Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: mipbF/nOHZFhjpEZeqp82Wp84fuUjl4d4cbTiuj7xC8=
Subject key identifier: 22:72:60:23:B3:D3:D5:E0:35:36:7E:8B:28:45:63:65:5F:EE:75:EE
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 0196C6838E0A86FA07574DB3717F1937B758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 22:00:32 +0000
Manifest this update: Mon 12 May 2025 22:00:32 +0000
Manifest next update: Tue 13 May 2025 22:00:32 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: x8tu2Ky5qvtsPBx0CtcScaOd+/p9W7xqwtnM+THehUM=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:8e:0a:86:fa:07:57:4d:b3:71:7f:19:37:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: May 12 22:00:32 2025 GMT
Not After : May 13 22:00:32 2025 GMT
Subject: CN=22726023b3d3d5e035367e8b284563655fee75ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:fc:42:d8:b7:b6:79:32:5a:2c:84:21:ed:
fd:a9:5f:30:f1:a2:f3:b4:4f:be:1b:cc:fa:22:0f:
e7:a3:1d:df:04:6f:33:b2:95:e1:c6:10:37:1b:69:
66:42:2e:6f:d1:d5:e0:86:64:90:cf:98:ee:44:1e:
5a:7a:f2:77:78:d4:23:50:85:0a:cd:18:89:18:d3:
26:c5:00:30:d7:8e:2f:f4:8d:19:2d:7c:77:53:9a:
2d:7b:7b:f7:ac:2e:dd:b6:9b:52:d4:62:fc:0a:07:
bc:8d:ab:92:e3:e7:b5:aa:9f:45:a0:72:0f:32:81:
88:ae:21:8a:1c:4c:c1:5c:f1:16:97:9f:c0:54:e1:
73:84:db:a6:05:ff:57:02:80:39:e3:8d:89:b8:a0:
2f:40:57:38:52:1d:02:45:b6:16:b7:fd:66:4e:45:
de:8a:03:4c:59:15:be:48:da:46:a5:91:5b:66:c4:
65:4c:49:a0:5d:11:0a:9a:1c:13:21:0b:a6:5e:5a:
3e:65:b5:69:ed:02:21:90:e0:3d:85:fe:31:8f:fa:
32:a8:fe:7e:87:d4:89:2c:c9:56:5b:b9:c3:19:23:
18:06:3d:67:92:27:95:c8:ad:b0:1b:ab:5a:28:52:
95:ca:85:ce:f7:59:32:0d:09:19:e8:f2:5f:05:cf:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:60:23:B3:D3:D5:E0:35:36:7E:8B:28:45:63:65:5F:EE:75:EE
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:50:be:73:d9:4e:a9:18:9e:bd:b7:66:b3:b8:26:f1:fe:2b:
62:05:d5:44:c6:4f:ff:4f:a8:4a:c6:22:7e:ff:8e:b1:6b:1c:
2e:4b:be:fe:c0:84:ec:a2:5f:b7:06:f1:c3:2a:55:82:7e:12:
6e:ec:7a:1b:95:61:69:ef:1a:62:40:23:53:da:32:00:28:d3:
a7:26:0c:91:54:db:f3:12:0c:d5:e0:25:74:a0:8d:90:b4:9b:
3b:c3:74:56:73:a4:12:d9:84:77:39:00:21:2c:25:51:d5:63:
23:1f:ea:5b:cf:04:b9:5f:49:f7:ff:c8:f1:03:25:c7:cd:03:
d2:28:4e:51:3c:0c:ae:34:62:af:7d:8b:7a:26:bd:85:4f:e4:
d6:e0:4c:38:00:dd:c5:bf:b9:13:cd:43:5e:d9:7f:8d:54:f5:
9e:14:5f:b9:2d:d9:84:92:7b:62:14:7c:51:95:c4:ad:5e:58:
de:d7:a2:42:5e:cf:0a:27:5f:29:f0:6b:fb:e0:40:73:83:c2:
53:96:a2:a9:91:5d:36:25:96:56:91:21:be:8a:0d:42:dd:b7:
ae:da:80:c6:3c:22:fa:5c:7a:a4:b3:e9:7f:62:d4:bc:b0:59:
fa:08:cc:88:d3:f7:1c:52:42:ea:b3:87:53:6f:bc:ca:e1:2a:
b7:ce:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:50:25 2025 by rpki-client