Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: PLDXBJx3mplKcQUXPgDaKvSWvZI52LlHkhfoNcwslYw=
Subject key identifier: F7:70:EA:C0:06:E4:D5:DE:CB:AB:B5:AB:7A:96:F9:56:01:6D:98:03
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 0196BB246286EFEDC85B257996C1A0A538ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 17:00:45 +0000
Manifest this update: Sat 10 May 2025 17:00:45 +0000
Manifest next update: Sun 11 May 2025 17:00:45 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: t3lx9O0gklvX3tt704cJIDjwfjwVkiCn0P3IhGRbEF8=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:62:86:ef:ed:c8:5b:25:79:96:c1:a0:a5:38:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: May 10 17:00:45 2025 GMT
Not After : May 11 17:00:45 2025 GMT
Subject: CN=f770eac006e4d5decbabb5ab7a96f956016d9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:31:32:18:36:93:a1:c2:52:38:b4:e9:86:
7c:0e:7f:9f:e6:a4:30:21:a0:df:c4:da:71:fa:9f:
6f:4d:c5:fe:a5:41:c9:97:ce:2e:05:7e:17:2d:71:
7b:56:e9:2b:9a:81:9b:8c:f6:c5:1c:ed:63:ec:c8:
03:c6:b9:61:d9:18:1d:ae:83:f4:e7:dc:78:2a:ba:
3e:17:2b:fa:35:44:dc:3d:ba:67:a8:70:97:6e:8c:
c6:d9:8b:4d:b4:f6:da:47:a6:ff:c0:97:c0:4c:11:
0e:79:93:00:71:88:a4:45:57:10:f5:73:22:bf:05:
54:cd:cc:1e:8a:ce:e8:39:39:0d:c5:16:39:f1:a3:
3f:7f:23:1d:f2:7b:41:e8:52:5f:e7:26:62:d5:2e:
fe:4b:6b:71:10:6d:7f:4a:58:13:12:92:c2:c2:89:
e2:39:4d:36:32:90:3f:2d:90:2e:81:91:ca:16:21:
d3:b5:bb:ea:8b:4f:a7:c1:70:72:3b:cd:1d:01:cb:
0f:8c:f1:fb:3f:cf:17:ae:6d:c7:e9:55:b5:46:56:
9c:fc:2f:f2:f3:ac:5b:fe:a9:2a:42:8e:2f:8d:22:
af:c1:78:46:27:d7:14:a9:fb:f1:40:91:e1:45:ad:
00:65:11:7f:23:87:61:ce:d8:12:54:5f:91:1b:b9:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:EA:C0:06:E4:D5:DE:CB:AB:B5:AB:7A:96:F9:56:01:6D:98:03
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ef:35:be:48:7d:15:71:ed:b1:03:18:20:f8:07:ce:45:77:
c4:2b:fd:b1:b3:eb:1b:30:04:41:14:1d:a3:56:50:b9:3e:a4:
3b:e4:d0:31:a1:a9:9c:83:78:9a:b5:29:d2:66:b4:a0:b5:74:
45:7e:19:86:14:e1:0a:d5:39:d6:b4:ab:49:54:e2:1f:1b:64:
f8:e0:dd:8c:66:07:b4:37:49:d3:b5:e0:89:7a:0a:01:2a:14:
4c:e3:54:f1:7c:39:86:e8:94:23:78:db:ad:f8:f6:70:e4:83:
e2:77:98:15:54:b4:72:b9:52:3b:48:92:2a:d5:38:5e:11:44:
df:54:b8:5c:9e:d2:1c:00:f4:19:23:d4:20:9b:0c:17:f2:1b:
f9:4c:d9:b0:ad:64:26:29:ae:83:92:14:49:71:c1:a4:df:8d:
d9:1a:c8:ec:45:7b:ef:9a:ec:43:dd:67:38:a4:2d:ce:ad:51:
17:42:53:0e:c7:a3:df:82:93:92:06:47:04:cc:23:ae:a6:71:
cf:f0:25:b9:9a:c7:04:4b:3f:a0:50:55:6e:51:35:d8:b8:7d:
2a:15:97:7d:e5:9d:ff:ad:76:2e:4c:79:4b:16:5a:29:bf:75:
d6:2b:a7:51:31:b8:d3:cb:a6:49:9a:30:5e:cd:fc:1e:68:08:
2b:fc:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:25:07 2025 by rpki-client