Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File: GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier: +0bGVbugQuehT5A1f135f6O1rt+nkDch+k5DYIPZ4xo=
Subject key identifier: F4:16:88:A3:27:23:D3:FD:E7:11:AD:4C:1E:3E:2E:BD:70:F3:77:00
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer: /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial: 0196A276D566422D27B92D386CAC98F6AF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number: 23
Signing time: Mon 05 May 2025 22:00:18 +0000
Manifest this update: Mon 05 May 2025 22:00:18 +0000
Manifest next update: Tue 06 May 2025 22:00:18 +0000
Files and hashes: 1: 0yoRjSV7Roa_6RLApu60JbNvhn0.roa (hash: zY5w8MSwqL9WHbjRx7fb+VonzMqXyw8rTcBHB5IjZKc=)
2: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: AepVLoPIK7WOQRz2mp1QQSOQPVEGnHRaC8nwu5gJGLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:d5:66:42:2d:27:b9:2d:38:6c:ac:98:f6:af:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Validity
Not Before: May 5 22:00:18 2025 GMT
Not After : May 6 22:00:18 2025 GMT
Subject: CN=f41688a32723d3fde711ad4c1e3e2ebd70f37700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:7e:b9:ee:86:a5:f5:73:e1:a9:cd:f7:c2:
c6:ec:65:f3:09:57:e1:5a:0f:7f:32:05:de:b0:b1:
b9:98:4b:ce:2b:14:23:f9:e4:36:51:7b:b4:9d:eb:
1a:66:28:fb:81:ae:12:85:47:61:a5:05:bc:80:6f:
64:58:81:96:c9:fa:25:7f:1b:b2:5a:7c:fc:29:60:
5f:22:a8:32:24:8a:49:65:1a:e5:19:38:fa:1d:95:
d8:6d:b7:eb:54:fb:c3:f0:95:9a:a3:9a:37:5a:82:
d8:1f:24:96:07:11:4a:cc:e8:67:96:1c:b4:73:63:
0f:bb:48:80:01:01:20:65:c4:80:91:ae:02:a9:f6:
23:df:d5:80:26:35:2b:4f:36:9f:81:e7:e5:ee:ba:
72:f7:61:86:84:e0:90:8a:61:ad:40:0c:f6:98:eb:
ba:73:54:8f:22:b4:28:bb:fd:c2:40:d9:bd:92:35:
75:82:61:a0:29:9a:3a:e7:d3:ce:9d:a0:54:95:ac:
1e:77:8e:e3:7e:32:d4:d1:f3:c5:64:79:45:c8:5a:
04:93:67:bd:ca:56:33:32:66:ab:99:98:b7:fb:98:
80:07:90:b8:99:88:31:85:ec:fa:dc:b6:9c:2f:e2:
59:aa:87:61:f4:9b:06:ac:32:5d:2a:1b:18:47:b1:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:88:A3:27:23:D3:FD:E7:11:AD:4C:1E:3E:2E:BD:70:F3:77:00
X509v3 Authority Key Identifier:
keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e4:7b:ce:9e:de:c8:e2:9d:96:57:65:a8:2d:fe:c2:2b:fd:
68:73:7d:67:13:f2:db:53:b3:2f:47:fc:21:de:82:00:85:da:
27:2a:0c:fb:10:67:12:51:cf:45:66:10:13:4b:fb:fb:73:67:
6b:78:04:6c:41:db:3f:3f:cd:bd:e1:75:a4:0b:1b:de:c5:10:
a6:2e:ea:98:cb:c7:ea:33:75:b7:c4:b8:4d:86:cd:a8:c3:40:
dd:ff:ce:8a:a7:8e:4b:2d:db:8c:4f:73:da:e3:84:01:cb:e0:
72:96:de:87:5d:88:99:f9:3a:72:22:49:5b:f7:6a:05:36:bf:
71:01:e6:8f:7e:f1:29:2e:4b:5c:32:9f:83:8d:34:8b:82:7d:
14:42:3b:82:de:43:61:e2:ad:52:1e:c1:b5:a4:c5:73:7e:53:
cc:4b:f4:e2:e5:22:d9:c3:30:1a:f9:ea:78:59:73:ce:8d:c8:
75:68:f9:d0:5a:00:cb:bd:5e:5a:09:31:78:87:ff:40:ca:54:
e7:97:58:51:81:66:ae:4c:65:e8:14:9f:93:e8:eb:7d:39:80:
0d:e4:6f:72:88:11:3c:79:d4:d5:9d:a8:9d:e2:32:62:eb:82:
2d:93:04:dd:b0:0c:0d:ee:3d:56:1d:72:9d:90:c4:d3:23:3c:
fe:d5:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:50:54 2025 by rpki-client