Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: c207LwztdilGXrkaCbZHNoyV0+MBSTZhY9qRxHEBszc=
Subject key identifier: 63:2E:C4:AD:78:8B:32:41:B8:58:84:BA:99:48:4B:4B:35:B1:38:FC
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0196B7B5B51C7A7BE4FB06FE91DC9C4A3911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 15C3
Signing time: Sat 10 May 2025 01:01:00 +0000
Manifest this update: Sat 10 May 2025 01:01:00 +0000
Manifest next update: Sun 11 May 2025 01:01:00 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: vUSKs4dG7+fvzSmaQ128lthafnGkE0KboiH3T03k9Ac=)
3: znbCSfa62MjugadmDs4WgFylkOE.roa (hash: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:b5:1c:7a:7b:e4:fb:06:fe:91:dc:9c:4a:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: May 10 01:01:00 2025 GMT
Not After : May 11 01:01:00 2025 GMT
Subject: CN=632ec4ad788b3241b85884ba99484b4b35b138fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:7c:71:81:2b:5b:aa:4d:9b:bc:19:dd:02:
a7:7b:b8:12:9e:e9:83:f8:d5:b7:e1:32:17:f3:47:
4a:12:e3:51:5f:bf:4f:7c:db:5d:98:f5:60:64:6c:
75:08:c4:5d:55:a6:eb:6e:8b:54:0c:ba:da:ea:79:
5d:38:fb:c1:21:f4:04:7b:08:bc:8c:b6:01:b9:7e:
ca:8d:40:64:32:ec:c6:fd:6a:bb:4a:72:6c:05:1c:
48:db:eb:f7:88:c0:d8:b2:cf:a0:ef:89:d1:48:56:
79:f2:cc:83:08:1b:28:94:1e:c2:c8:5f:45:44:f0:
5e:e3:ad:a7:ed:02:1e:b9:75:13:df:64:5c:e4:e2:
1a:fb:35:d6:78:c6:b7:9a:24:2b:65:d3:58:dc:6e:
67:6b:8b:6d:eb:8a:25:87:dd:c8:88:62:2d:28:53:
1c:85:7c:2f:e3:6f:64:97:5b:c7:6c:e5:9f:ef:d1:
2f:51:16:a8:41:ca:47:71:4c:43:92:be:1c:e3:6f:
bb:0f:56:cf:8e:9d:5e:2f:91:e1:d9:56:0e:30:01:
4c:d3:05:c7:e0:f9:17:77:4a:07:a8:ca:b2:08:0d:
08:49:fc:5e:80:51:5b:30:91:ab:19:82:77:ad:08:
88:0b:5d:ae:74:c9:05:93:03:ad:7c:86:38:79:cb:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:C4:AD:78:8B:32:41:B8:58:84:BA:99:48:4B:4B:35:B1:38:FC
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:19:d5:5f:23:24:12:0c:76:20:0b:d6:67:c0:eb:e7:df:cd:
ff:ed:93:5d:5d:a5:48:a2:83:5d:ba:91:2e:5b:32:ea:1f:14:
0f:42:eb:5c:31:6f:1f:d9:b2:74:db:64:23:3c:22:a4:f3:b7:
0c:d0:c1:8d:af:b9:4c:a6:64:d6:89:c0:b5:b9:06:46:c4:60:
c3:c7:96:5c:84:25:44:36:d1:b8:29:ae:c9:fc:bb:48:5b:9d:
b9:b1:d4:96:8b:a3:be:04:53:ec:cc:fd:36:62:c9:0e:31:ec:
b3:bb:cb:f1:82:ed:76:c3:6a:92:1c:c5:ed:b8:11:1c:07:f5:
6d:a9:64:f9:8b:8d:e5:33:58:c0:81:78:5b:d6:a0:e6:49:d8:
b9:0d:83:37:c9:6a:45:e9:f9:52:4a:65:50:df:f5:23:da:17:
fa:19:47:e1:9b:76:f3:4d:68:11:b8:2f:bb:1f:19:85:ff:b3:
26:90:e5:90:77:b9:40:86:d6:25:93:1b:4f:0f:d6:81:34:c1:
37:e2:4e:ee:e6:eb:b6:7c:0f:1a:56:f3:4f:80:df:2a:55:dd:
8d:19:54:ac:f1:8e:9c:e2:41:fa:9b:fa:47:aa:35:42:5d:75:
f3:49:23:7d:2c:f7:c0:f1:20:99:0a:b9:56:68:28:e0:08:dd:
b5:14:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:27:55 2025 by rpki-client