Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: JKCxSZ4yZQfDx8ZzJvyp0OsY38ixUYcbMm34NJMRVZ0=
Subject key identifier: 12:9C:C9:E4:55:E4:00:AE:C8:13:1C:71:3D:47:0D:EB:DE:90:50:1D
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 0196C013DEA307198903632407AC57C77C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 16:00:49 +0000
Manifest this update: Sun 11 May 2025 16:00:49 +0000
Manifest next update: Mon 12 May 2025 16:00:49 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: eksZyugxVM+WKHbPh3GnM63oSCqyO6uvQtQR4HN+pNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:de:a3:07:19:89:03:63:24:07:ac:57:c7:7c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: May 11 16:00:49 2025 GMT
Not After : May 12 16:00:49 2025 GMT
Subject: CN=129cc9e455e400aec8131c713d470debde90501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:e3:2d:be:f5:f7:84:5e:c4:0f:6f:bb:33:
46:16:7f:36:ab:61:6b:5c:a3:78:6c:e5:4c:23:2b:
fa:d0:df:fe:d7:8c:af:5c:10:f5:ac:7c:ce:eb:2e:
ff:54:f6:70:37:ba:7a:96:04:58:72:98:c7:35:d0:
44:14:fd:71:30:dd:ac:a6:49:11:1c:49:9f:42:2b:
86:d4:f2:15:a0:39:17:7e:dd:ef:8c:e2:e4:2c:a8:
9e:45:b8:8f:80:7e:56:e1:d7:54:13:cb:42:f9:6c:
5f:04:81:a5:e6:a1:79:3d:e3:fd:74:0e:be:4f:d5:
1f:7f:2c:51:4e:74:fc:6e:d1:2b:8a:71:52:39:dd:
e6:10:6c:20:a0:1b:62:40:21:f1:44:7f:c6:38:63:
8a:1e:85:24:3c:1f:11:6d:b2:64:d7:c6:eb:a0:38:
52:41:bb:16:89:c1:51:81:05:86:8a:a5:bb:03:b3:
ae:94:af:02:45:d3:91:d9:82:a0:16:44:ef:c7:ba:
b4:80:fa:9e:3d:d3:10:b4:26:81:eb:55:73:ba:93:
e1:5b:df:f0:05:5c:fe:30:40:96:1a:8d:db:f3:25:
51:d6:22:d2:04:05:20:2d:cd:10:88:8d:51:c5:df:
51:01:3c:0a:a0:ab:0f:9a:52:54:a2:75:43:e5:28:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:C9:E4:55:E4:00:AE:C8:13:1C:71:3D:47:0D:EB:DE:90:50:1D
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:92:20:f1:a8:d4:34:7a:2a:f7:4d:6d:9f:c9:cb:ae:12:
68:f7:f7:80:d3:37:da:d5:64:22:3c:71:34:11:41:40:80:51:
2f:db:59:59:e0:a9:90:6b:9c:c4:26:24:0c:14:6d:bc:80:49:
0e:a2:ab:98:42:4e:e6:77:45:2b:3c:13:c1:1b:a1:a6:2b:59:
6b:87:b7:6f:52:18:c6:89:8e:db:13:a1:ef:13:f5:5b:49:d1:
37:af:c0:da:36:80:6e:94:5e:b3:80:5b:68:48:fa:bc:6a:35:
cf:9a:df:8c:72:76:4a:b5:ba:d9:55:49:47:67:46:72:52:aa:
3b:45:f8:1d:fc:76:33:02:73:ff:07:c0:b1:3d:2c:02:f6:ba:
bc:27:a1:ba:6c:ab:e9:ed:71:ba:64:87:7e:c7:91:32:c7:f1:
0c:dc:e1:66:cc:58:db:41:16:53:5c:1d:57:1a:da:41:6b:17:
d5:7a:17:7f:c3:c2:ae:9e:07:4f:dc:10:43:26:04:95:27:43:
e7:69:51:23:af:e9:70:c2:99:92:61:5f:de:19:c3:7a:4d:d1:
ca:4c:f2:96:2a:cb:38:3e:75:87:1f:4a:19:8d:ca:6d:e3:b0:
cb:58:cb:e1:13:c2:cb:75:03:8d:d8:96:8a:10:0e:99:de:bf:
8f:ba:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:55:38 2025 by rpki-client