Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: d4tUD+lWevyFH77fpTTKSJauOU+nGAqlImzfCQ2XBHE=
Subject key identifier: 55:34:3F:90:90:11:35:5E:55:F2:FE:D2:C4:10:CC:DE:56:4A:25:98
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 0196AF20045E0ED47912F71E8FD80A0A5503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 0F24
Signing time: Thu 08 May 2025 09:00:33 +0000
Manifest this update: Thu 08 May 2025 09:00:33 +0000
Manifest next update: Fri 09 May 2025 09:00:33 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: 9+A82KjjAL10J+IfT2JuWBsm8x+9L10uoF+GA0avvgw=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:04:5e:0e:d4:79:12:f7:1e:8f:d8:0a:0a:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: May 8 09:00:33 2025 GMT
Not After : May 9 09:00:33 2025 GMT
Subject: CN=55343f909011355e55f2fed2c410ccde564a2598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:bf:27:82:4b:c7:01:d1:7e:8c:20:28:d2:
1e:04:af:c0:c5:29:65:ab:67:54:ec:25:af:28:d2:
44:e1:27:f7:eb:c9:03:cf:57:50:bc:1d:3c:29:ee:
3a:d3:a0:ec:81:77:ae:4f:de:7a:22:14:53:c9:01:
6e:4f:ff:79:da:04:ee:72:7e:3c:50:cc:60:28:a4:
fe:60:f3:b8:30:09:5e:f3:af:59:54:5f:a6:c6:e2:
f9:e8:8b:82:2e:8f:c4:7f:38:33:ca:53:55:02:0e:
66:88:53:2c:10:be:c1:0d:24:4f:31:30:48:eb:d9:
ab:5c:b7:7b:b4:09:c0:6d:26:f8:75:95:4d:74:42:
e4:99:67:17:c4:80:95:ae:3b:55:3c:05:09:e2:aa:
94:0b:e6:59:68:6e:82:00:59:7e:6e:ac:11:db:9c:
a1:3f:c3:90:14:04:b6:80:7a:dc:35:38:24:a8:33:
f4:39:d0:b7:33:9f:00:5d:92:61:59:1e:cb:7d:92:
40:72:03:87:76:27:95:c7:29:77:11:5a:cb:d4:40:
33:d4:33:dc:c6:96:7c:82:1c:6b:8f:36:8e:c7:da:
2b:9e:7f:8b:cb:d8:d2:60:60:0c:da:4e:b7:44:54:
b7:43:84:8a:90:69:4c:50:fb:c8:c7:36:22:5b:0c:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:34:3F:90:90:11:35:5E:55:F2:FE:D2:C4:10:CC:DE:56:4A:25:98
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:c2:59:89:1e:7f:78:22:fd:94:ff:91:71:3b:c0:e1:d4:
65:ee:19:be:da:f5:cb:89:a0:30:05:9a:85:2a:df:78:0b:76:
fb:30:d3:ec:e9:10:68:ec:74:c1:61:2e:d7:25:a7:93:fb:ad:
8b:cc:ac:e3:69:18:7a:ec:3a:a2:5e:0b:45:fd:a6:6c:98:d4:
fe:34:ca:4a:98:e1:fb:60:70:1d:ce:46:0d:c3:a8:25:12:d9:
70:2b:b6:f7:8f:05:62:42:13:3c:f7:ad:92:0c:1c:87:13:e8:
90:b3:32:14:9d:40:ff:21:d3:16:e7:bf:f5:a9:2d:f8:26:e6:
7b:2d:79:a5:08:11:38:e2:62:fc:0e:09:42:50:23:56:33:94:
2d:4b:14:a4:14:88:a2:b2:72:eb:82:35:0d:0e:36:8a:fd:d7:
9c:04:99:dc:dc:72:ea:6d:31:ae:b6:23:9f:63:8b:bf:1a:25:
a6:22:7c:12:c8:dd:90:25:50:2c:52:ab:95:48:c9:d8:35:9c:
29:03:f2:b7:6d:47:01:ea:f2:75:6e:7c:d0:87:b0:de:c8:23:
4d:26:d9:5a:d7:7a:1a:49:08:a4:8d:a7:22:03:a2:09:17:d0:
c9:26:8a:e6:2f:53:f3:4f:0e:d7:9d:70:35:a5:21:70:0c:26:
4e:dc:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:58:49 2025 by rpki-client