Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: 2lgunZWK8S8qJuY2zTyK0vXMyoTAJPycYuaWMFYln2Q=
Subject key identifier: FF:B1:67:12:06:55:63:48:16:55:FC:56:C8:2D:2F:A9:C0:5E:83:DF
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 0196797B49572AD7FE734E8CB2367B91BBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0857
Signing time: Sun 27 Apr 2025 23:00:44 +0000
Manifest this update: Sun 27 Apr 2025 23:00:44 +0000
Manifest next update: Mon 28 Apr 2025 23:00:44 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: 86w38InR4NWINOZyfH23NLuKdlnrbAy5DDUELXmKtjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:49:57:2a:d7:fe:73:4e:8c:b2:36:7b:91:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 27 23:00:44 2025 GMT
Not After : Apr 28 23:00:44 2025 GMT
Subject: CN=ffb16712065563481655fc56c82d2fa9c05e83df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:01:cf:8e:03:d2:06:77:0c:b0:34:f5:9a:30:
75:27:10:e8:09:da:68:32:78:98:d7:98:36:2a:df:
d5:9e:65:8e:27:05:40:0e:36:dc:a3:0f:7f:dd:49:
dd:8f:38:20:17:da:c2:d1:7f:25:2d:1b:76:4a:0a:
f4:dd:17:c3:d9:5d:2e:90:28:1b:85:71:1a:e7:5c:
fc:bf:24:a2:13:41:f7:e6:57:72:ee:98:fa:5f:c8:
eb:a0:59:fc:3f:f6:07:ba:7e:b7:44:2a:eb:26:cf:
07:32:6b:74:fe:0b:15:1a:ee:91:a2:73:7d:bc:2c:
85:2c:81:8f:a7:dc:f7:5b:19:47:a5:f1:b1:d8:7a:
6f:95:f6:33:7e:2a:22:6b:34:32:98:15:fe:14:50:
86:40:ec:ea:6c:f6:d4:f1:e1:95:73:e1:b5:e4:56:
bf:e1:cd:ba:12:cd:62:cf:1c:4e:37:a0:62:28:56:
1d:0d:3f:73:fe:69:1a:05:70:5c:4a:86:c7:7a:6e:
c9:6d:d0:c4:41:27:af:94:8c:95:04:26:bf:46:4d:
58:ae:ea:8b:3e:48:63:b0:00:56:36:8f:7f:16:ca:
e6:af:3f:7b:a5:2c:12:35:dc:82:e6:64:28:a5:03:
a1:51:b5:90:8d:83:1e:4c:8d:1e:ac:59:78:57:26:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B1:67:12:06:55:63:48:16:55:FC:56:C8:2D:2F:A9:C0:5E:83:DF
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:36:7b:45:54:d8:24:09:88:b9:23:4f:11:eb:93:94:e8:
7e:a9:a1:11:bf:7e:d4:42:51:51:80:a6:c9:89:02:93:26:38:
5e:da:07:cc:93:f4:0e:26:3b:a0:c9:27:dd:77:97:78:a4:cf:
f8:75:b5:a5:3d:9d:a4:0b:a3:f8:36:dc:c6:06:47:5f:76:a6:
01:6b:b3:f0:f9:d0:69:b5:52:cc:0b:d8:14:aa:c6:2f:2a:4e:
3d:02:cb:03:8c:fb:1c:85:0d:be:d1:5a:96:93:92:0b:4f:54:
b3:7f:5f:f8:0b:75:eb:30:ba:e8:5a:7c:a5:8e:71:1b:b9:6c:
9b:24:65:b6:21:5e:b0:7a:1e:17:d0:ac:ad:ad:ad:bd:a5:36:
ca:b3:0b:b0:b5:af:14:67:51:80:f4:3f:26:7a:4f:65:e8:35:
a1:bd:ea:a7:ed:d6:82:19:65:06:be:9a:4c:0d:54:1e:6c:04:
9e:3b:e8:e8:80:8e:ff:f9:e3:3d:0d:5a:5b:60:cb:dd:91:53:
37:c7:f9:e6:57:a4:84:0f:af:3f:b8:c4:22:e6:16:18:63:cd:
6f:2a:ef:b5:89:4f:32:0b:6a:40:49:0d:16:23:69:8c:2c:6d:
74:e3:16:54:42:bb:45:c7:5f:7c:e3:41:f5:56:6c:9a:2b:8f:
b3:bd:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:49:46 2025 by rpki-client