Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: XIg8onhsnpdbTN2xMqLSqrgXb3sWAXcrXN149x9ru64=
Subject key identifier: 96:99:2E:FC:B5:25:A5:35:32:0E:46:34:2F:1E:73:B0:E8:AB:DA:74
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0196B7EC247FF9A2AF35DA0958F18F2891CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 06A1
Signing time: Sat 10 May 2025 02:00:28 +0000
Manifest this update: Sat 10 May 2025 02:00:28 +0000
Manifest next update: Sun 11 May 2025 02:00:28 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: OGvk4ls1nVwlobjtcudmwqS5nEaqQTItaP3hEwuEaoU=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:24:7f:f9:a2:af:35:da:09:58:f1:8f:28:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: May 10 02:00:28 2025 GMT
Not After : May 11 02:00:28 2025 GMT
Subject: CN=96992efcb525a535320e46342f1e73b0e8abda74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:f5:cc:39:1d:51:05:f0:4b:1a:95:db:1d:
52:94:eb:25:be:06:74:59:af:dd:3a:66:b6:84:a4:
52:2c:5b:ed:02:d8:43:0f:a7:73:c5:88:bc:d2:10:
91:cd:12:11:dc:e1:c9:bf:66:6a:db:e2:68:63:d6:
6d:9a:78:0a:cd:61:83:7a:e2:9c:e7:35:19:d4:79:
e7:e9:e5:cf:f2:94:6c:73:0f:03:10:3e:47:3d:30:
2a:bb:a8:b9:aa:06:83:a6:74:7d:99:2a:aa:36:a4:
a7:7c:55:78:b2:b7:d3:5b:c0:b8:d4:b1:24:6d:82:
0e:5c:40:0f:e1:d3:74:53:c1:7a:7d:c5:a2:c6:4b:
a3:ff:02:c9:4a:88:bd:7a:c2:df:db:0b:ac:63:0a:
89:6d:78:d9:17:40:4d:f4:95:e5:24:a2:9e:ae:2c:
e2:5b:81:7c:21:41:a0:ce:4f:60:a7:5a:98:ba:52:
c9:4e:ff:e2:44:c3:37:f1:53:ec:93:ad:5b:98:21:
46:98:a6:be:cb:f4:54:a9:5c:be:ec:35:c1:4b:26:
13:39:b9:98:1d:ad:79:70:76:16:41:2b:6b:ab:22:
3b:bf:f2:78:af:93:0a:5f:b8:6a:44:5e:88:22:b9:
9f:39:58:78:9d:d7:a4:7e:69:b8:c1:e2:66:ae:1e:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:2E:FC:B5:25:A5:35:32:0E:46:34:2F:1E:73:B0:E8:AB:DA:74
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e2:e0:2b:67:c2:33:8f:9b:69:2f:4d:b8:56:b7:59:8a:c9:
3b:a2:71:5b:75:df:70:c2:01:5f:1d:c1:9f:be:98:a9:27:1f:
09:48:0f:38:55:1e:61:73:e1:75:16:5f:b9:d8:16:c0:cf:0b:
93:91:7c:69:c1:96:b2:d5:b3:6d:4f:f0:e4:81:75:55:29:9a:
11:c3:6b:3d:9b:97:a0:bc:cf:56:81:be:e7:c0:69:36:bb:aa:
d8:bf:03:87:c2:88:8f:f6:2e:4e:56:c7:6f:14:13:d3:95:12:
4a:58:05:05:b4:02:53:4c:43:68:f6:ec:da:6b:a8:00:2c:ed:
e5:6f:9d:23:5f:d9:57:cb:0d:2d:d3:55:5e:c5:4d:34:41:64:
17:ad:f0:ec:cc:41:98:57:f0:26:23:3a:41:a1:42:d3:3b:4f:
77:62:ae:ec:1e:5c:71:d5:ae:f5:1e:29:c9:e0:68:f6:20:79:
d3:ca:c3:7f:e0:52:4d:2e:21:b0:e1:77:31:f6:fa:54:b2:eb:
85:56:4d:3c:f0:f1:42:88:54:fe:6e:07:15:f1:7f:9d:77:35:
5d:6e:d9:91:c8:f4:24:20:b7:59:f2:fd:fd:90:d6:42:6c:a1:
55:a8:2c:0a:33:c9:00:d3:ce:c8:05:c7:23:50:aa:8b:c2:09:
fb:62:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:14:45 2025 by rpki-client