Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: sgxZ2Ik67plt1iP+l+hQ8uEoGTBAOVGjJRN6v0Klhaw=
Subject key identifier: AA:30:84:42:B5:6C:18:2D:7B:F3:31:B6:29:95:02:26:5C:DF:94:6F
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0196C2026FF74BD49FC4F1FA3D935ED2E110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 01:01:01 +0000
Manifest this update: Mon 12 May 2025 01:01:01 +0000
Manifest next update: Tue 13 May 2025 01:01:01 +0000
Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: eHMTGlZmvyvxrWMj2ctizD3DuUL9zrxcxGrKZCEbGQw=)
4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:6f:f7:4b:d4:9f:c4:f1:fa:3d:93:5e:d2:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: May 12 01:01:01 2025 GMT
Not After : May 13 01:01:01 2025 GMT
Subject: CN=aa308442b56c182d7bf331b6299502265cdf946f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:f4:48:3c:c1:3d:15:ce:48:22:99:85:da:
20:9c:27:b2:9d:2d:fd:08:50:c3:17:57:94:7b:93:
b7:0c:7d:d5:50:1a:c9:cd:fe:04:b2:d6:f3:be:0b:
a7:2f:2c:a1:b4:08:c2:97:6e:33:3f:95:3c:56:51:
dd:9f:f0:e1:a6:52:0a:25:18:67:55:f1:75:89:b0:
cf:b6:b0:6c:f4:ec:c4:3d:c3:67:d3:7d:48:46:b8:
1e:d6:92:64:44:6f:62:8f:be:d5:1a:5c:9a:1e:f6:
80:a9:c7:aa:fe:f8:09:c5:8b:cb:07:cb:83:34:34:
b7:8a:28:cb:f0:00:fb:0a:16:1f:88:84:b2:80:e9:
2a:b1:58:19:ac:83:16:8e:4f:44:3f:a7:5e:b5:1e:
ba:39:56:62:3f:19:0b:c2:48:6b:ef:2d:90:5a:c9:
dc:d9:20:1b:d5:73:62:0d:5b:c9:84:3f:3d:a9:81:
da:38:09:7a:74:15:b7:d5:b8:6a:19:bf:a4:89:8b:
b4:71:83:9e:c7:e4:2f:4c:b6:8f:db:c6:dd:38:62:
c3:65:c0:fc:19:f8:1d:8a:0d:8d:1c:5b:64:25:e9:
68:5d:31:45:37:80:11:7b:bc:06:3a:fd:60:91:5a:
4e:82:e6:47:c2:12:10:db:56:9b:13:80:67:7d:5d:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:30:84:42:B5:6C:18:2D:7B:F3:31:B6:29:95:02:26:5C:DF:94:6F
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bd:a2:95:a4:29:c4:64:81:19:4c:c8:f3:0e:b7:d6:41:20:
05:be:d5:32:32:1c:92:d3:a0:03:42:be:c2:74:fe:a1:7b:eb:
9f:a7:41:dd:a7:6c:76:6c:c3:32:42:db:b3:68:ee:b6:38:e7:
60:9f:83:95:cb:9e:39:26:a2:02:1d:5a:2a:63:2b:a5:63:a7:
ef:a3:2c:e3:43:73:49:13:50:91:be:9d:a6:ba:c8:43:d3:63:
7a:62:0b:65:61:8d:18:d9:59:71:7f:17:e4:20:46:68:3c:9a:
24:5b:eb:b7:01:c4:c1:5d:41:9a:1e:2c:4e:f6:85:91:d0:c2:
b2:93:7d:7e:4f:ba:73:68:b9:44:9c:26:97:99:a5:da:03:90:
b5:cc:50:8a:28:1a:cc:d7:e8:92:bc:03:f6:ef:ba:8a:ee:13:
dc:31:cb:e6:07:0f:9e:21:f3:3a:a3:2d:6c:4a:61:b3:c2:51:
5f:25:27:e4:02:cc:48:24:52:98:a3:20:9b:ec:f0:69:5e:03:
f2:c4:3a:4a:6f:34:f4:66:18:44:37:59:12:f0:89:36:86:6b:
c8:a9:57:e3:41:22:11:d0:65:68:94:1b:93:0c:d6:7a:bf:20:
c8:9b:94:d9:43:65:5e:c7:be:93:85:0b:fb:76:d9:e6:17:dc:
8e:7c:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:49:30 2025 by rpki-client