Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: 4+jGGO2Mg2gSSbKkXHjF56khuIY0xR5mGiKyyESIB+Y=
Subject key identifier: 92:67:EF:23:FA:D1:6A:95:3C:3A:14:90:9A:E7:AF:44:03:86:A7:3A
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 0196B7B4F27EE0F784E2268CD3C3B86E2ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 06AF
Signing time: Sat 10 May 2025 01:00:11 +0000
Manifest this update: Sat 10 May 2025 01:00:11 +0000
Manifest next update: Sun 11 May 2025 01:00:11 +0000
Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=)
2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=)
3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: BDNb2EPZT0U2KTlvQdUElVZDJjvBvGooqGOebE0pFaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:f2:7e:e0:f7:84:e2:26:8c:d3:c3:b8:6e:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: May 10 01:00:11 2025 GMT
Not After : May 11 01:00:11 2025 GMT
Subject: CN=9267ef23fad16a953c3a14909ae7af440386a73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:b7:76:38:b3:d1:6a:99:86:f4:a5:e1:9c:
71:42:3e:5c:ae:99:06:f9:06:7b:b2:4e:d2:e2:ed:
de:12:4e:dc:9e:91:3f:cb:2d:da:d0:86:63:b3:35:
e3:c3:b5:fc:3c:3b:cf:ca:33:bf:a3:3f:3b:7b:00:
d7:c7:69:bd:d2:c3:0f:80:73:ab:10:b9:5f:f2:10:
a2:05:69:f5:f5:5f:c6:ef:0c:a9:96:13:fd:8c:bd:
ad:74:7e:43:e2:ce:66:16:d4:45:14:a7:3d:ff:df:
54:6c:79:00:c6:80:b4:7f:13:cc:bc:a1:fc:55:65:
89:16:b5:d6:3d:9a:39:78:f6:49:17:d9:10:98:5d:
7c:a4:ad:d6:2b:9a:d5:a9:b4:f0:31:27:45:36:b4:
4d:b4:8f:e8:a7:c0:31:a2:ec:f0:d3:6e:53:68:2d:
c3:08:ee:b1:ab:2b:52:a4:a8:3d:44:23:16:7a:96:
b2:82:f0:c4:12:cd:df:a5:3d:cb:42:81:14:ea:95:
13:d3:57:3b:dd:83:3d:6c:90:cd:6e:97:01:e7:7e:
a9:c0:da:b4:cf:bf:b0:c6:71:ee:94:78:27:6e:c7:
e2:a8:6c:9f:c8:1f:a8:7c:68:89:0b:8f:06:67:77:
4f:8c:de:63:0f:0b:fa:39:d1:af:73:d9:34:93:b6:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:67:EF:23:FA:D1:6A:95:3C:3A:14:90:9A:E7:AF:44:03:86:A7:3A
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:e9:28:2c:51:ae:d0:7e:cb:24:44:61:9c:c9:b2:73:96:
6d:4f:37:30:3a:08:71:a5:0e:a4:4d:1f:27:7d:05:ba:c2:fc:
c7:99:d0:6d:3b:03:68:26:31:d8:a6:99:a0:a6:25:c6:0c:5d:
15:16:9d:4a:b8:4e:11:66:79:9f:37:53:0e:70:ee:aa:d7:fb:
0c:a3:a9:17:96:b4:70:e4:76:4d:5d:fb:02:e5:8a:15:06:61:
71:31:17:bf:b1:2d:0f:db:5f:67:87:a4:b6:d5:2d:d5:aa:f5:
bf:66:e5:e4:5e:53:3d:76:a1:d7:2d:a4:ff:a8:3a:2c:da:d2:
0b:f0:e8:53:76:ec:1a:c0:e6:18:1c:52:b3:cc:b9:44:78:9e:
48:81:9d:34:a3:67:dd:85:f1:75:a9:0e:14:ae:6a:f2:2f:e5:
6a:bf:cf:93:b8:1b:96:0d:8b:51:f2:bc:88:b8:a4:ee:81:92:
08:01:b0:33:39:3b:9a:2d:ed:6e:28:67:ba:0b:c0:d8:b0:e7:
2a:24:e2:7c:ab:ea:49:db:4c:d6:ca:7f:56:65:06:fd:05:b4:
3e:4f:42:a0:07:be:1b:bc:63:67:9e:a3:d5:f3:07:17:6c:60:
c9:c1:6d:70:0e:6e:6d:85:b3:5a:10:e0:e9:6d:fc:cd:f2:fb:
0a:a6:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:59:34 2025 by rpki-client