Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: Yua3vHqzH8leScKzr1Tc+DkYoAe7L4NIj+rY9AkSfLk=
Subject key identifier: 10:D4:72:D3:FE:8C:EA:23:89:16:31:FD:18:95:53:1A:AE:76:0D:CB
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 01968992EBA4BF1E54C1DA74474509B587D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 11D9
Signing time: Thu 01 May 2025 02:00:29 +0000
Manifest this update: Thu 01 May 2025 02:00:29 +0000
Manifest next update: Fri 02 May 2025 02:00:29 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: twVQgvDVStZAnDDtdDbJw2JhTY4xD9XLM4YblQr134E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:92:eb:a4:bf:1e:54:c1:da:74:47:45:09:b5:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: May 1 02:00:29 2025 GMT
Not After : May 2 02:00:29 2025 GMT
Subject: CN=10d472d3fe8cea23891631fd1895531aae760dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:da:41:3b:63:4f:53:21:0a:49:b6:67:99:
27:79:5a:a8:82:e9:50:81:98:13:c3:5d:12:fd:76:
24:96:1e:11:69:c8:9c:41:87:89:db:80:71:0a:1f:
2c:a5:d9:42:05:da:d0:92:c9:3b:85:c9:94:37:76:
cb:55:4e:20:3e:8c:61:27:e1:02:a8:2a:0d:dc:f4:
63:8d:74:e0:ea:3e:7e:2b:a1:a4:f3:fa:e0:e7:f7:
d2:49:2c:c2:68:a6:18:9b:b7:8f:af:4a:75:65:0b:
93:12:f5:ae:d8:1a:fd:45:9f:ae:b3:16:bb:42:53:
91:61:48:57:b0:2b:18:81:4a:1d:2d:14:70:26:e5:
a6:ca:84:fe:5d:55:7c:96:2a:85:9c:60:07:7b:1c:
c3:bf:60:0e:dc:92:61:71:ce:b9:8e:a6:fc:1e:e7:
6f:e8:ee:6f:80:dc:68:54:70:8e:ff:9b:cd:87:f7:
92:67:20:64:83:0e:c9:c6:59:65:68:19:c3:5c:fe:
58:64:c0:21:25:01:9b:68:71:98:30:66:fe:b6:a8:
a9:3b:8d:41:b9:26:fb:b8:2f:1e:cc:8c:2c:f0:b3:
6f:60:7f:91:7a:ac:09:dd:56:c5:22:e2:d6:8d:58:
a8:75:bb:d4:e6:00:1c:28:c7:c3:38:b8:00:17:40:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:72:D3:FE:8C:EA:23:89:16:31:FD:18:95:53:1A:AE:76:0D:CB
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:2e:5e:6f:57:33:e4:a1:46:51:d3:1e:66:f1:8d:a5:19:
71:31:83:3c:73:de:53:3e:80:30:46:38:13:e1:52:3f:a5:55:
6e:e5:5e:43:96:32:1e:a5:74:8f:cc:44:f1:3a:9a:a3:6f:bf:
d8:ee:7f:dc:90:9d:a9:7a:8e:33:1c:6a:5f:8e:18:23:4f:0f:
b5:db:38:a4:90:3b:99:5a:53:86:1f:8d:69:ba:e9:80:aa:91:
c2:fb:7b:88:0b:40:ac:1a:4b:ce:86:00:f3:8f:25:76:6f:24:
6c:2b:53:87:53:d6:66:02:2c:2b:88:3c:1a:c6:82:8c:8e:17:
c8:09:56:32:65:55:80:8c:28:49:89:86:80:48:58:40:20:8e:
c3:30:f2:05:6b:c2:75:bb:d8:c7:59:7b:30:03:cc:83:7c:06:
6e:55:87:b6:f0:9d:61:b5:34:7e:9a:89:6c:e8:79:c3:3b:7c:
39:23:68:eb:8a:5e:11:e7:59:a7:62:cf:5c:8e:dd:95:68:2d:
af:ef:a3:51:1f:73:d1:91:4c:04:4e:b4:88:89:9a:6b:87:cf:
1c:59:7f:e4:8c:96:43:d1:c1:d8:12:17:19:81:68:98:60:41:
19:5d:f0:7d:05:c8:c6:94:2e:ca:49:d0:fd:ba:d7:61:50:0d:
81:bb:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:06:08 2025 by rpki-client