Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: 9f+e4CroNdesZKnIvbjb7nz+5yQY/TH0GIE2LiCQxi8=
Subject key identifier: 05:B9:EF:49:B3:13:06:37:76:02:05:92:57:40:96:DB:2F:47:9A:D8
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 0196A2AE069621858E86CF69CB55A831F391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 06BA
Signing time: Mon 05 May 2025 23:00:36 +0000
Manifest this update: Mon 05 May 2025 23:00:36 +0000
Manifest next update: Tue 06 May 2025 23:00:36 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: niJBWHisAiT7XDcfCfspTprr04yvHWpGq+/Nu+pF7hA=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:06:96:21:85:8e:86:cf:69:cb:55:a8:31:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: May 5 23:00:36 2025 GMT
Not After : May 6 23:00:36 2025 GMT
Subject: CN=05b9ef49b313063776020592574096db2f479ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:ba:0c:e4:ed:a8:18:fc:76:03:00:dd:49:
5b:ec:e4:39:e5:c3:9f:90:2e:11:53:1c:1d:ab:2d:
a4:27:8a:2c:4d:25:b5:68:88:1a:4e:07:7b:64:09:
40:13:e7:28:f3:fb:96:a3:af:6c:d7:8f:50:68:1e:
c4:56:21:27:8e:35:91:44:3e:41:0f:ef:8c:0b:6e:
94:dd:bd:19:90:5b:dc:17:38:9f:85:81:04:36:7a:
f0:e8:65:95:58:d1:40:87:1e:26:4a:8b:d0:73:46:
32:2a:96:05:be:f5:48:c7:dd:45:e5:fa:e7:02:cb:
bb:ea:28:05:ff:16:7d:f6:f8:64:98:6b:04:6e:da:
24:c0:78:ee:17:ed:cc:9c:64:91:81:27:4d:12:0f:
20:86:6d:ac:a7:aa:58:77:75:c1:06:6c:ea:6c:b4:
0e:b0:a1:ab:62:47:24:7b:0f:6f:99:e5:3d:5d:ad:
4d:03:81:53:ad:5c:f4:91:d1:a8:07:95:60:7e:df:
d2:98:12:39:04:66:22:93:45:bd:6e:f3:45:f4:f3:
83:91:21:70:75:b3:e3:0c:de:cd:9e:cc:0b:c5:28:
7b:3b:b0:77:55:e6:ba:63:43:83:56:b2:86:59:52:
73:2f:5a:df:64:cc:57:7c:b5:fc:e9:ee:02:8f:d0:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B9:EF:49:B3:13:06:37:76:02:05:92:57:40:96:DB:2F:47:9A:D8
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e6:b3:91:93:28:07:60:be:00:04:09:ec:07:17:11:ec:c1:
4c:db:0f:a1:06:2e:eb:06:cd:15:f3:dc:f5:b7:1e:02:63:85:
b0:50:ff:40:59:40:94:17:69:3c:06:44:66:ed:ea:5a:5e:e1:
f8:57:2c:0a:93:c0:24:19:78:ce:02:f9:dc:0b:2e:21:2e:a1:
41:99:8b:50:34:9b:35:31:88:9a:c1:59:42:18:b9:12:2c:c3:
53:46:3e:c1:ef:a3:1d:de:e3:f4:15:47:e7:33:14:98:76:22:
ca:76:5e:1d:f5:86:d8:24:24:5b:b9:bb:87:0d:44:a9:c8:86:
ee:f1:7b:40:f5:10:5c:39:89:3b:95:76:30:3a:fc:12:a2:f2:
c4:69:2d:a2:e5:24:75:c6:76:c2:a4:ce:a1:48:50:31:66:10:
45:2b:c8:6e:f8:ef:2f:b7:d7:44:a2:d6:59:4e:42:ef:5d:c5:
1f:d4:b5:c0:42:6d:0c:d1:b2:e0:23:35:ca:b6:a9:1d:d2:61:
19:14:3c:2c:5f:41:82:b5:cb:b5:ad:68:29:c0:e4:e9:c3:9a:
2f:7d:3f:04:94:c4:9a:4c:c9:1d:57:1b:be:fc:5e:70:c4:9a:
81:e0:b1:5a:95:59:d8:00:2b:29:6c:48:02:6f:55:15:44:fd:
da:ba:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:38 2025 by rpki-client