Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: HRjOvao6iuhV/qfcJbf+iGpZIuBRd6hgwvfBuzBZOIw=
Subject key identifier: 8A:4C:AA:AA:66:89:E8:60:B4:86:9D:EE:8D:8F:ED:9E:B6:FB:40:94
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 01969F7649303297115B5F026D5895DF1352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 08:00:51 +0000
Manifest this update: Mon 05 May 2025 08:00:51 +0000
Manifest next update: Tue 06 May 2025 08:00:51 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: bDID6s2j0tOpGPVKtZKS4xtr7GywvJ66OtmfqruEBuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:49:30:32:97:11:5b:5f:02:6d:58:95:df:13:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: May 5 08:00:51 2025 GMT
Not After : May 6 08:00:51 2025 GMT
Subject: CN=8a4caaaa6689e860b4869dee8d8fed9eb6fb4094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:32:e1:59:1c:20:28:95:18:7f:a1:c2:0d:
55:bb:e3:00:b5:62:0b:16:81:90:9f:f2:98:7f:5b:
36:15:be:ca:00:bf:15:d2:67:57:d5:02:12:34:4c:
f2:8d:b8:5a:1e:67:5b:ae:a8:52:e1:e1:ba:85:db:
78:50:3f:c7:6e:2e:4c:d3:b4:6b:0d:00:34:1c:54:
da:df:fa:ec:be:88:51:40:2f:d4:30:17:46:af:62:
f5:35:99:8b:90:b8:c7:36:79:de:d4:43:96:3e:ab:
5a:d5:65:2c:e7:90:05:a8:ff:fd:49:f7:df:96:69:
b1:21:cf:a2:3a:42:48:be:5b:00:38:18:f4:fe:4c:
96:ad:9f:5c:63:e0:c2:f4:73:75:a3:11:d4:12:83:
71:ab:32:df:d3:f5:d8:a7:a4:38:02:2b:53:a2:c4:
42:48:05:9e:cc:1d:2a:73:90:a1:c8:28:cd:0b:d9:
8f:0e:48:c3:22:56:84:21:68:24:a3:32:26:75:77:
ce:ea:65:4f:5c:da:a3:69:6d:99:c5:91:18:c0:86:
7c:29:46:c5:f8:74:b2:e6:13:95:2d:af:b4:7c:48:
6f:7a:b0:22:76:8b:db:dd:be:fe:8d:2f:4c:61:60:
39:bd:35:6b:de:25:4b:0c:b6:20:10:b9:60:14:a6:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:AA:AA:66:89:E8:60:B4:86:9D:EE:8D:8F:ED:9E:B6:FB:40:94
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:87:ad:de:39:38:fd:83:35:17:45:82:06:54:ae:25:56:
a0:38:73:6f:6a:14:14:cb:c9:7b:83:13:1f:41:53:18:71:fd:
ad:19:a3:a7:09:be:17:ad:8a:b8:ed:f5:e5:0d:19:0d:ef:d9:
86:67:4d:8f:9b:9c:ad:e2:94:dd:10:87:54:4f:b0:a9:86:5e:
6d:26:1e:cc:55:72:29:2c:0b:e9:d9:88:46:a3:fc:ed:de:81:
fa:21:87:5b:b0:bf:47:e4:8a:9c:95:81:63:1c:b7:02:5e:a7:
52:a2:29:5a:f0:1d:fe:57:8a:eb:e3:27:c7:e9:9e:e9:9c:48:
bf:c3:82:af:52:64:f8:a2:26:6e:09:15:a1:21:2a:ac:9e:08:
6f:87:d3:c3:4a:d5:e4:9d:32:3f:1b:1f:c9:d0:1b:4e:ae:bc:
66:85:05:33:e3:32:47:1f:81:70:05:15:4f:73:8b:0d:99:f4:
9a:b3:83:dc:d0:08:d6:6e:16:0a:1e:70:12:34:bc:7a:db:bf:
60:6f:d2:8f:82:5a:74:c2:a9:59:03:c0:e4:b5:af:c3:b4:da:
be:c6:13:64:8e:62:d5:02:ba:24:d3:3d:ed:8d:e5:da:98:23:
30:d0:7d:0c:04:dc:85:f9:11:23:ef:bf:f3:30:28:69:a0:21:
5a:c4:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:17 2025 by rpki-client