Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: Qcx7WLdT0BRQW3EOtudEHo19ERKHFy77xTK6qXKwlvU=
Subject key identifier: 8F:56:C2:30:F3:E8:4E:07:01:63:C2:61:FD:BA:1B:6A:AE:FB:A4:67
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 0196C0B84D3D22123F25F994A8E56C7A9653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0A9A
Signing time: Sun 11 May 2025 19:00:25 +0000
Manifest this update: Sun 11 May 2025 19:00:25 +0000
Manifest next update: Mon 12 May 2025 19:00:25 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: iZ1dJFhnd9QlAMDXSyKRNSQ2BDIf7e2mOnqKE5ZB0iY=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:4d:3d:22:12:3f:25:f9:94:a8:e5:6c:7a:96:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: May 11 19:00:25 2025 GMT
Not After : May 12 19:00:25 2025 GMT
Subject: CN=8f56c230f3e84e070163c261fdba1b6aaefba467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:72:6f:66:44:0a:6f:d2:aa:25:65:8a:a3:
38:6f:19:30:57:79:73:b5:14:ef:65:48:bb:f8:14:
d3:fd:05:71:f3:d2:67:bb:2a:70:68:24:17:d9:36:
47:b7:d8:18:4b:76:bf:05:a3:aa:7f:d8:27:79:f8:
b2:c8:bb:3d:6e:8c:22:0f:80:2e:f7:0c:d9:f8:29:
4e:06:0c:6d:f8:19:d4:e6:ae:ea:84:af:53:c5:ee:
10:91:1b:64:ff:75:cf:23:47:d8:12:c0:1e:8b:c8:
02:3d:2f:5c:98:d1:f5:1b:d4:83:96:88:d8:2f:1f:
b7:8e:32:05:76:c9:d9:d3:c2:94:6a:bc:29:08:34:
06:11:de:86:d5:c5:a7:b9:b7:ec:a4:9d:3f:cd:b1:
24:57:05:dc:60:9c:28:7e:ca:4a:c6:2d:c1:e0:99:
86:63:a5:9a:43:a2:5c:68:99:a0:cb:0d:1c:2d:42:
3f:a1:23:f8:8d:2c:38:0f:a8:3c:72:f8:5f:2a:83:
5e:08:0c:22:7b:6e:e6:f7:1b:5d:38:bf:32:d4:30:
e0:58:43:40:cf:f6:78:c3:65:53:23:f1:c0:c2:ca:
42:cb:fc:63:ac:91:9a:00:17:a0:b2:7f:5d:72:28:
d8:dc:9f:56:95:27:a5:ab:0a:f4:b0:d4:7e:8f:75:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:C2:30:F3:E8:4E:07:01:63:C2:61:FD:BA:1B:6A:AE:FB:A4:67
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:29:75:1a:51:a6:10:c8:66:04:99:a4:93:31:ab:6b:fa:25:
8d:86:d8:44:eb:bc:f7:8f:db:7d:f3:82:47:2a:33:4e:7a:43:
ba:57:f5:3e:b9:77:8d:b2:c3:f1:ac:31:6b:62:08:f2:ac:31:
a2:f4:f8:45:2e:8c:b6:df:f1:78:81:44:22:0d:75:26:47:f7:
9b:c3:26:9c:b3:6e:f3:92:73:a1:03:cb:4a:1e:5b:a6:e8:e9:
52:87:e9:f5:33:6d:e4:5e:15:58:46:58:5e:57:45:2f:8d:f9:
c5:0d:ea:15:e4:74:ad:65:79:1c:07:af:e8:c6:37:12:83:7e:
eb:4b:2a:17:c2:9e:d9:1c:ce:7f:33:c5:1d:51:37:72:cd:4b:
7b:73:4b:70:52:34:00:8c:04:02:13:83:a3:d8:a2:df:50:8c:
8f:a1:eb:44:e0:04:f8:26:9a:1d:18:6c:53:16:8b:4a:a3:d7:
12:a3:c8:0f:84:8b:2d:cb:42:9c:1c:02:cb:49:11:5b:83:10:
3c:50:2d:e1:d3:93:e8:07:23:6f:f6:28:95:66:4d:cc:19:0c:
37:e0:0d:95:38:6f:7b:a5:8c:0c:96:45:f8:be:65:37:61:43:
9d:75:44:1b:1f:ac:49:43:fd:6e:f7:79:57:37:91:38:19:9d:
71:f4:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:12:50 2025 by rpki-client