Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: +7vSJkYG6HMlGs6yFP/yfsQ92BnRGubWQsqRJiktDuQ=
Subject key identifier: 20:D0:99:4E:39:45:F2:AC:C6:DB:6E:E8:B5:8A:0E:1E:56:6D:28:CF
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 0196B59012ED2BDD33E8F7B1525011997C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 0424
Signing time: Fri 09 May 2025 15:00:40 +0000
Manifest this update: Fri 09 May 2025 15:00:40 +0000
Manifest next update: Sat 10 May 2025 15:00:40 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: 9B3FHGUPhKXsxd6AGAjFQYRhCtjxcmIgTo3hS89RDFA=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:90:12:ed:2b:dd:33:e8:f7:b1:52:50:11:99:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: May 9 15:00:40 2025 GMT
Not After : May 10 15:00:40 2025 GMT
Subject: CN=20d0994e3945f2acc6db6ee8b58a0e1e566d28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:b4:ea:61:49:c9:d7:e7:cc:cf:a8:6f:e7:
ae:be:8d:b9:48:5e:d9:e3:c9:26:98:f3:81:84:ef:
92:80:ed:8f:f4:5b:f6:94:df:d8:86:d9:3c:80:ee:
41:4f:65:ad:57:fb:74:77:54:57:bd:f6:be:28:22:
24:97:d9:91:bd:98:e5:1e:cf:63:9f:1c:b5:cb:4b:
9b:1d:8d:50:d1:5e:f8:4a:0c:51:03:17:de:ab:ef:
7b:a1:9b:47:3f:c0:d7:dc:7c:af:8d:39:c1:b8:76:
d6:31:e8:6c:0b:a6:58:16:7f:b0:0b:9e:3e:f4:3f:
cd:ed:b4:77:a9:91:a6:11:0e:04:0a:96:a6:e1:e7:
11:9d:6c:97:df:c7:72:b1:35:12:72:64:a0:7e:19:
aa:f2:62:96:db:f1:dc:62:bd:e3:fe:3b:d9:c5:bf:
cd:64:9f:ac:1a:68:57:7b:04:47:11:1e:70:d6:c2:
4f:b6:c7:07:94:c0:93:2f:ce:b0:27:ac:7f:ab:a4:
c7:9b:54:e7:63:10:00:1f:58:8a:5f:a9:51:f0:f7:
57:b3:53:6b:15:93:e6:a8:71:4f:e3:11:5b:3a:e7:
fe:b9:59:a6:e1:fd:09:ae:3b:67:e0:08:d6:5d:99:
71:ef:7c:2e:7d:94:d8:88:fe:23:e5:cd:c2:3e:ba:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:99:4E:39:45:F2:AC:C6:DB:6E:E8:B5:8A:0E:1E:56:6D:28:CF
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ff:ed:f6:9f:9e:5b:fa:77:47:56:f5:8e:5c:25:b7:94:9b:
12:34:b5:1a:14:9c:42:56:9a:96:28:ec:f9:a0:4b:57:b9:22:
0a:8c:a8:87:39:8c:f7:80:c1:de:9e:8e:24:9f:44:45:9a:02:
df:38:26:36:7b:06:d0:ee:c7:9b:50:cc:3f:d0:c4:66:ad:43:
a6:a7:f4:b9:0b:e8:c0:d2:41:8e:21:13:e0:82:ca:7e:dd:66:
af:dc:0a:bd:1f:52:39:e8:f2:d5:4d:30:5d:19:0d:f6:5e:43:
3e:ef:27:a3:71:21:02:ee:6b:5a:7b:df:39:45:a5:1a:e3:94:
28:e2:1e:58:ee:64:59:e6:fc:06:c0:99:47:ec:c9:86:e2:f8:
84:58:9f:22:db:aa:2e:9e:bb:f6:21:36:be:5d:11:c4:42:96:
05:81:60:08:96:c3:94:e6:16:32:0b:55:07:5c:d2:00:f2:52:
9c:27:6f:21:80:b6:0e:23:5a:b9:72:41:67:ba:82:4a:25:d7:
ce:4b:c9:9a:32:22:d2:6b:9d:97:af:e7:78:33:dc:30:1f:fc:
2f:a0:43:1a:78:83:d0:e7:7f:34:23:09:a2:b2:fd:c5:14:bb:
4b:92:79:1b:c7:bd:9f:2b:a4:20:56:39:89:9e:66:59:75:a1:
ef:9a:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:34:57 2025 by rpki-client