Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: ZnkyjuSiJ/NDCUduxSwLYJpCLl0NUVmm4JqZkiXz/rY=
Subject key identifier: 01:80:91:AC:BD:CB:05:2D:45:03:74:1A:8E:65:7C:06:06:AA:40:0B
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 01967F463FC005727064D3AD1EF989117AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 085A
Signing time: Tue 29 Apr 2025 02:00:32 +0000
Manifest this update: Tue 29 Apr 2025 02:00:32 +0000
Manifest next update: Wed 30 Apr 2025 02:00:32 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: Z6ndOANxzFWE1LZ7Dg1+tmjrJjOybKe3+qHCSVkIJuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:3f:c0:05:72:70:64:d3:ad:1e:f9:89:11:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 29 02:00:32 2025 GMT
Not After : Apr 30 02:00:32 2025 GMT
Subject: CN=018091acbdcb052d4503741a8e657c0606aa400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:6b:f3:6a:99:53:13:f9:b9:9b:53:38:70:
ad:64:be:59:b8:07:ff:61:fd:ff:ed:d8:3c:90:1c:
ad:42:e9:18:2b:d3:57:87:e9:1d:86:f1:8c:db:8c:
79:36:e2:6d:ba:4b:3f:b8:51:96:7e:3f:f8:be:34:
e8:ab:e8:ac:40:8b:35:55:54:c7:07:3a:3a:4b:75:
dc:8f:94:b6:ff:8e:5f:7b:98:37:f2:f8:2b:9b:61:
b6:03:91:49:fd:ee:3a:a5:95:85:22:7b:d0:89:db:
0d:15:f5:2f:46:b0:b2:b7:18:f3:96:12:b9:2d:7d:
50:7c:da:43:76:f1:57:55:55:93:80:1c:8a:6c:55:
df:f7:96:23:a2:37:4c:fd:14:ca:04:29:1b:1f:f9:
ee:9f:9b:53:b4:e0:a2:10:63:09:ca:da:d4:85:6c:
42:63:09:c0:b5:a6:dd:11:20:52:2d:59:17:14:6e:
21:fd:24:ec:81:03:ec:d2:68:d2:ed:bc:ee:91:c0:
3c:0a:e3:19:f3:a4:23:13:6d:29:83:78:62:bb:aa:
69:36:ea:69:91:20:75:50:2d:6d:96:b6:18:d3:0a:
81:8d:c5:a9:b0:eb:b5:9b:48:b2:7f:47:18:35:7b:
56:cf:f9:f2:90:99:3d:b1:c2:b7:43:35:cc:0b:68:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:91:AC:BD:CB:05:2D:45:03:74:1A:8E:65:7C:06:06:AA:40:0B
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2c:8d:90:dc:65:f6:b5:80:2d:5f:1f:3e:91:fc:95:f1:36:
f8:b9:87:d7:da:2d:4a:c4:7e:5f:a2:29:a5:1f:8d:cb:f4:df:
43:91:3a:4f:61:cb:eb:73:dc:94:a5:16:e5:b5:2f:2b:55:97:
ab:3e:cc:75:5c:c9:85:bc:e7:9d:5e:0f:d9:61:80:5b:38:6c:
f6:41:1f:da:4a:69:de:9d:cc:b9:15:e5:cb:9b:38:2d:70:a2:
08:4a:9d:75:37:81:14:0e:64:26:4c:54:eb:35:59:71:eb:76:
10:69:c9:55:7c:4a:8a:ce:78:1d:37:35:5e:5c:3e:90:86:de:
30:73:b1:5d:0c:36:55:e2:64:ba:06:c9:20:ed:90:17:18:af:
c6:11:d8:ee:fc:10:d8:a7:a9:b4:ee:5d:f3:55:87:a9:88:2b:
a9:01:13:8f:29:76:0a:2f:75:49:75:eb:98:80:e3:d0:eb:13:
86:55:d7:ce:2c:c1:1d:74:4e:00:25:32:03:f0:cf:62:5a:e4:
26:2b:aa:6f:54:e3:18:91:f8:6f:db:7e:59:2d:22:9f:4e:1b:
a1:67:40:7f:e4:d0:ce:5e:8f:47:6f:fe:07:6f:5a:a6:4d:c6:
9c:ae:08:02:48:4c:60:23:e9:48:fc:fc:1e:8e:62:16:2a:4d:
97:ad:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:33:39 2025 by rpki-client