Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File: Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier: i+oZoepoqwGpsZivJBD8z/IY/2I4JXHnOkInLYoKo28=
Subject key identifier: 65:A2:84:10:6C:4F:06:4A:21:43:51:4C:D2:8E:01:37:5F:3D:98:14
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer: /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial: 0196B0A1117B7479E1CDC136BC10771B2B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 16:01:07 +0000
Manifest this update: Thu 08 May 2025 16:01:07 +0000
Manifest next update: Fri 09 May 2025 16:01:07 +0000
Files and hashes: 1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: X2JM19mv54DFTsuWvoOoZWk7ZNyxw37dbeE22CulpBI=)
2: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (hash: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a1:11:7b:74:79:e1:cd:c1:36:bc:10:77:1b:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Validity
Not Before: May 8 16:01:07 2025 GMT
Not After : May 9 16:01:07 2025 GMT
Subject: CN=65a284106c4f064a2143514cd28e01375f3d9814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:81:76:c8:55:e3:da:13:94:86:af:94:90:
56:37:31:de:da:2e:46:c4:85:b3:80:51:fb:6e:79:
78:91:ca:74:50:c9:f7:89:a1:69:48:73:21:b6:c9:
d7:29:b2:5c:a5:b0:71:13:09:93:ae:46:cd:4f:8e:
6e:cb:1f:ac:fd:e1:4d:78:84:e8:60:19:de:d0:a3:
d7:18:8e:a8:5e:78:e2:a9:f3:35:2a:b3:8f:7f:00:
0b:57:66:35:1b:6c:02:2a:fc:07:92:b6:a8:f8:3a:
7e:be:9c:cb:44:47:22:ea:55:9e:5f:41:35:e0:da:
e9:61:68:4f:6c:e3:37:b4:58:c6:b4:24:1c:48:1d:
91:4a:28:69:b6:58:a0:85:e2:a7:2a:a1:12:24:fa:
41:f5:0a:79:5a:0b:88:3a:eb:97:80:98:4e:93:20:
99:23:97:df:76:3d:73:49:b5:60:dd:1b:e8:64:94:
e7:f5:38:3f:19:93:60:c6:ed:c3:26:00:b5:af:7c:
98:b3:3b:56:79:33:96:20:50:ca:27:3b:2f:b3:1c:
6b:26:0e:2e:44:01:52:b1:8a:51:48:c8:3c:f1:e5:
f6:fb:e5:d5:6c:ea:29:c2:3c:5a:64:33:83:2f:52:
b5:c4:c4:5a:8f:64:8c:6d:3c:a3:84:47:c7:72:54:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:84:10:6C:4F:06:4A:21:43:51:4C:D2:8E:01:37:5F:3D:98:14
X509v3 Authority Key Identifier:
keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:46:b0:78:b7:0f:9f:e1:18:f6:57:c3:c3:52:38:2f:3f:03:
0a:6b:3e:97:a8:58:6d:50:ad:ac:43:d0:0f:90:a8:84:4a:c0:
c4:2d:39:0c:ca:b6:5f:cb:91:7c:74:c5:00:87:89:b1:ad:9f:
14:e6:c6:74:05:a7:9d:ff:68:e4:0c:e0:62:67:9c:1d:a6:dc:
cf:6f:31:8f:02:c0:79:87:ba:e2:e4:41:c1:45:62:b9:8d:fe:
84:d5:90:49:27:2f:cb:13:1d:f0:ba:ad:8b:5e:69:05:91:37:
48:e8:a6:76:04:a8:ea:bb:1f:fe:73:79:d7:79:17:8d:1d:75:
f7:96:1b:ab:5d:e5:26:df:7e:db:b8:d9:9c:60:db:ff:19:d5:
5d:19:24:f8:0b:cd:42:75:78:56:f7:c6:19:23:f6:da:18:d9:
9d:ff:b3:b6:b4:76:d5:af:db:b9:c7:a6:66:30:59:03:28:4c:
83:b7:a9:cd:1a:2d:e3:17:51:29:cb:fd:5f:b3:ff:1b:b3:d8:
5e:48:ca:8a:5b:82:74:49:c4:b8:3b:6f:62:f5:4a:dd:8c:36:
88:5d:dc:e4:6a:88:b2:40:72:a5:48:99:96:aa:ac:d2:8d:69:
ba:7e:2a:e6:81:93:d0:9e:4d:26:0e:b1:4a:05:19:63:fc:6e:
8a:85:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:06:39 2025 by rpki-client