Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: BeAXJ74z2ddoXdTX2VKufkRrmfwTsAO+fJTeM4AGHBo=
Subject key identifier: 63:B0:C8:7C:25:FA:C2:D3:6B:06:CF:4F:26:29:FB:18:60:AC:88:F3
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 0196A98C11D7C2F6889AB6AE29F43D8DE071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 05E9
Signing time: Wed 07 May 2025 07:00:51 +0000
Manifest this update: Wed 07 May 2025 07:00:51 +0000
Manifest next update: Thu 08 May 2025 07:00:51 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: kbQkfhY6aFdvcWfeM71c3cTH8mY0Gn3ycGQXNEncobU=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:11:d7:c2:f6:88:9a:b6:ae:29:f4:3d:8d:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: May 7 07:00:51 2025 GMT
Not After : May 8 07:00:51 2025 GMT
Subject: CN=63b0c87c25fac2d36b06cf4f2629fb1860ac88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:fc:ae:5d:6c:6b:4c:8c:ef:56:5d:ae:0f:
95:c0:76:48:5e:07:e2:77:bd:eb:08:ed:2a:e5:7b:
29:8e:6d:7f:f8:66:86:85:3e:67:20:5d:51:5b:ca:
2f:d9:f8:86:98:1e:e7:66:1c:b2:69:c5:05:34:94:
64:40:27:a9:da:aa:89:a0:35:14:5d:0c:d5:88:b0:
3f:11:77:86:cc:1b:76:17:82:c9:1b:15:11:eb:dc:
1c:2b:b9:77:d1:ea:17:46:0f:de:6f:ba:e7:f3:a1:
73:3d:0f:d5:8f:44:fc:47:1c:65:3d:4f:f9:09:d6:
56:86:da:7b:69:34:2c:d7:a9:22:b2:86:5f:dd:96:
70:05:31:9d:ad:18:65:6c:03:91:fc:92:30:34:64:
2c:bf:37:5e:e0:80:91:1f:23:66:f9:05:60:8b:be:
d3:ec:4e:e5:44:e8:68:b5:c5:cf:b5:2f:41:b8:d2:
de:80:67:d8:22:26:c5:f2:ec:30:92:2d:04:54:5c:
6d:65:27:35:ea:b5:28:92:bd:10:ee:f4:7b:3e:77:
4e:2a:cb:2a:1a:79:bb:13:34:31:bb:5d:7a:8f:c9:
9c:46:1d:91:ba:03:0a:0d:b7:23:29:43:23:29:b3:
58:ed:c4:7a:6b:25:20:b8:c6:3a:c9:f4:d6:04:9f:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:C8:7C:25:FA:C2:D3:6B:06:CF:4F:26:29:FB:18:60:AC:88:F3
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:b7:21:4e:5a:fc:13:65:7b:38:fc:c7:a3:7c:12:00:41:
47:f5:cc:d6:7e:4b:1c:25:5b:31:ca:c2:e8:6b:aa:ab:80:47:
4f:40:d8:3f:07:9a:78:19:f7:32:56:d6:0f:bf:1f:71:4b:5b:
0f:ea:a7:6b:0e:4f:00:b9:80:23:c0:6c:86:b8:cf:27:8d:02:
88:a9:f4:6c:c2:63:db:e6:10:3c:98:ac:6e:4d:b2:05:7d:77:
bb:cc:db:53:59:d1:d0:4b:83:be:7c:42:3b:56:0c:81:64:51:
d8:11:d0:64:25:79:51:fd:52:ba:a4:d7:fe:e5:6b:2b:ea:2e:
b4:58:cf:87:8c:de:9b:c2:12:22:5f:ac:80:2e:2b:1d:7a:c0:
93:da:be:59:75:cd:a5:b1:19:68:49:85:c1:6f:fe:aa:0f:db:
98:7a:b9:ba:c4:a2:27:9d:6c:15:ae:54:e3:34:c7:da:c5:03:
74:a3:5d:f9:a7:52:a6:d6:ad:43:a5:aa:92:47:02:70:77:f4:
76:b7:f0:ca:43:83:2f:6b:d8:4a:46:e5:b1:9a:8e:08:f1:03:
db:3c:ee:ec:fd:4a:99:a4:72:32:fa:a8:73:dc:80:b3:f8:83:
d3:31:de:51:82:c1:9d:07:7c:e2:19:8b:89:c1:c3:f4:38:32:
15:88:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:19:12 2025 by rpki-client