Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier: m01UQeYnZr7RdZTbpbGIjhUosgkuJzw0s1mI4oavOtI=
Subject key identifier: A8:3D:A4:80:82:43:F9:FA:63:9F:BA:BD:CA:4F:48:B5:27:80:93:EC
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 0196BD8052647D8B219313658C77EA6E5F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 04:00:25 +0000
Manifest this update: Sun 11 May 2025 04:00:25 +0000
Manifest next update: Mon 12 May 2025 04:00:25 +0000
Files and hashes: 1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: IXVrfzb141QQuwFarx+T+Ry3R+LWXdLPIR4Q5oTW2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:52:64:7d:8b:21:93:13:65:8c:77:ea:6e:5f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: May 11 04:00:25 2025 GMT
Not After : May 12 04:00:25 2025 GMT
Subject: CN=a83da4808243f9fa639fbabdca4f48b5278093ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:b3:b6:c6:89:87:2e:c9:44:e0:9e:1a:ae:
7f:09:2a:3d:c7:63:c0:b2:22:ca:5f:f2:2d:07:63:
4a:db:17:d7:46:19:85:97:9a:63:41:ce:ba:cc:75:
ea:a2:bb:e9:55:af:af:f1:04:50:5a:d6:d7:9f:b3:
50:ee:4b:db:71:dd:fc:36:e2:d4:8a:9c:b5:1d:9c:
b2:4b:95:a0:9b:e2:71:3c:17:58:f5:75:73:8a:e5:
3a:d4:5d:24:4b:22:d9:ed:c2:0e:95:80:97:d0:fd:
88:6a:97:62:bc:47:fb:0c:6f:fb:ba:7d:79:42:ac:
ff:c0:21:b0:56:94:36:a4:32:f3:ab:43:cf:cf:f6:
e3:fe:51:fd:e8:93:6b:ce:13:33:66:c7:75:28:7a:
7b:53:22:bb:cc:79:06:74:b6:6b:64:f5:e8:12:5c:
0f:94:33:59:6c:d0:cf:cc:3a:61:71:ab:e7:4d:8c:
29:5a:75:f6:fe:85:28:aa:24:bb:54:91:37:30:d0:
3e:98:ab:8c:48:31:45:c2:08:bc:9f:18:3a:40:ec:
d1:f0:c8:8f:36:6d:c4:ff:f6:97:6a:47:c5:3e:1e:
40:23:c5:58:1d:dc:84:6a:5a:6f:4e:d0:f6:51:13:
79:77:9f:cd:f2:02:f9:18:db:27:35:60:3c:f7:6b:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3D:A4:80:82:43:F9:FA:63:9F:BA:BD:CA:4F:48:B5:27:80:93:EC
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:3d:7b:58:fb:bc:79:fb:1c:91:bd:38:06:6e:47:73:6c:
67:b1:76:7e:60:72:c4:e4:33:51:d1:b2:27:ad:3f:4a:1f:86:
71:e5:87:7b:19:e8:66:d9:74:da:e3:28:16:38:d4:47:87:9f:
cd:88:65:cd:a2:f9:b6:b4:60:05:9c:f3:ae:7c:35:e0:21:16:
36:b5:ac:70:bd:75:ec:ef:d3:39:8b:3c:01:54:ad:57:6b:13:
d3:f0:28:e3:e6:ad:23:82:26:96:d7:a9:7b:a1:18:cc:f8:fb:
71:ba:6a:7d:de:8f:d5:df:a2:73:58:c5:95:eb:96:de:74:99:
3b:c9:e3:21:74:d2:63:3d:2b:09:6e:53:5e:88:e7:ef:8e:73:
9e:a7:e0:6e:b9:09:4a:cc:f2:18:00:af:0e:a0:cc:83:dc:31:
26:60:ca:17:95:04:9c:9d:04:71:c5:e5:bc:f1:56:2a:09:9a:
6a:67:5c:af:ee:b9:a1:4f:18:37:6c:1b:a1:5f:e3:1e:87:8b:
af:94:a0:f0:f3:ef:ed:04:af:16:99:db:a2:4e:52:83:a1:c4:
45:0c:5f:d6:23:f7:eb:c2:b1:2d:93:d7:86:52:f9:04:aa:80:
fd:ab:e1:d7:70:12:77:25:75:a6:4c:32:71:f2:fe:4a:df:e2:
95:17:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:24:49 2025 by rpki-client