Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: s0UsAKVlExDvn4eHnXqnB3dnXBToNRcK6OO/TIX6fmI=
Subject key identifier: EA:13:C2:08:56:D2:58:04:BB:7B:5C:85:9F:10:4B:E1:51:A2:E0:DD
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 01969DF5B04FA09101C42A461B1F47357D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 13E7
Signing time: Mon 05 May 2025 01:00:46 +0000
Manifest this update: Mon 05 May 2025 01:00:46 +0000
Manifest next update: Tue 06 May 2025 01:00:46 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: iznQNRyIbpFsYOlFcMsRX6aeeCtFa0v2P0lqHssdvRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:b0:4f:a0:91:01:c4:2a:46:1b:1f:47:35:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: May 5 01:00:46 2025 GMT
Not After : May 6 01:00:46 2025 GMT
Subject: CN=ea13c20856d25804bb7b5c859f104be151a2e0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:5e:58:08:81:d1:24:3e:41:7e:9b:1c:7a:
97:9f:5b:35:be:c2:34:e4:5c:88:67:08:71:4e:85:
bc:e1:24:1d:d4:ba:fc:bb:b9:d9:5d:b5:a3:ef:22:
c8:9a:e7:cc:4d:1c:fd:92:03:ed:af:67:ce:5f:fa:
a0:99:4e:a5:6b:b6:e3:fb:44:78:54:02:c3:48:ce:
1f:72:6a:52:48:0b:61:ed:3a:bc:11:e0:67:0c:96:
3c:ef:0e:75:27:d5:26:b0:9b:42:55:19:0d:3a:85:
17:a5:45:e7:77:ee:9d:8c:e7:67:e9:32:3c:fd:c5:
39:5c:54:da:c6:58:59:15:75:cd:57:45:1e:5c:f3:
9f:ad:85:d4:45:dd:8a:5c:41:d2:d3:5f:58:b8:f4:
d7:15:35:94:d2:4f:bb:8d:0e:b4:0c:c1:d2:4f:f0:
53:78:06:8f:76:1d:02:b7:6a:00:31:97:8c:7a:21:
f6:43:06:c7:99:ca:42:cc:07:03:bc:79:96:a1:5d:
b6:d6:4f:cd:ae:9b:92:d3:18:a5:a6:eb:57:de:dd:
2b:d5:f3:1d:db:ee:b6:fe:32:7b:52:e6:06:15:93:
03:4e:fc:4c:39:9f:ec:17:dd:a7:e0:e1:19:cf:93:
2a:4c:a9:b2:86:cc:04:4a:16:45:38:93:97:bc:5a:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:C2:08:56:D2:58:04:BB:7B:5C:85:9F:10:4B:E1:51:A2:E0:DD
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ec:5f:2c:e2:91:1c:6f:79:c9:66:f1:ad:4e:38:20:64:c2:
6d:07:fd:e8:ec:e1:41:a1:3f:71:dd:50:8d:66:9d:75:ff:3d:
f1:50:03:2c:eb:88:2b:9d:1a:76:69:b9:de:7f:bd:7e:f5:bb:
3b:e7:a3:8f:0b:66:29:63:84:f6:17:e4:11:ab:07:37:55:f7:
93:fe:fa:92:e7:91:0b:11:e4:3d:a4:91:0b:13:cb:bc:6e:29:
f4:8d:40:13:4d:cd:18:39:f2:38:d2:df:ae:be:b5:cf:99:03:
7d:81:af:41:dd:92:9e:8f:48:50:e0:82:cc:16:7d:85:19:48:
4d:91:d5:79:a4:34:d1:d6:5e:b0:43:61:1d:72:db:19:52:d5:
74:35:91:b8:f0:b2:ad:d2:f4:3a:ee:f7:74:d2:2a:7f:b2:e6:
d8:e9:0f:b9:29:87:67:3c:92:12:65:bf:fb:85:f2:92:97:a0:
84:b6:95:65:24:b5:b8:cc:c9:91:99:bb:ed:20:51:94:75:d6:
ee:27:6c:55:f8:e4:08:d7:19:2d:ec:5a:23:f0:76:5b:27:eb:
d5:27:e7:3a:73:90:f7:7e:34:b7:c9:e3:84:43:63:73:56:cf:
5b:e3:b3:49:d1:6b:bf:22:57:c8:11:16:1f:be:f0:0b:75:d2:
c5:48:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:15:44 2025 by rpki-client