Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier: JWdSL917eGU6qx3z9CbyLBR2GxuvKDDHNxdggOMWFnI=
Subject key identifier: BF:FC:1C:28:8A:3C:E7:32:CC:03:70:09:A1:3C:75:95:BA:DA:97:3B
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 0196A8AFBB5CDA7488820542EE15A7ACB98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number: 0687
Signing time: Wed 07 May 2025 03:00:11 +0000
Manifest this update: Wed 07 May 2025 03:00:11 +0000
Manifest next update: Thu 08 May 2025 03:00:11 +0000
Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: 0pbRX8nCvk8bj2nUm9Tp0UeXWxPHv0eQ7EQ7T7kRXFc=)
2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:af:bb:5c:da:74:88:82:05:42:ee:15:a7:ac:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: May 7 03:00:11 2025 GMT
Not After : May 8 03:00:11 2025 GMT
Subject: CN=bffc1c288a3ce732cc037009a13c7595bada973b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:20:b8:65:b9:36:14:48:7c:c1:23:cf:96:
d6:e5:f0:d4:5c:d4:2c:d8:f0:d0:c1:ea:e9:a5:5f:
05:d8:e2:23:dd:05:2f:55:a7:36:ad:aa:06:a8:5f:
ac:12:4b:31:22:11:be:33:1f:74:38:17:86:17:82:
62:0b:fd:3b:20:7e:dc:45:c7:f0:2e:fc:70:2c:42:
bf:4f:d9:14:0a:da:ab:12:ea:e8:d3:d3:dc:0a:40:
c0:84:25:0d:b3:a7:58:80:63:b0:7b:23:12:6b:57:
a5:c2:a3:8b:9c:02:ee:62:70:fb:a8:d2:ea:a4:59:
95:f4:10:d0:82:8a:23:54:83:ae:34:b4:fd:51:43:
1c:fa:27:f3:57:e6:cf:cd:1d:c6:27:ee:9b:b0:37:
c4:b2:f5:b2:36:e3:bd:5a:6a:66:5c:62:39:82:9f:
75:66:72:4c:27:b3:e2:b7:4f:60:6d:e2:6e:d8:f5:
f6:1c:58:fe:39:85:a2:86:5b:93:ce:a1:5a:d9:c7:
42:b7:d2:de:19:40:9d:ca:d7:96:17:7d:f5:2c:88:
76:30:c7:e0:3c:6b:28:c5:1f:97:67:9c:96:54:2e:
bc:23:78:c2:85:6b:a0:c6:23:f4:77:14:02:39:b5:
c9:d9:f2:4a:48:41:00:5f:ad:3f:db:ee:54:c1:23:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:1C:28:8A:3C:E7:32:CC:03:70:09:A1:3C:75:95:BA:DA:97:3B
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:63:a5:4c:5b:ba:9b:72:05:a0:97:19:2c:04:49:3e:11:fb:
d4:16:3c:54:60:2f:81:a6:a8:b6:1e:f9:e2:f9:d7:3a:3b:b0:
5f:27:5f:07:f3:52:ca:da:db:9a:45:bf:45:95:d6:69:ac:3e:
86:a6:c4:e8:f3:f8:5d:e4:00:84:d6:d6:22:2e:da:21:31:3d:
05:55:d3:45:9e:38:b8:09:33:a0:20:72:24:a8:5c:e0:9a:33:
71:aa:88:70:4b:35:5d:94:0f:9a:6b:07:f5:f4:93:f6:d4:88:
fc:34:af:4d:a7:26:07:cd:8e:e8:96:fb:94:78:6a:51:15:6a:
bd:1a:e2:c9:72:96:cd:b6:26:11:2b:90:4d:a4:de:a8:cc:31:
05:1b:1a:7d:67:d5:48:8a:6b:af:f4:23:ed:6f:c5:4a:c0:44:
d5:32:d2:a8:79:22:62:d5:6b:5a:c0:31:46:27:35:5e:ef:ee:
b8:c0:5d:59:c2:f1:3c:f8:38:b3:16:a1:da:09:9d:08:e0:a4:
ca:0d:52:ad:e7:3e:8a:01:d6:2a:f7:9a:c7:ce:de:fe:14:39:
43:e3:ac:dd:9b:88:ab:b0:0e:74:8e:63:d2:91:81:37:c9:90:
27:9b:b5:c6:94:2b:cb:41:f1:7c:5a:7b:09:18:99:13:4a:b3:
9a:82:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:38:32 2025 by rpki-client