Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: eDFziXLsZtC+ASu69McZ2zCmpqbkheQqQi75V7XEQxc=
Subject key identifier: 8C:0A:4D:CB:3E:68:11:4A:43:CF:08:FA:87:11:6F:75:37:75:46:30
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 0196BF6F785DC9BD3B3A16868FEEE2D4E1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 13:01:15 +0000
Manifest this update: Sun 11 May 2025 13:01:15 +0000
Manifest next update: Mon 12 May 2025 13:01:15 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: HtPn25ZaNqgMYb7h2VKZy/eUg9GwDUzrJBnO0cjhs8s=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:78:5d:c9:bd:3b:3a:16:86:8f:ee:e2:d4:e1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: May 11 13:01:15 2025 GMT
Not After : May 12 13:01:15 2025 GMT
Subject: CN=8c0a4dcb3e68114a43cf08fa87116f7537754630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:48:c5:67:a0:5c:36:26:d2:a4:bd:6a:a7:
84:1d:7e:9c:ba:03:13:b2:c1:0e:59:7a:86:84:25:
b8:ec:ee:5b:69:84:b5:49:a2:8c:31:52:a6:66:59:
a4:8c:9f:82:f0:36:e9:03:53:ef:f3:3a:24:a8:1b:
c9:ad:76:6a:a1:23:5a:f1:05:d8:35:eb:eb:b1:39:
b4:f3:e3:f7:9c:f0:fe:d6:95:ef:02:b6:e5:79:aa:
15:98:92:7b:50:76:77:93:84:6b:b2:86:a0:b7:ee:
7c:ed:30:11:c7:2d:42:5d:d1:b4:8d:d7:f2:e1:64:
05:66:a7:dc:1b:9b:44:45:cd:48:ea:f8:37:b6:a8:
42:8c:1b:aa:5a:46:e4:ca:bc:9d:4d:0a:e5:c3:88:
41:97:d8:3a:36:51:7a:47:93:5b:b6:eb:f3:21:68:
6f:c2:8d:40:5d:56:f6:33:b8:f3:e4:24:ab:d9:41:
8c:92:a2:24:aa:ee:88:42:89:b9:67:8f:01:04:99:
14:d0:34:e2:ee:9d:cf:6b:49:2b:13:b0:fa:50:d0:
a3:12:69:4d:a4:f6:83:7f:db:47:e0:a8:47:57:c3:
8a:bc:83:fa:44:9f:5d:00:44:52:b8:49:8b:d3:19:
91:1b:86:75:bb:fc:91:ff:59:00:4c:ed:01:51:d2:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:4D:CB:3E:68:11:4A:43:CF:08:FA:87:11:6F:75:37:75:46:30
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bd:f7:ad:6d:ce:5a:9a:ab:e4:8c:31:90:8d:6a:b0:e2:98:
52:36:98:29:f8:07:98:cc:dc:84:ef:90:fd:42:db:d3:ad:10:
3f:d5:0d:96:1b:ca:2c:83:fc:92:e2:2b:b0:da:47:16:bb:25:
31:09:11:19:c3:38:eb:3d:e9:d2:d2:58:95:04:cf:ad:36:ed:
da:78:de:77:6a:2f:9e:1a:4c:4b:a7:1f:a9:d4:5f:9a:58:7b:
3b:e0:6c:40:5a:81:bf:04:b7:6f:c3:cf:fa:0a:c3:b2:2d:bc:
43:8d:96:68:a8:2d:7f:36:a9:04:78:5b:24:5d:20:90:99:18:
1c:68:61:42:00:0d:eb:29:0e:5f:d8:ec:09:ed:54:af:1b:5e:
a9:71:75:e0:1e:f9:e4:e2:f2:76:0a:cd:06:9c:80:9f:ef:a1:
95:52:3d:c3:17:70:6e:b3:8a:7e:4e:88:60:b7:fc:ab:50:9f:
02:2d:6e:76:a0:fb:ec:4d:b4:60:91:a6:2e:ed:24:b9:12:87:
45:39:14:45:4a:64:e5:e1:44:29:d1:8c:8b:8b:2c:d8:bc:34:
96:b3:6a:43:8c:ce:4d:98:0d:7f:d4:35:d5:b5:1b:d5:f8:f8:
ec:25:0c:cd:9b:b6:36:c5:84:4d:ba:4c:2e:5b:7e:14:ff:90:
c9:3c:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:04:07 2025 by rpki-client