Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: 5VYFTEnOqg3SoOei64sELkCWW0AyagW2iWQ8O6PkYEE=
Subject key identifier: AC:3C:2F:DB:08:68:E0:25:FD:86:87:B7:43:D7:3F:5F:29:44:34:AE
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0196CE062E411936546DD9288D88F4B77C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 09:00:33 +0000
Manifest this update: Wed 14 May 2025 09:00:33 +0000
Manifest next update: Thu 15 May 2025 09:00:33 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: lBfa2Kx1ptPlY9+8NoHWQcQfb6OVP57vpnlPLAVEGbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:2e:41:19:36:54:6d:d9:28:8d:88:f4:b7:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: May 14 09:00:33 2025 GMT
Not After : May 15 09:00:33 2025 GMT
Subject: CN=ac3c2fdb0868e025fd8687b743d73f5f294434ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:fc:0c:8c:31:41:58:47:f3:23:9c:70:5b:
ad:96:91:1a:3b:79:ed:8c:32:e3:a5:86:35:76:23:
b2:62:c1:54:4e:98:65:8d:25:b5:b8:e5:a1:8b:35:
c6:4d:39:de:60:ec:7e:50:fa:3d:65:ae:23:2e:4e:
82:4d:a5:48:f3:91:d6:93:33:90:9b:12:b1:ba:28:
36:0f:95:70:67:b7:f7:fe:59:76:77:89:6a:7c:71:
79:67:fc:45:97:c9:4a:95:d0:f9:40:3d:9b:77:90:
ac:9e:d2:d6:ee:90:9c:07:4d:a9:92:ea:57:85:74:
3d:84:4e:6a:c4:f5:5a:79:22:94:a5:c2:98:7b:94:
c7:f7:80:4a:68:e8:30:cd:51:c9:43:d5:ae:3f:b7:
31:a8:03:61:7c:fc:38:7f:c2:f1:13:9f:c1:4d:52:
77:5b:c4:d8:82:78:ab:40:23:60:22:4c:b8:c6:8e:
53:d4:16:fe:a1:3a:0b:3d:78:a2:72:95:18:74:a4:
78:cb:0b:69:fd:88:0c:34:f2:24:9a:14:76:6b:40:
f6:a5:dc:f2:46:db:03:44:4e:41:2b:29:87:62:e5:
2b:a7:8e:19:00:e2:e9:92:20:ee:20:64:87:fa:19:
de:4d:85:f3:85:4c:d5:00:f5:3c:f9:ad:fc:13:53:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:2F:DB:08:68:E0:25:FD:86:87:B7:43:D7:3F:5F:29:44:34:AE
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:7b:ef:a6:56:b0:66:7e:ac:ce:ed:14:b6:83:a3:e3:84:
02:11:16:3d:43:b6:ad:fd:5d:84:cb:62:ce:a1:80:ec:9f:92:
90:dc:26:15:2c:0a:a7:06:08:e6:d8:e3:2c:87:7f:85:2e:21:
e8:de:e8:6c:75:73:77:99:aa:57:fe:69:ed:62:20:fc:38:8f:
d0:ea:f2:74:63:6a:96:42:31:bc:be:f9:4c:94:a2:61:d8:bb:
c5:a6:b3:8d:81:95:d7:a5:a9:35:a9:64:8f:23:0c:9d:f4:46:
03:9a:87:dc:7c:8e:81:d3:21:e9:75:30:a6:89:65:41:d1:49:
13:2a:19:ad:5c:30:ed:53:d1:09:a8:e5:6c:dd:40:ae:7b:e6:
e7:01:bd:47:74:f1:ae:43:b2:5b:f1:f7:e5:95:aa:47:e8:66:
c4:c5:86:1d:28:d0:14:12:21:c7:47:a7:f4:2e:cf:6a:cd:95:
a3:94:b2:3a:46:31:67:9a:73:cd:e8:4c:c9:c1:3c:45:ad:06:
92:bb:54:57:42:d0:d5:13:77:fd:51:02:29:c5:86:fe:02:bf:
09:f9:4d:b4:91:44:6c:5a:80:27:df:ff:27:af:95:7c:ae:12:
45:1a:13:e9:7d:6f:aa:b5:9c:9e:fe:77:b8:2b:25:03:7b:d3:
a8:c5:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:33:08 2025 by rpki-client