Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: 6hBhk9u9P3O9ATe8WuEezGudPjBxYvJqaLljeqM1VQ8=
Subject key identifier: 5E:5C:2A:D8:08:EA:1C:FD:F7:F0:D7:29:B2:C8:C5:F0:38:27:C7:17
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 0196760CB34914D13902AB653E91418096B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 07:01:05 +0000
Manifest this update: Sun 27 Apr 2025 07:01:05 +0000
Manifest next update: Mon 28 Apr 2025 07:01:05 +0000
Files and hashes: 1: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: V4hzHxwH9l7Iv0hDXL8L7p4lZ1N4dRhPWLbKoUDYqyc=)
2: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
3: zYcJKaM6JzCKVxiyX4VCo_gC9ZM.roa (hash: mZBVVY1LVqtMV+cGPcfvfBAAoOoYhoi230NuYqjuA4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:b3:49:14:d1:39:02:ab:65:3e:91:41:80:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Apr 27 07:01:05 2025 GMT
Not After : Apr 28 07:01:05 2025 GMT
Subject: CN=5e5c2ad808ea1cfdf7f0d729b2c8c5f03827c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:87:1c:f2:2c:b8:2c:90:04:79:74:81:f8:
d6:3a:d0:90:2c:2a:dc:b5:c0:a0:86:5d:3d:49:bb:
85:6e:3c:c2:ff:47:09:8a:06:8e:1f:e5:83:8b:75:
df:e1:8f:b2:4b:84:f1:8c:de:e8:5a:12:23:d1:38:
bf:8a:21:25:8b:19:26:84:e0:44:ec:3c:d3:e7:5c:
58:55:0f:04:9d:a3:7a:84:4b:10:d8:21:e5:54:6c:
6f:5a:04:cc:af:65:a0:77:be:6c:d3:cb:a2:33:d3:
e2:de:f5:d3:f7:54:df:5a:70:88:9d:10:d7:dc:46:
43:3d:51:67:0f:e2:34:c9:fa:84:b5:2e:d9:42:5a:
33:4b:b9:97:83:1a:22:7b:4b:6c:49:a8:a2:43:d9:
05:08:25:20:2f:c1:e0:2a:4d:af:db:fa:f4:84:fa:
a1:b4:18:9f:39:67:0f:76:ae:91:0a:d9:38:aa:99:
af:1c:8c:a5:1c:00:aa:52:b1:8c:c5:33:a1:a2:24:
54:7f:6c:2b:28:d9:59:22:74:35:e8:f8:09:54:b9:
19:46:39:ba:0c:3b:0e:d2:74:49:4e:be:60:c7:ac:
7f:79:27:b2:e4:74:ee:96:36:c1:32:10:49:a3:d5:
9c:93:e5:bd:52:4e:85:0c:f0:5b:e8:7a:61:26:b1:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:2A:D8:08:EA:1C:FD:F7:F0:D7:29:B2:C8:C5:F0:38:27:C7:17
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e6:d4:73:6e:33:bc:b9:c3:c3:f6:83:a2:bc:ed:2e:53:60:
f1:cd:75:51:31:a0:b4:22:f8:d4:55:9d:39:ae:46:0c:fe:68:
cf:74:90:96:38:45:0f:fa:f7:a7:6b:09:cc:6c:fa:d3:d2:08:
0f:7d:7b:42:83:9e:9a:bf:6e:ca:1c:e4:6d:0d:93:d8:62:4c:
59:b9:f1:24:97:08:de:5f:cc:eb:f8:ca:01:d4:d7:88:49:90:
71:9c:cb:6d:ef:68:79:fb:de:30:4d:d2:f4:a2:f7:c3:d2:b9:
5e:9c:de:72:71:2c:e8:a6:5a:89:5a:db:cf:20:94:9f:0d:52:
e0:be:68:7f:ca:ed:53:42:94:d8:11:c1:fa:14:39:1f:ce:6e:
c5:35:a5:e8:fe:43:d0:1c:ae:22:16:a4:3a:6f:6f:7b:ed:57:
16:4a:eb:4c:63:ab:59:34:a0:47:39:71:53:49:52:64:cf:6b:
61:14:05:bf:52:49:e6:35:18:59:b1:6f:2f:c1:2d:d8:ee:19:
e5:16:6d:23:51:bf:91:d1:85:60:87:a8:49:32:ba:9a:c2:5a:
ae:ad:96:5c:b6:0c:a9:34:6f:2c:22:b0:61:53:27:c8:22:bf:
56:5a:e4:20:32:90:f1:cb:6f:e5:2d:da:b4:9c:f0:f7:ba:11:
ef:ce:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:08:00 2025 by rpki-client