:9e:17:de:71:ae:3a:74:94:4c:17:80:f3:cf:9d:
85:74:3a:6c:51:60:30:da:6d:bc:c0:5e:6e:5d:9d:40:6f:57:
00:d8:ba:28:4b:98:a4:bf:1c:47:c7:94:f6:a8:ba:72:82:94:
3e:1c:1e:6e:bb:a2:a0:88:06:f5:53:3d:73:f0:5d:6d:85:c7:
fb:1a:99:bd:e4:1f:dc:58:54:bc:e5:59:3a:b2:db:86:2b:38:
de:c1:26:79:9a:f7:27:d8:ae:ee:e5:d5:ea:94:5a:07:23:e6:
26:6f:80:e6:c8:ac:cd:fc:27:e8:87:ed:71:27:0c:c8:9c:8b:
d1:7a:66:e1:0c:bd:33:1f:58:19:4a:95:f2:f7:95:86:d0:98:
b7:49:b7:c2:09:c6:f1:57:a6:6e:a9:52:06:6c:48:ea:4c:66:
57:70:2d:a1:e1:1a:d2:a8:74:f4:0d:c8:83:af:b4:8b:62:d4:
f0:d7:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:50:51 2025 by rpki-client