Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: sywXLKqV2zcfWbQx3OOy1zUrZIIiUaVerX0NIEjw6Fg=
Subject key identifier: 14:00:2E:FB:E4:58:9A:11:A8:96:14:A9:0A:8B:13:3E:48:38:C2:13
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0196BD497706F4EB9F79501661499EDD1106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 03:00:30 +0000
Manifest this update: Sun 11 May 2025 03:00:30 +0000
Manifest next update: Mon 12 May 2025 03:00:30 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: 38fi6GonZcFbNfCzJ6BGffeJqzTDgJSxHwaLZOSgN+0=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:77:06:f4:eb:9f:79:50:16:61:49:9e:dd:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: May 11 03:00:30 2025 GMT
Not After : May 12 03:00:30 2025 GMT
Subject: CN=14002efbe4589a11a89614a90a8b133e4838c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:92:eb:30:f2:c4:8d:f1:f5:6d:56:40:1f:
ea:33:4e:4c:8a:c0:71:86:62:93:ab:2e:67:15:d9:
a7:cd:c1:bf:85:43:25:48:33:ce:78:64:05:55:fc:
dd:86:c8:88:84:eb:6e:f8:18:99:d0:51:f9:f1:b3:
8f:28:aa:bb:4a:1e:be:6c:4e:55:4e:f0:b4:62:30:
3d:05:20:4d:19:d6:5e:1e:c1:3a:31:49:55:4d:43:
12:4b:c0:77:3b:6c:60:cb:7b:df:d1:47:9d:23:47:
45:6a:42:a2:aa:d0:78:b2:87:1b:3d:c9:28:01:78:
ec:46:3e:d1:22:7d:aa:19:dc:64:f6:10:b8:cd:bb:
45:1d:13:12:23:d7:96:e0:62:b3:cb:08:14:3b:18:
9e:d7:3a:69:1a:04:ed:19:fd:e5:f9:1c:5c:72:35:
ab:dc:a6:c5:7a:ed:e7:41:c5:3b:cd:fa:70:9e:0c:
62:0e:ca:e5:e9:14:71:26:d2:df:b2:fa:ca:24:28:
f6:b8:22:de:b5:8c:76:96:b3:e3:42:01:d8:23:99:
8c:ee:27:82:09:44:d8:f8:90:93:ac:7c:71:ce:a9:
9a:bf:5a:8a:68:92:20:e0:de:45:2f:bd:3e:54:8a:
98:39:4e:19:df:1d:22:da:64:65:70:53:d1:74:d1:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:2E:FB:E4:58:9A:11:A8:96:14:A9:0A:8B:13:3E:48:38:C2:13
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:ad:85:73:54:d8:e3:85:1a:98:08:47:d0:f7:f5:6d:ec:
6f:07:0d:ca:b5:01:05:a5:4b:67:a1:5b:10:60:b0:d9:b7:31:
b7:25:13:1d:b3:72:1d:6b:03:a8:4e:15:7b:52:89:1e:00:47:
28:f4:68:9f:fc:1b:55:22:c6:d7:ea:c3:a4:4b:da:5b:c0:ac:
83:c8:6b:c6:ed:62:03:07:23:88:cd:63:6a:34:3e:35:3c:34:
77:a3:92:3b:20:69:7f:02:11:ac:81:06:43:1e:0d:20:32:77:
43:26:31:c1:99:fd:a2:0b:6f:e1:4a:cc:9e:ef:17:88:cd:e6:
e7:b1:d2:8f:bb:5c:5c:d0:f2:14:2b:ca:34:cb:3b:73:4e:59:
3b:04:d1:f2:bf:91:48:5e:70:7d:73:ae:a4:24:aa:6d:25:a3:
98:ea:d8:51:61:33:a4:9f:b0:e2:6f:ac:b6:00:aa:81:37:82:
e9:d1:9a:7b:ea:7f:96:57:25:8b:7b:9f:1b:58:bd:0a:db:fe:
51:df:3f:22:4a:04:4e:6e:ee:22:f8:8a:3d:b2:cd:61:99:b4:
d2:ee:5f:d0:ae:d7:d4:8e:10:15:4a:4f:34:bc:49:41:6a:07:
49:ba:ed:1f:37:02:91:e0:69:0c:76:44:98:1c:95:1c:2c:48:
cd:bb:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:29:56 2025 by rpki-client