Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: FzeBY+/6VOrB/Djq2MMOdoUAwNDoEZJeLISggInDB5o=
Subject key identifier: 99:7E:B9:E4:64:C4:15:E7:B1:38:37:8D:A4:67:2E:45:A2:D3:10:58
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0196B85A0C932AF6375E9BF5EE72C068F854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0482
Signing time: Sat 10 May 2025 04:00:31 +0000
Manifest this update: Sat 10 May 2025 04:00:31 +0000
Manifest next update: Sun 11 May 2025 04:00:31 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: BfO5imLLmjabuEW+gXbTUvnG+EZCmmUn1xKLX3wInFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:0c:93:2a:f6:37:5e:9b:f5:ee:72:c0:68:f8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: May 10 04:00:31 2025 GMT
Not After : May 11 04:00:31 2025 GMT
Subject: CN=997eb9e464c415e7b138378da4672e45a2d31058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:e1:5d:05:3b:e2:97:bb:33:03:84:bf:ce:
89:7d:a0:78:15:ec:7b:26:f2:6d:95:8c:e0:52:ac:
31:6f:bb:f6:67:09:87:0e:bf:05:df:66:bf:13:be:
d3:1c:59:79:52:e2:52:72:0f:eb:0a:2b:17:58:f2:
02:d9:4c:eb:4c:e4:c4:08:5f:cc:81:10:40:62:fe:
70:0f:69:ac:6f:67:4a:a2:e3:25:4e:db:ed:1f:b7:
b9:7e:26:9d:9f:8b:5b:6c:c3:e3:9f:33:bf:d1:9e:
2b:9f:8e:a8:c8:6f:90:c7:f5:f1:69:96:32:cc:b1:
78:f6:46:b9:bb:29:92:f5:dc:f0:df:64:e5:27:60:
42:99:6a:ae:7a:fe:73:ec:72:21:03:75:ee:58:5e:
e8:a7:13:a8:15:0f:0e:4b:01:1a:9e:c6:42:c6:c2:
2f:19:ae:49:eb:f2:2e:88:51:be:d1:cc:1d:5c:76:
30:96:af:ca:c5:84:bc:b5:3e:ba:0b:dd:96:09:8b:
bf:6d:8d:ce:dd:5f:95:6d:57:91:17:93:29:fe:b4:
c0:a3:7c:89:c0:c6:66:4c:38:a3:2c:07:ed:e4:ab:
ae:21:90:b5:d7:68:7e:c2:b8:da:3f:89:6b:9d:2e:
8c:aa:89:41:6e:c3:a5:1d:f4:3a:1f:5a:e8:45:57:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:B9:E4:64:C4:15:E7:B1:38:37:8D:A4:67:2E:45:A2:D3:10:58
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:55:64:1d:7f:5a:9e:dd:6a:5d:60:8b:85:0b:04:5c:75:6d:
49:4f:5e:75:16:8a:b3:39:f1:6e:14:fe:7f:43:17:38:88:bb:
83:47:5b:86:c7:b0:a9:af:78:40:ce:21:ca:ca:7c:ab:c4:bc:
82:de:b8:66:08:08:ad:de:91:7b:44:2a:9b:b5:55:9e:fb:a9:
a4:b2:33:49:ab:8c:34:c5:fc:69:ac:51:32:53:79:62:01:d1:
dc:20:97:43:8f:63:17:2c:d9:e2:36:3f:7b:b2:19:60:bd:b3:
cd:0f:51:c8:c2:d6:af:42:c3:92:cb:fc:c2:04:ae:00:ec:5a:
fe:85:8d:46:5f:6d:c8:bb:14:9b:17:51:e1:ed:e7:ee:46:1a:
35:a0:ac:2d:9a:20:37:86:60:a6:58:eb:65:d8:1a:5a:33:99:
11:f8:4d:46:a6:7a:2e:84:0e:40:c5:65:21:3b:59:44:8b:53:
38:fc:56:4e:b2:ea:4d:4e:95:b8:32:ee:b6:91:b3:00:6a:29:
56:8c:4e:8d:97:a7:0b:cb:43:3f:98:16:b4:28:28:41:aa:2e:
54:dd:f3:5f:45:12:e7:e0:7e:f6:aa:f1:6c:2d:5b:c3:45:58:
a9:51:ea:b5:10:d0:18:62:55:82:56:9a:3f:49:a9:00:1d:e4:
2d:a9:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:16:19 2025 by rpki-client