Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: EG2bDuF4sJ50KyY+nMEAGWi5zqy4btkfWEQnBtQZ1MI=
Subject key identifier: FC:B9:1C:50:7D:C4:CE:63:87:9E:C0:F1:75:EF:F9:74:88:4D:67:6C
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 0196B145384C967680D771FFE02848966C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 01B1
Signing time: Thu 08 May 2025 19:00:25 +0000
Manifest this update: Thu 08 May 2025 19:00:25 +0000
Manifest next update: Fri 09 May 2025 19:00:25 +0000
Files and hashes: 1: MxQNfpi-fhkY4RJBYH0rmNMo89A.roa (hash: LDqZG0CpfjjbhzqTlBUwL76WIHLWIHUvF2f/c9xQewQ=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: t4nYVxNqouQyzw7dblSHbP9wIX1RegYHpq3vASU2JPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:38:4c:96:76:80:d7:71:ff:e0:28:48:96:6c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: May 8 19:00:25 2025 GMT
Not After : May 9 19:00:25 2025 GMT
Subject: CN=fcb91c507dc4ce63879ec0f175eff974884d676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:38:04:56:4b:1f:ff:a6:1f:21:40:45:2f:
7e:69:c8:a3:a1:90:02:9d:d5:36:e5:7f:27:00:3c:
db:50:ab:42:ba:bf:c0:9c:68:60:16:00:26:d8:ee:
f4:c6:e5:ce:00:1a:dc:9d:1c:d1:a4:2f:2a:dd:02:
c9:4a:c1:89:ff:49:0e:c2:56:ec:d5:b4:78:e6:f4:
f1:68:92:ba:ff:c9:98:0f:bd:b2:4a:6a:3f:e2:9e:
31:34:25:04:ca:3d:af:e5:0e:12:0e:de:57:d0:da:
89:b4:25:c1:ed:f3:1d:69:10:37:50:ba:48:c4:1b:
b5:34:ff:f2:33:40:bd:68:0a:b6:0f:fb:16:be:3d:
0e:e6:49:4d:1c:79:e3:3d:5f:51:53:eb:c7:c5:fb:
11:f4:26:9d:f9:37:94:1a:a3:71:a5:20:e5:8f:d2:
01:2d:be:df:ea:82:f2:cc:52:cb:5f:a4:0a:83:80:
bf:74:c8:63:1d:cd:0e:a1:95:86:5b:fb:76:01:42:
bf:95:94:fc:e0:cb:ab:ce:b4:53:f7:19:bc:aa:e3:
5f:1e:b1:71:99:89:e3:c2:b7:99:ee:b4:75:18:26:
8e:a0:2b:2f:6f:a0:85:f0:6b:e2:da:17:d6:eb:4f:
5d:db:94:12:66:20:2b:e4:50:cd:71:ee:9d:b7:2e:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:1C:50:7D:C4:CE:63:87:9E:C0:F1:75:EF:F9:74:88:4D:67:6C
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4f:25:c3:f1:83:b4:92:1e:89:4d:4a:46:93:9d:a1:2e:c6:
1e:34:59:8e:2b:8f:16:ca:9b:02:03:11:a0:4c:6c:fa:a4:3c:
f7:57:91:5b:6b:84:5f:84:41:22:81:62:ce:86:56:6b:f3:1d:
ad:40:2e:29:3e:41:c2:45:62:e1:1e:a5:6a:5a:06:d3:6f:15:
b0:1d:c6:72:6f:57:b9:62:a2:f4:c5:02:65:c4:e9:1f:ac:fc:
7f:61:a5:f3:8a:64:43:79:08:9d:0b:66:e1:86:7f:8f:21:dc:
6d:28:c9:cd:52:30:18:99:4a:70:3b:77:6d:b0:31:39:74:39:
53:c7:19:6d:e0:58:1e:03:ad:af:fb:c6:a9:7c:18:94:3f:6e:
60:36:ff:51:5b:c7:c4:36:ca:55:27:db:19:7d:69:9f:33:49:
ef:07:b5:bc:2f:02:be:5d:59:b5:e6:ff:34:b9:02:23:36:0c:
16:11:bf:51:7e:a9:c0:72:df:ec:e5:48:8b:ac:ba:87:32:e3:
4d:b6:0a:f5:48:d2:6c:87:76:f5:40:a7:df:01:76:ed:f3:3a:
92:82:c6:b6:be:76:c5:18:3e:4f:14:34:61:9e:b8:66:4d:a9:
03:bb:56:8d:84:d6:4b:f8:5b:02:ac:4d:53:5f:50:e4:cb:c7:
0a:c5:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:48:57 2025 by rpki-client