Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: 6X26AsqlbHHJRtQ+xcEqtifSp35cppWhelw6Xd0p3wY=
Subject key identifier: 65:76:1F:3E:DA:9B:97:50:8D:9F:46:B1:75:C3:D4:11:1B:B4:16:36
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0196BE92CFFD74F9DB7254B6B9C6642118B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 09CB
Signing time: Sun 11 May 2025 09:00:14 +0000
Manifest this update: Sun 11 May 2025 09:00:14 +0000
Manifest next update: Mon 12 May 2025 09:00:14 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: y6WXstCTcSDujBTYi0BPfFRcrXazvQ7EDbsXQNuATI4=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:cf:fd:74:f9:db:72:54:b6:b9:c6:64:21:18:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: May 11 09:00:14 2025 GMT
Not After : May 12 09:00:14 2025 GMT
Subject: CN=65761f3eda9b97508d9f46b175c3d4111bb41636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:31:b2:f0:fe:73:a5:e1:16:29:3e:7b:11:
bf:e2:4b:42:16:32:43:2a:9c:26:85:d9:71:74:b2:
1b:b3:13:ea:70:d2:d0:b6:26:86:88:1a:34:a1:ee:
73:2d:92:a9:71:9b:e9:32:73:9d:ae:c4:76:dd:6f:
35:ef:c2:48:50:07:ce:f8:82:b8:36:45:57:a2:61:
73:df:bd:85:34:7f:14:ef:9f:c9:81:e2:4c:f3:e4:
66:8a:af:1f:aa:56:43:eb:79:7b:95:0c:b6:0e:ac:
0e:54:25:6e:28:cb:19:03:83:98:70:5b:c6:72:9e:
e6:89:07:ff:82:8d:55:df:a4:af:7e:df:7f:1b:c6:
d7:04:64:bb:69:8d:50:48:c5:5a:67:ac:b1:4e:6d:
63:1c:ca:8f:11:d3:ab:ca:23:7b:a3:4a:47:39:08:
49:79:14:43:99:54:98:43:c2:24:f5:8d:a4:59:83:
48:7f:83:55:d7:b4:27:1a:b1:f2:6b:26:cc:fb:f3:
93:37:28:17:37:80:8b:b8:97:32:0b:91:4f:50:0d:
7e:db:5a:55:3c:1b:02:f7:c5:a4:10:9e:40:f2:e3:
9c:7e:2d:f1:23:5d:3c:4f:c0:24:63:57:b5:dc:89:
c2:34:51:cf:36:b8:4a:bb:fc:dc:ad:90:14:4b:81:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:1F:3E:DA:9B:97:50:8D:9F:46:B1:75:C3:D4:11:1B:B4:16:36
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:af:e7:03:40:34:81:94:fe:1c:b5:db:c3:88:57:e1:33:
fa:10:f9:3c:2d:74:71:d6:dc:e6:3d:24:c4:e3:ea:e7:8a:13:
81:9a:04:c5:d5:6d:43:6e:1a:bd:32:26:f3:a6:42:ba:84:c5:
3b:5e:25:16:5e:c2:27:3a:76:b9:18:3e:0c:2d:b8:b0:b2:96:
a6:de:44:02:ac:3c:d0:eb:fb:b5:44:5b:e2:ad:42:92:3b:0d:
f8:3f:3c:92:d2:0d:a8:20:bc:48:52:65:a6:8c:0b:ad:55:21:
03:24:d6:61:a5:c5:99:cb:17:77:b3:7e:e5:09:21:b1:fe:89:
38:9c:3e:05:68:49:7f:04:7a:51:dd:6d:a3:41:4e:9b:a6:fd:
5b:37:21:24:f3:7b:c1:bb:98:16:a8:cc:bd:2f:1e:69:4a:3d:
68:fa:22:25:8d:02:5a:26:bb:0b:28:82:3e:e0:52:2e:d3:50:
58:be:38:e1:5a:63:e6:27:02:c7:63:1e:27:d5:11:1f:f4:2e:
70:47:4d:8e:9e:b9:98:9a:8d:f3:4a:c7:c0:dc:13:70:5e:54:
87:23:92:1c:f2:34:b7:f8:7e:08:f9:23:be:ad:83:bc:c2:ca:
82:ea:81:de:c7:7e:de:8d:1d:ce:08:e8:d8:ed:07:f5:3c:c9:
88:43:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:52:57 2025 by rpki-client