Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier: siE7e6JEKQApBDLbI9f7fQaUB1poJSM0dFfzrXb0d6A=
Subject key identifier: A1:61:71:94:09:9F:5A:27:DC:EE:EE:03:44:D5:EF:72:BA:E4:93:CA
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0196A0BF48271B41461CD0A269B3D6493570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number: 98
Signing time: Mon 05 May 2025 14:00:12 +0000
Manifest this update: Mon 05 May 2025 14:00:12 +0000
Manifest next update: Tue 06 May 2025 14:00:12 +0000
Files and hashes: 1: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: VhRb1DP1VM9IlBpV9iy6X5il16rRsySiZ2+wsY4xm/w=)
2: mOMofnwSDO1E_H1bLJd1El5aHMU.roa (hash: sehcH5h49oZDTQIRRZYvpCR3qhsCb+BcFwEIEdp5jcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:48:27:1b:41:46:1c:d0:a2:69:b3:d6:49:35:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: May 5 14:00:12 2025 GMT
Not After : May 6 14:00:12 2025 GMT
Subject: CN=a1617194099f5a27dceeee0344d5ef72bae493ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:72:ea:73:fc:13:d2:4f:4c:b4:b8:1d:fb:
1a:0f:86:6f:10:65:5e:04:0c:d5:71:60:54:5f:ff:
54:8f:42:d1:f9:70:8a:bc:76:d4:17:c9:e0:6e:bb:
22:c5:ca:74:97:3d:38:2b:d2:2b:ef:86:7e:cf:ec:
5b:63:36:30:59:58:3f:b1:8c:15:6d:77:89:59:34:
4c:80:b5:73:bd:30:5f:41:8d:4d:fc:bf:3a:48:e6:
d8:0f:48:62:56:7f:cd:51:23:4a:57:ca:a2:ca:50:
54:09:0e:be:5f:87:76:77:7f:13:46:15:4b:0b:f4:
0b:f4:15:f9:1a:32:e8:77:a7:cf:b4:00:5f:c3:a3:
5a:59:4d:81:6c:5f:4c:25:f0:f7:cf:d5:a2:a6:3b:
a0:63:ec:68:48:b9:6e:c7:e8:52:75:a8:af:c8:6a:
91:c7:49:fe:e5:e5:24:81:55:cf:a4:f8:77:dd:d4:
8f:b4:2e:84:35:c7:9a:8b:6d:da:5f:f4:21:5a:3a:
be:57:04:21:49:ac:37:dd:43:44:27:8d:33:e1:fe:
a9:b5:92:b7:7b:82:2b:64:17:d8:2a:13:cf:c9:8e:
29:8e:98:d8:b9:8c:03:25:f8:40:28:ce:02:37:a5:
f8:6b:18:05:11:df:05:5f:db:d0:29:57:76:a1:4b:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:71:94:09:9F:5A:27:DC:EE:EE:03:44:D5:EF:72:BA:E4:93:CA
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:cd:60:d2:17:62:31:24:70:9f:76:c1:80:84:39:c5:3f:
36:e6:09:14:ac:34:d9:64:5e:2f:17:b5:f9:61:06:5c:d8:2a:
a8:7a:93:ea:8c:48:e3:a4:d7:23:fe:31:46:a1:81:b8:02:05:
62:35:79:bb:ce:c5:34:fe:af:cb:05:ce:ec:6d:60:ba:e1:5c:
80:6f:ce:9b:06:aa:41:0a:b9:08:42:90:72:bf:44:49:4f:96:
7b:b2:ca:e7:f5:ba:0e:7f:73:d9:47:ca:7e:55:76:0c:25:c0:
14:65:fd:4c:eb:70:0b:25:27:5f:e2:46:14:dc:2e:13:77:43:
0d:c9:5b:c3:33:fb:d1:8a:4f:a5:e5:a6:d2:1e:8e:74:93:8f:
15:a9:f9:23:ef:52:6f:3f:f5:d6:c5:35:83:df:42:45:24:0b:
57:e8:c9:09:cb:1d:42:13:a4:c8:0e:eb:9b:01:4a:fe:1f:29:
1c:73:27:e6:8c:36:18:95:96:b1:9f:7e:90:0c:89:7f:c9:19:
d4:45:36:ca:20:ca:4d:bc:98:e5:10:42:6f:76:e7:17:5b:a2:
ae:95:d6:0c:8b:cb:23:41:ff:7d:51:26:33:82:58:d0:ff:e4:
54:a7:9d:af:23:39:b8:07:d7:1a:b8:93:7b:e2:32:00:6e:38:
9e:c1:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:29 2025 by rpki-client