Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: AYwnWG87ubWGPQpVBt/EjJqkuYr9zsiHg1NndKb3918=
Subject key identifier: 4C:B1:CC:A3:4B:60:B2:66:BA:E2:6A:C0:EB:42:A9:52:97:BF:AC:53
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 0196AFC500A7D12834F7443DDBA8A494FB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 1262
Signing time: Thu 08 May 2025 12:00:45 +0000
Manifest this update: Thu 08 May 2025 12:00:45 +0000
Manifest next update: Fri 09 May 2025 12:00:45 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: U7i22CzlSbsxXWg36VpX8dSE033zkpXSdMcykP3a/0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c5:00:a7:d1:28:34:f7:44:3d:db:a8:a4:94:fb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: May 8 12:00:45 2025 GMT
Not After : May 9 12:00:45 2025 GMT
Subject: CN=4cb1cca34b60b266bae26ac0eb42a95297bfac53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:ea:65:ed:8b:be:b2:00:eb:91:de:29:b5:
cb:d4:f6:77:65:f2:d1:4b:27:cc:f2:c6:9c:9f:dc:
bd:14:35:ca:a5:6a:f3:7f:96:23:64:2f:ec:cf:56:
d9:19:97:63:18:a0:a0:57:b2:ef:59:04:76:54:96:
13:77:a1:70:56:df:c6:4c:d6:0c:6c:37:5e:5b:5b:
8d:54:95:f9:0d:b0:5e:da:76:9c:b5:4f:42:c5:3c:
0c:92:18:63:d7:ad:23:d8:f3:1b:43:5e:36:36:ef:
52:24:0b:cc:50:c8:db:d2:a4:58:91:5c:20:4d:0f:
be:64:d8:a8:46:35:4b:95:a1:3e:fa:43:b3:dd:75:
93:b4:d2:f9:b4:4e:f9:94:a1:0b:95:bd:f3:3e:5c:
76:7c:80:bc:64:28:2a:de:54:84:3f:87:cc:8a:75:
13:98:5c:b1:70:9d:26:28:0e:71:6a:b8:42:28:a4:
d4:40:dc:ba:de:7d:1d:2f:a3:a8:e8:e8:5b:4e:fc:
57:18:36:43:d8:7b:78:6c:98:e4:5a:31:65:d6:dc:
d7:50:36:64:65:b6:72:be:57:cb:15:8e:5e:ed:2e:
4e:b9:ea:a9:6b:c2:89:05:8c:92:a1:05:3f:92:63:
0c:33:ea:e2:b7:58:ba:ce:6b:30:48:5a:87:fb:f9:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:CC:A3:4B:60:B2:66:BA:E2:6A:C0:EB:42:A9:52:97:BF:AC:53
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:35:48:5e:67:82:05:69:67:13:aa:cc:48:03:52:e7:c8:09:
74:8a:f4:27:33:d5:ad:da:3d:20:9b:9c:4d:b1:6f:b6:67:16:
da:8c:32:35:85:90:0c:f2:ae:96:c2:10:67:cf:15:a4:58:af:
a2:5f:99:8f:f0:cf:7a:20:e3:ca:a9:8b:d9:4e:59:e8:ee:4a:
d0:01:15:ef:91:c0:47:0d:0e:2d:1b:b9:da:ad:04:ef:6b:99:
ed:ea:e5:b2:2d:38:0a:33:c5:ac:0a:a3:55:dd:5d:38:33:42:
08:7c:2b:27:ea:73:4f:66:1d:20:de:48:5f:ca:50:4e:40:b5:
5f:48:33:f2:8f:00:7a:af:1d:81:fe:02:fc:0f:b9:26:07:83:
17:59:b3:75:21:42:28:f7:a7:81:41:38:31:72:65:64:dc:4b:
89:17:55:a4:ce:eb:d3:16:d2:d8:9d:bf:64:07:18:86:f8:e7:
7b:2d:15:d9:4b:67:92:d6:30:90:7b:50:17:3a:5e:31:38:17:
7e:34:70:3c:7b:94:90:3b:f6:7d:09:06:89:ca:fe:83:61:5c:
4f:12:f0:71:e9:ff:d3:cf:3a:d3:f8:9d:1e:a0:bf:ad:80:f9:
ce:bc:ba:a7:49:8a:9d:d8:b1:04:76:9e:8c:ed:d1:db:37:17:
3d:4f:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:06:54 2025 by rpki-client