Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: lz86mkGizG8hT8npL2UzeUALTU9djtGguISSfCOriyw=
Subject key identifier: D1:90:65:8E:B0:45:F8:8C:29:8D:B2:90:EF:70:F4:45:75:6F:DF:D8
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 0196C2DDEAB52F814C8093286C0C1E1C4D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 07C1
Signing time: Mon 12 May 2025 05:00:45 +0000
Manifest this update: Mon 12 May 2025 05:00:45 +0000
Manifest next update: Tue 13 May 2025 05:00:45 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: 9wfh4KdPhpI2BQZPad3PX+tfJ4hzPqXd5mK31un0Ucg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:ea:b5:2f:81:4c:80:93:28:6c:0c:1e:1c:4d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: May 12 05:00:45 2025 GMT
Not After : May 13 05:00:45 2025 GMT
Subject: CN=d190658eb045f88c298db290ef70f445756fdfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:90:22:7f:85:11:20:a6:c7:29:e8:50:a4:
25:f5:5f:d0:f5:cc:01:51:8e:4b:ef:ea:fc:08:15:
01:be:f6:f1:69:52:3d:e4:f4:e5:80:25:e3:51:19:
8f:97:21:f6:d9:5f:34:bb:44:c8:16:86:3e:83:11:
6c:93:74:f4:fe:aa:b1:4f:51:c6:cf:89:0a:22:0b:
cc:cf:1c:e0:3e:6e:de:5f:c3:d5:77:dd:ba:b6:39:
6e:9f:ce:48:be:07:98:05:ec:1e:37:72:38:6e:a0:
56:f6:6e:50:55:2b:cd:e6:ae:b9:af:d4:23:ff:0d:
23:61:7d:f3:fe:86:1b:2d:07:8b:75:05:4e:bf:8b:
5e:5b:9d:6e:c6:97:7d:cb:72:26:c3:d6:3f:90:27:
97:23:a2:ce:9a:3e:fe:cc:ab:df:fb:bb:59:9b:90:
f4:be:d9:96:49:69:57:6e:f0:24:7f:b2:97:7d:e3:
86:fa:c3:7b:e2:b1:df:70:5f:fc:1e:d3:6c:57:cf:
53:e1:3d:14:9c:3f:c5:6d:f8:d8:67:93:a1:17:28:
3e:21:58:e3:60:a0:6f:2d:64:4e:cc:8b:02:2f:ec:
82:40:b4:e9:38:90:55:c7:d9:c3:c9:d3:54:82:42:
3a:05:bc:d8:55:1b:d4:55:50:b3:0b:d4:71:4c:f5:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:65:8E:B0:45:F8:8C:29:8D:B2:90:EF:70:F4:45:75:6F:DF:D8
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:a9:47:66:6c:1f:e9:c5:2e:b5:2a:e8:64:fa:2c:c0:f5:
e4:87:75:65:af:e9:c4:37:47:f7:b2:8a:e1:6d:e9:3d:1b:16:
6a:32:ec:ab:e3:fc:b1:2f:e7:9b:29:47:52:63:ec:2a:cf:65:
c2:9b:e2:bd:bc:10:84:b9:81:36:9a:f7:60:76:0f:73:b4:96:
21:a3:e8:dc:a2:e8:ff:0b:74:07:b5:77:78:fe:e6:c6:5f:8a:
3c:b7:be:a7:29:e7:c1:7a:84:50:ae:ce:35:2c:45:61:63:58:
88:94:d8:29:29:c8:6f:d8:c5:89:88:65:8d:48:33:eb:de:6d:
0e:33:75:8d:ac:15:ad:bd:0d:62:2b:35:46:f7:3e:26:db:48:
12:41:94:80:ef:6f:eb:fb:4e:86:51:22:96:8f:3f:93:4a:ce:
13:88:76:7c:9f:34:e9:68:32:42:c1:7b:bb:7d:b9:df:bd:fb:
ec:e0:34:e7:a8:91:e3:31:b5:63:1a:a2:2c:49:d1:c8:23:6d:
3a:c0:54:2b:e8:d1:9f:af:41:95:d8:6e:0e:48:1f:45:7e:fd:
66:bb:86:ee:31:45:72:dd:86:ad:f1:ec:be:85:61:54:fd:80:
22:ce:eb:4d:e6:5f:ec:db:1e:1e:be:cd:64:7b:3c:dc:f0:c5:
44:cb:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:12:02 2025 by rpki-client