Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: uAiZd/x1ZZbgenty719AsXr0qsbjG8J2rvRfiXqbLNM=
Subject key identifier: 16:27:6B:EF:46:38:1D:5E:D5:5A:D2:23:C6:0F:93:85:40:32:A1:96
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019675D5568E106D636FA71D30C7D5E258F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0A67
Signing time: Sun 27 Apr 2025 06:00:37 +0000
Manifest this update: Sun 27 Apr 2025 06:00:37 +0000
Manifest next update: Mon 28 Apr 2025 06:00:37 +0000
Files and hashes: 1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: SNvkMU1vWjrQARVm5wcUOrjyUQtN8EmzwZ3UKiQD4/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:56:8e:10:6d:63:6f:a7:1d:30:c7:d5:e2:58:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Apr 27 06:00:37 2025 GMT
Not After : Apr 28 06:00:37 2025 GMT
Subject: CN=16276bef46381d5ed55ad223c60f93854032a196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:21:f3:54:0b:15:93:45:cd:5a:a0:69:85:
a8:a6:8b:47:c8:43:b4:40:2d:e3:a0:36:5d:89:7a:
c3:30:7d:e4:37:ae:37:e2:33:d6:f6:d2:9c:e9:dc:
57:e9:ec:c5:f8:a2:bc:95:52:0e:d2:25:6b:84:24:
f5:bb:88:9b:f2:d3:a1:75:5b:d4:5c:c4:f9:80:db:
0c:46:e0:2f:ce:3d:57:11:91:b4:3f:2e:91:6c:f4:
a9:66:96:03:ef:c8:43:78:a3:96:49:a5:7e:79:84:
86:43:25:66:b8:18:9c:53:55:79:47:42:f9:3f:1e:
dd:60:05:ec:79:22:4c:b1:15:3c:c1:6f:6e:4a:7e:
d1:fb:51:18:8f:22:83:d3:8c:7f:34:6a:e0:f1:96:
75:db:fb:0b:af:6b:89:76:f2:ab:62:ff:03:6f:38:
66:f6:cf:e0:6c:d5:aa:a0:2b:94:db:66:db:c0:2c:
14:e5:e1:17:2c:d2:55:0d:e4:31:81:4d:c0:73:0e:
80:c5:f4:b5:f7:b0:05:2e:07:f8:53:42:6d:27:53:
92:2f:ae:75:6d:de:0e:9d:1d:21:1c:f3:c6:e3:4a:
b0:bd:41:c2:97:14:ea:4e:e5:c9:f7:20:06:cf:5e:
43:02:72:e3:89:9d:51:5d:4f:87:b2:95:eb:a5:e8:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:6B:EF:46:38:1D:5E:D5:5A:D2:23:C6:0F:93:85:40:32:A1:96
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:79:df:7c:83:a9:08:13:b5:b9:77:d7:c2:aa:1e:15:ec:
28:91:d9:5e:11:51:44:94:59:a0:ed:11:20:1d:fa:9c:85:9c:
46:77:b7:20:1a:2d:72:59:e9:e6:db:e6:21:69:42:d2:14:8c:
45:14:97:46:a0:0c:35:20:46:20:b3:07:ad:eb:0e:76:4e:3c:
b2:c0:2d:50:33:73:f5:98:c3:76:7e:64:8a:a0:d5:44:08:f3:
ff:67:85:33:e8:0d:27:0c:32:82:5c:73:0d:a6:6e:3b:7e:94:
48:5e:a8:71:c8:b2:a1:0b:12:9a:06:0e:4b:c1:a6:24:49:07:
6a:1c:43:a8:ff:5e:99:96:2b:3c:de:6a:ca:89:42:44:4d:ca:
3b:1c:05:f2:e3:44:0e:06:09:91:eb:8f:1c:08:0a:0f:f9:19:
eb:a7:36:6d:63:5f:97:e3:71:46:af:9f:db:71:23:67:34:f4:
41:f4:7b:6e:70:16:c6:c5:03:81:f2:c4:10:1c:7e:1a:e1:39:
19:86:02:a0:d7:26:24:7e:3a:25:29:90:f5:b8:80:01:42:46:
bb:b0:a1:31:b2:51:68:fa:62:13:83:e7:32:55:e5:67:ce:dd:
a4:dd:68:0f:8e:94:23:3f:62:4f:3b:f0:bf:b1:8b:5a:44:a4:
de:4a:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:34:20 2025 by rpki-client