Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: VeRqLc+JIBly+QxD/tRzpU4UaTEaIa08fbvvqfe6dTY=
Subject key identifier: 4B:5F:F2:1F:11:0E:D7:EB:0D:6F:91:A6:93:76:F2:3B:55:A3:3C:24
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 0196BAB60BA9FB830C4125D924B83CE2C3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 0838
Signing time: Sat 10 May 2025 15:00:14 +0000
Manifest this update: Sat 10 May 2025 15:00:14 +0000
Manifest next update: Sun 11 May 2025 15:00:14 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: kkZr67wBBcJeA8PY6vGnD1bi+a/W7VSBUmNcNVbwnZ8=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:0b:a9:fb:83:0c:41:25:d9:24:b8:3c:e2:c3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: May 10 15:00:14 2025 GMT
Not After : May 11 15:00:14 2025 GMT
Subject: CN=4b5ff21f110ed7eb0d6f91a69376f23b55a33c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:ff:21:87:85:0f:e2:fb:4a:6d:c7:4d:ab:
54:7c:df:60:d7:fb:2a:33:0e:9c:eb:ab:06:51:06:
93:59:53:f4:53:05:ec:f8:af:56:96:4b:72:32:b5:
8a:6b:9b:df:66:3c:01:34:cb:8a:22:b0:d9:56:ae:
bd:1f:17:d2:94:c1:87:f6:a2:28:17:80:6d:91:5d:
53:76:23:fe:56:ba:d9:9d:85:f3:c9:11:5b:f4:1d:
0c:09:57:f4:81:6d:15:89:84:71:72:7f:43:6d:43:
56:13:74:8e:da:a8:93:ee:39:74:1b:2f:0f:bf:1e:
2d:34:96:19:c7:a9:b8:73:7b:1e:da:c2:ef:62:49:
c9:cd:b4:e8:19:b5:ef:17:2f:0d:39:b9:e2:57:5b:
2e:5f:ec:15:0b:dc:91:5f:a3:a4:a1:2c:e7:3e:ee:
10:6f:00:97:97:93:95:43:21:bf:a5:08:c3:5e:b5:
21:31:6b:82:5e:de:44:c1:0f:46:4d:22:7b:f3:b2:
09:9a:5a:69:e6:47:46:91:b7:64:e3:ed:c6:3f:ca:
68:9d:f8:ab:dd:ba:28:89:bc:c2:0a:e3:55:0a:e3:
75:ab:60:e6:93:c9:2d:c7:55:f5:64:ca:de:4c:77:
d4:df:a2:d1:b8:b4:2f:58:95:b4:28:f2:26:52:c3:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:F2:1F:11:0E:D7:EB:0D:6F:91:A6:93:76:F2:3B:55:A3:3C:24
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a9:8a:9b:45:14:d5:1e:be:37:70:93:95:c0:28:61:f2:a0:
f8:67:9f:e0:90:43:8c:a6:de:32:79:7e:dd:26:b3:cb:7f:3b:
10:7d:b1:4e:03:f3:2a:2d:14:9f:33:40:4b:1e:26:d2:30:7d:
b4:4a:71:f2:c2:be:6d:9f:8b:b0:75:29:2b:d7:e4:ca:9a:a9:
7c:5a:43:f5:81:25:19:e7:c3:06:e6:50:20:78:63:f5:4a:99:
5d:89:6d:7e:c1:4c:dd:56:97:38:2c:91:dd:68:5f:ba:1a:86:
16:48:44:8b:1d:c4:48:32:1e:a9:e9:45:18:33:85:15:a8:10:
62:fb:d7:e1:d2:14:39:34:1f:36:e8:67:d5:84:a1:6f:ec:fb:
1d:a9:cb:16:30:06:6e:44:64:53:d5:1d:39:f6:98:12:35:46:
b4:14:16:da:f2:30:82:42:f5:97:3c:0b:17:00:b1:d5:bd:c5:
90:78:6a:77:1a:1b:20:cb:60:a4:10:9b:80:15:db:14:e8:07:
1b:ba:39:bf:fe:40:70:0e:5d:2a:4f:33:b7:b1:5f:38:08:4e:
2a:d9:4e:07:dd:29:9d:20:ce:3f:df:8e:ac:31:ce:41:da:2e:
84:4d:79:b3:10:ff:79:75:ac:2a:ee:5a:9d:29:62:9f:30:57:
8a:21:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:41:43 2025 by rpki-client