Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: +Jr9xJ8MF5/h4omADYI1lzM1sXG48JfKIJxNAlqiPJg=
Subject key identifier: 13:82:02:10:E6:24:0B:6A:56:3B:56:C0:F1:D9:B5:4D:82:A2:56:E4
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 019686FFC8C09F8920EA0DD0B0131F82A6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 0D5A
Signing time: Wed 30 Apr 2025 14:00:32 +0000
Manifest this update: Wed 30 Apr 2025 14:00:32 +0000
Manifest next update: Thu 01 May 2025 14:00:32 +0000
Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: nHFAZ4qboTyZdLMdARSucLxtWPTTSTIqdEWygvSPL1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:c8:c0:9f:89:20:ea:0d:d0:b0:13:1f:82:a6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Apr 30 14:00:32 2025 GMT
Not After : May 1 14:00:32 2025 GMT
Subject: CN=13820210e6240b6a563b56c0f1d9b54d82a256e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:2b:2a:1b:ca:e5:c8:e1:d2:b6:d5:0d:22:
01:e4:6c:67:f3:66:a6:c4:ba:78:1f:9f:41:c9:48:
25:54:cc:7b:c2:60:74:c7:a0:1e:4e:90:bb:8b:f5:
3f:fe:82:00:a7:b2:89:9f:73:bf:19:de:2c:34:e4:
90:2d:b0:34:53:52:4c:5c:98:28:a4:e6:1b:20:95:
94:ba:cb:4e:35:af:3f:0c:11:60:66:a8:76:50:38:
45:dd:60:c8:f9:04:cf:1c:f3:76:8a:9d:ac:19:f3:
1d:a2:10:bd:d9:8a:1f:eb:2a:5c:f9:a0:37:cf:53:
3d:00:af:30:85:58:28:19:97:15:73:00:66:ca:6e:
f7:cd:71:df:5b:e8:4a:7d:bd:bb:ee:bb:96:90:ad:
6a:f9:b2:93:15:a7:44:89:a7:12:11:2d:aa:4f:02:
b9:26:ee:1b:65:9f:a5:5f:2a:95:b1:bb:8e:6e:20:
bd:77:ff:56:cb:b1:b4:3e:46:07:43:1c:59:c0:29:
7c:29:d8:d3:a7:20:92:34:1e:cd:4d:5c:1c:89:13:
16:d4:1e:c7:62:16:89:c4:ff:12:ce:36:0f:8a:ca:
d5:0f:0e:c4:21:89:fe:f9:f0:ce:33:fa:47:a9:0b:
b3:c7:a1:10:36:37:85:d6:4e:57:18:1a:dc:7d:b1:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:02:10:E6:24:0B:6A:56:3B:56:C0:F1:D9:B5:4D:82:A2:56:E4
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:03:d3:67:09:f7:3b:37:42:40:e4:97:ed:a9:26:70:63:06:
b7:b8:4a:63:51:c6:a5:68:24:44:e3:a7:55:c1:ec:53:0e:24:
37:a4:b1:72:86:69:a9:0d:53:2e:78:57:24:77:28:61:c8:8d:
c8:15:0a:8f:19:ed:72:ee:64:09:a7:eb:98:29:4a:47:fe:98:
fb:3b:b4:27:94:7f:52:8e:91:50:44:81:20:aa:8f:82:c3:ef:
d7:27:74:4c:e8:7d:56:a1:81:d5:c5:7b:fe:d4:58:40:e2:3c:
6b:3d:b3:e3:6d:17:bf:08:67:d8:a0:f4:f6:b4:c5:97:71:98:
32:e9:86:68:d0:bb:c6:b8:31:09:cb:00:c1:08:d6:ed:d0:bf:
9e:04:62:2e:6c:68:b5:94:72:c3:14:8d:7d:5b:ad:df:bc:12:
ca:f1:86:e2:97:27:5d:95:af:9f:c0:48:98:17:d2:08:63:59:
5d:78:c4:76:99:ce:e7:7f:a5:7d:9d:33:3c:69:3b:f4:47:ac:
0f:bb:6b:86:d7:9f:71:06:38:86:4c:83:d6:35:0c:9d:ff:ad:
74:44:c1:a8:48:3f:00:18:5a:83:55:f9:f0:58:10:71:ae:e7:
c3:78:ac:5c:95:36:88:4e:58:17:16:1d:e2:e4:e8:2c:65:fa:
12:a8:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:47 2025 by rpki-client