Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: 9ja7bpZaH+cTmrCqnqoIBYI4hnkT/OmNsXeiZnYlRlI=
Subject key identifier: CD:A2:47:1B:6C:5B:77:B7:43:2C:03:E7:55:6A:68:C6:D5:AB:29:2B
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 01969ED0FAE97380AA89E5F814C83CA1133B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 082E
Signing time: Mon 05 May 2025 05:00:17 +0000
Manifest this update: Mon 05 May 2025 05:00:17 +0000
Manifest next update: Tue 06 May 2025 05:00:17 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: cfS2HMY19WlgPcaC9EU2au9fRsbW7CcSbqF9tTYy2iM=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:fa:e9:73:80:aa:89:e5:f8:14:c8:3c:a1:13:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: May 5 05:00:17 2025 GMT
Not After : May 6 05:00:17 2025 GMT
Subject: CN=cda2471b6c5b77b7432c03e7556a68c6d5ab292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:3e:2d:8f:d4:49:7c:6e:59:4a:cd:c7:14:
f2:97:1e:69:ab:6f:53:73:54:71:f7:bd:9c:22:73:
7b:08:c0:d3:05:9d:49:e2:5c:e8:a3:98:0a:92:e9:
6c:7a:5c:f4:2b:b9:5e:c9:54:99:4b:c9:cc:b0:04:
b2:89:25:cd:e9:bd:7e:dd:1e:d3:c4:08:be:25:47:
8f:01:bf:20:75:45:64:48:c4:a2:d8:35:f6:f1:73:
86:88:e3:99:6b:dc:cb:bf:af:14:cf:76:0e:f9:9e:
ec:12:94:12:c6:fe:73:3a:ba:2d:6b:88:10:ac:01:
a9:44:bd:75:79:56:5f:db:1d:c4:27:dc:fe:4a:99:
24:9b:91:80:91:1b:00:2b:fc:9b:9e:9b:9b:79:92:
91:3c:49:3a:04:24:dc:55:09:4c:46:a9:5b:9f:bd:
f7:84:4c:f9:0a:cc:01:f9:94:0b:3a:23:8d:a2:df:
c1:83:2f:7e:53:d9:54:a4:b2:af:11:0c:25:f0:e8:
c9:98:bb:67:e4:fb:4e:98:c9:4f:8d:f0:f9:8c:98:
09:6b:d4:20:94:56:43:51:35:a7:c0:47:e0:fa:a2:
3f:0c:fa:de:8b:2a:8f:ab:27:0e:be:38:3c:13:bc:
e4:0b:d7:4e:33:12:a4:07:f3:e4:c6:ee:16:18:9c:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:47:1B:6C:5B:77:B7:43:2C:03:E7:55:6A:68:C6:D5:AB:29:2B
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:8f:37:82:a2:43:92:12:ba:59:36:7a:54:1d:79:cc:2a:
42:1d:47:1f:ee:cf:eb:66:b9:96:ed:ba:6b:2e:70:e4:e7:56:
48:4d:1a:8b:a0:5f:20:2f:e8:bd:a1:48:b2:e0:bf:86:e4:32:
05:f9:9d:08:71:0a:ab:d1:82:00:64:a9:2e:c0:24:9b:fb:89:
8f:f0:ee:f0:9b:d9:9b:c8:6c:60:98:0d:bf:60:31:10:56:10:
54:7a:55:f8:68:72:40:ec:1e:e3:19:ac:7b:9e:af:c0:c1:96:
26:06:06:4c:24:70:55:8a:ca:55:4c:17:47:ec:c5:37:95:3d:
65:31:fb:30:06:96:41:1d:b7:75:bf:c9:59:51:a9:b7:a5:8a:
c9:6a:21:f6:6d:aa:06:50:8a:0c:8e:2d:ec:dd:1a:32:f9:60:
5f:80:6d:f8:5d:0f:54:af:7e:47:dd:06:09:5a:41:60:16:13:
86:5a:af:7f:75:b9:5f:5d:b1:31:c8:82:4c:88:34:f0:d0:fb:
2b:fd:9a:6e:eb:20:ff:ed:45:8d:f3:03:94:b4:db:1b:04:55:
5f:56:7d:14:ac:90:56:98:cd:26:13:90:2e:b8:31:d1:fe:55:
2b:13:4c:4b:1c:d4:ac:92:51:31:3b:fb:f0:51:0a:6f:f7:42:
5e:2c:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:50:23 2025 by rpki-client