Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: IGE16qFGbsebcvOZYNBZM9BLNhyzp65D/9MihvK99Xw=
Subject key identifier: 6C:AB:E1:C0:D5:A8:92:1C:51:93:71:0B:8B:62:C6:98:C6:5E:9D:6B
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 0196C4278DB14BA86F88C92B2AD2329E8D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0C0A
Signing time: Mon 12 May 2025 11:00:48 +0000
Manifest this update: Mon 12 May 2025 11:00:48 +0000
Manifest next update: Tue 13 May 2025 11:00:48 +0000
Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: /kMTNbbKaw6jTGQ8Ge++XrQZ0A06kE9mTjyNeoESg5g=)
2: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:8d:b1:4b:a8:6f:88:c9:2b:2a:d2:32:9e:8d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: May 12 11:00:48 2025 GMT
Not After : May 13 11:00:48 2025 GMT
Subject: CN=6cabe1c0d5a8921c5193710b8b62c698c65e9d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:28:16:30:ef:5f:8d:dc:f6:19:57:94:9e:
d3:05:c6:8a:5a:86:38:fa:6d:2c:3a:82:60:a6:46:
d6:b3:48:de:34:dd:95:09:ab:ba:12:13:c7:a4:c4:
bf:2d:7e:0b:ee:94:3d:de:06:64:63:de:80:f0:db:
82:ed:87:4f:11:7c:69:60:31:6d:ab:51:79:82:73:
e9:df:57:61:4d:d5:81:15:0d:37:81:1b:d5:dd:1f:
d3:55:f6:62:d2:fb:39:ea:f3:88:48:46:90:e3:aa:
d6:cd:53:78:fb:a7:e4:84:b4:e0:77:51:1e:8f:83:
3c:e1:32:1e:1f:a5:f6:13:58:ce:ad:42:fd:ff:fc:
6e:b3:1d:81:1a:3f:6b:19:c0:43:e4:7d:51:7a:31:
50:5e:f3:85:c2:f5:bd:66:40:bb:49:1a:00:dd:6a:
a3:2f:d5:a2:78:76:d5:95:af:0c:2b:55:0b:cf:1a:
84:00:fd:cc:fe:65:ab:b9:87:42:af:50:5e:78:c6:
9e:6d:48:0e:89:eb:55:27:7b:4f:81:72:03:b6:35:
c3:cc:80:31:29:49:a6:36:0a:45:62:ec:ad:7d:eb:
dc:90:c8:54:8f:ad:13:47:89:97:76:ef:6f:4f:90:
56:c4:74:27:91:72:f4:09:fb:1f:fa:76:44:be:8b:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AB:E1:C0:D5:A8:92:1C:51:93:71:0B:8B:62:C6:98:C6:5E:9D:6B
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cb:1c:97:5f:ef:e1:b5:86:3d:4d:e1:23:1f:2b:9b:24:b9:
f6:0a:f7:75:94:82:3e:20:61:94:ac:8a:0f:c9:58:02:9d:b0:
5a:12:97:52:85:52:ff:ab:be:18:f0:21:64:59:20:de:67:b9:
8f:10:cb:01:21:da:a5:24:99:96:47:5d:62:f8:34:e7:d0:b9:
e2:f0:3d:4c:e6:a7:a5:9a:15:26:6c:a4:e8:63:ad:aa:69:b6:
29:b2:37:eb:11:a8:3d:40:92:e4:af:ff:a7:9f:78:66:35:ef:
5b:ae:6d:ee:fd:c2:93:93:e4:3b:d4:a9:fd:3a:61:25:68:f0:
be:1f:dd:56:ef:91:28:87:19:a9:f1:82:0f:de:57:55:69:56:
63:0e:af:f1:cf:35:f1:2e:6d:ff:77:5d:45:2d:63:a9:1a:49:
57:a3:17:d3:b9:71:aa:db:4d:5c:a1:e6:5e:d5:ea:1b:75:fc:
6d:cb:2e:c4:f6:49:e1:ff:34:30:b1:b4:ed:58:73:6a:e6:a8:
1e:35:3f:67:d4:4a:65:7d:90:00:e4:d8:94:f0:c9:e3:24:76:
94:4e:51:45:95:13:16:cc:be:d6:ce:a2:4f:6d:c1:c1:53:96:
ed:51:38:f9:58:f8:7b:cf:0e:79:53:53:07:0d:c7:83:0f:4a:
c1:9b:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:46:59 2025 by rpki-client