Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: QxUts+hcDwDUYQINx1EzhloFusj4Lk9T6brFCpFEnBg=
Subject key identifier: 14:F8:BA:2C:B7:B3:92:3F:2E:8D:6D:D1:9B:F1:BC:63:02:B2:95:9C
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 0196BE255A13BE7E065412A4DDB86693D34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 07:00:40 +0000
Manifest this update: Sun 11 May 2025 07:00:40 +0000
Manifest next update: Mon 12 May 2025 07:00:40 +0000
Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: C6zgoB93L7FRxfoQDjxvFypTNMa/B17ZFtZyiBH2A18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:5a:13:be:7e:06:54:12:a4:dd:b8:66:93:d3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: May 11 07:00:40 2025 GMT
Not After : May 12 07:00:40 2025 GMT
Subject: CN=14f8ba2cb7b3923f2e8d6dd19bf1bc6302b2959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:3d:97:8e:45:f4:f2:41:02:7c:db:f1:27:
8d:7f:55:52:d1:f7:b1:00:45:6a:28:e1:fa:6f:cb:
fa:5b:a6:43:82:99:86:fc:43:74:ae:8f:bc:c6:d5:
24:60:8b:36:e8:bc:a6:11:bb:fe:c1:89:4e:c6:34:
4d:38:61:e0:62:1a:75:83:2f:71:d5:8f:9b:70:01:
69:8a:6b:d4:96:01:93:9f:75:c5:78:85:df:03:54:
53:29:be:a0:eb:c2:25:29:70:d2:50:56:d2:0d:6f:
f2:b1:f9:ca:16:17:be:86:76:91:b2:fe:ad:30:f4:
a6:f9:d0:2a:34:f5:06:b0:8a:03:31:7b:db:f1:1c:
a7:ce:30:85:23:65:5a:55:95:1b:63:fb:e1:05:50:
7b:8a:20:af:be:9c:50:68:3f:4b:bc:11:8e:8f:3e:
59:e7:ec:f1:8f:22:54:6a:88:25:57:b9:28:a4:26:
7b:95:62:3c:59:56:87:10:4f:fe:e9:27:74:b4:3e:
c6:24:0d:c3:5f:2a:ff:b7:40:d0:4b:14:a6:ed:26:
d4:05:a5:57:64:5f:a5:49:98:11:db:4d:a2:16:53:
6f:cf:15:9f:5e:c8:1a:30:1e:a0:94:e1:41:ce:e4:
bb:34:f1:59:5c:8a:2f:f8:90:4d:6f:45:b7:f2:44:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:BA:2C:B7:B3:92:3F:2E:8D:6D:D1:9B:F1:BC:63:02:B2:95:9C
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:85:df:f2:20:0b:2e:4a:30:ab:91:af:85:c0:b6:49:b3:7e:
6c:d7:3b:71:d5:12:bc:3a:28:01:02:06:3f:c6:5d:bd:af:67:
ca:59:da:0c:82:7e:4f:9d:e6:db:c4:ad:46:55:69:89:24:44:
b1:b6:cb:24:96:c7:f1:ea:47:b6:2d:af:98:93:5f:56:66:e7:
e1:be:71:0e:4a:96:44:f7:a1:b1:d2:ba:d3:05:75:7d:e3:69:
b7:19:5f:14:9e:99:f5:67:8b:56:53:bf:5c:6f:65:29:75:51:
d6:ae:a6:4f:ab:dd:93:46:1f:2a:28:c3:48:02:97:41:55:4d:
cb:ae:52:a6:24:b7:cd:c6:e9:cc:8e:a7:73:19:61:46:5c:8b:
1d:8e:0f:c7:a4:96:00:9f:70:30:13:95:b3:26:a0:91:98:47:
e9:ee:8e:2f:68:15:95:fb:91:35:25:fa:2c:2d:27:41:4a:49:
46:b5:d0:c2:a9:bb:5b:07:24:e6:50:ca:1d:ca:a6:a2:3f:16:
c2:9a:87:7e:52:31:61:44:a1:99:67:a8:5c:12:29:36:bf:5c:
9a:1a:db:12:9f:e7:25:dd:66:99:a9:a8:e2:cf:21:82:e6:56:
17:89:08:e2:35:b8:39:f9:fe:bd:04:07:10:d6:5c:32:41:6d:
b0:10:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:49:57 2025 by rpki-client