
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: A3nV7z/w79AwSSVKBU/Bt693CP6yrlC+/LSwqPC2X6w=
Subject key identifier: 1F:22:15:88:52:1F:BB:47:9B:1C:F7:65:49:AD:D4:36:34:8C:1D:6C
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 019674F9C27EAF4797E05ED3264BF991A82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 02:00:47 +0000
Manifest this update: Sun 27 Apr 2025 02:00:47 +0000
Manifest next update: Mon 28 Apr 2025 02:00:47 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: qwT9qsj7vFMILUqH3uEmQJP47BkYMEl9kXYBMOsj5ug=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:c2:7e:af:47:97:e0:5e:d3:26:4b:f9:91:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Apr 27 02:00:47 2025 GMT
Not After : Apr 28 02:00:47 2025 GMT
Subject: CN=1f221588521fbb479b1cf76549add436348c1d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:57:75:a1:b6:ee:50:f1:72:63:eb:36:08:
a3:15:bc:63:33:8b:af:76:a8:bc:68:4c:0c:3e:95:
3d:bb:7c:49:32:69:54:03:39:b6:e0:1a:26:d0:68:
ad:72:67:ae:b5:4d:86:4b:37:08:b3:5b:fa:61:c2:
6e:26:a8:de:4f:7d:62:92:e4:0f:9b:ba:96:62:bd:
6c:21:58:c5:bd:d6:b6:a1:16:c2:ae:49:df:00:33:
aa:a3:b4:d7:1c:0e:9a:d0:50:00:2c:fb:95:41:bd:
3c:5a:7c:9c:09:b3:6a:a8:79:87:6e:af:3c:d1:6d:
b7:c2:9a:a6:b6:00:ce:53:43:15:1b:b0:26:78:09:
c7:4d:74:8c:74:83:99:33:5f:eb:7b:28:86:33:1f:
39:4b:91:88:18:12:ea:52:aa:f5:d5:85:c9:88:e4:
4b:db:d6:1d:db:98:8d:d0:ea:30:a3:10:c1:7e:d5:
51:70:83:f2:3a:d8:0a:1a:1f:ad:40:4d:43:a2:2f:
e6:54:2b:5b:42:74:5f:39:04:d7:46:53:48:6e:f8:
08:04:aa:86:7c:66:b2:b6:3f:66:48:4a:2e:36:80:
b7:2e:9a:e5:b9:e0:0e:e5:68:2b:49:40:e9:eb:6b:
76:66:f9:29:03:28:4b:cf:bf:24:a5:bc:7f:2c:ac:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:15:88:52:1F:BB:47:9B:1C:F7:65:49:AD:D4:36:34:8C:1D:6C
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dd:d6:5f:cf:b4:77:d7:ff:5b:b6:b3:fb:20:e9:ca:76:37:
9b:e2:e7:a3:15:c6:19:3c:87:2c:54:59:a0:c0:6a:7f:d3:56:
4c:42:e0:c7:02:32:5e:d6:cf:5c:c6:08:0d:85:85:0e:a3:c8:
45:2d:a0:d9:54:57:da:d9:ed:f1:bd:0b:de:3e:1d:6b:c6:37:
a0:1a:ea:b2:1b:1e:0f:b3:dd:dd:f2:f3:d5:9c:d9:73:5b:d5:
d4:5a:aa:26:68:68:79:d0:5c:03:00:d3:19:5a:b1:7a:94:f7:
73:0e:f2:42:fb:80:e3:68:14:db:fe:d4:6d:a7:c4:e5:0d:e9:
bd:a4:94:9a:d2:7f:29:fd:57:dd:09:d9:e4:e8:58:21:45:a2:
56:42:dc:7c:68:c5:35:ad:ef:02:3e:34:f2:ed:67:50:93:7d:
36:f6:5f:71:00:68:27:e5:bb:54:19:9d:51:48:f8:2a:d4:f7:
e6:83:f6:48:65:a1:34:74:12:c6:28:2e:48:0c:32:2d:d4:e2:
8e:7a:1e:71:45:fd:58:23:8b:a6:1a:74:e3:6e:b7:ba:cb:20:
d5:47:d3:52:40:f1:0a:61:01:db:38:74:05:ba:8f:9d:33:86:
90:e1:80:33:a0:c4:08:78:7e:a6:81:06:10:c0:f1:27:bd:90:
d0:4a:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:36:11 2025 by rpki-client