Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: MEu5aWlaBA6xUaSFPGX2hUmBjzgTPnzO6e598bplb2M=
Subject key identifier: D9:3A:13:91:8F:AC:07:CF:CE:B3:A8:72:F9:9B:86:2A:68:EB:3F:FD
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 01969F08251501CF0F5A7991F601A44246C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 06:00:33 +0000
Manifest this update: Mon 05 May 2025 06:00:33 +0000
Manifest next update: Tue 06 May 2025 06:00:33 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: YoLfi2AD+HNNoc9jtRWOT23TFlPl50tSd2nEJlvylc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:25:15:01:cf:0f:5a:79:91:f6:01:a4:42:46:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: May 5 06:00:33 2025 GMT
Not After : May 6 06:00:33 2025 GMT
Subject: CN=d93a13918fac07cfceb3a872f99b862a68eb3ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:33:bb:8a:80:42:46:d7:46:ff:8a:cb:8b:fc:
9e:93:ce:bd:12:26:6d:16:b4:ae:8c:43:34:9a:59:
af:e0:57:57:ae:13:87:91:7e:74:cc:66:df:16:3c:
1f:82:a9:61:08:c2:1a:fa:81:0e:d1:8f:e6:6c:3b:
ec:9a:4b:19:5b:74:a7:f6:c0:fe:50:9c:94:d5:ff:
e3:3b:04:82:e1:91:5a:15:02:1b:e8:d3:b2:50:88:
54:09:e3:e3:02:99:8c:3a:6c:00:e1:ff:9a:ae:1c:
06:a4:7d:07:ad:00:8f:fe:04:89:20:fb:94:ed:89:
f7:3d:7d:5a:78:f7:4a:2f:10:29:c1:9f:d6:10:03:
0f:f0:44:cf:d4:67:b0:84:ca:6f:64:d7:34:05:76:
7e:87:46:6b:5d:8c:59:6d:e8:73:d2:7d:9a:02:07:
1e:53:fd:fb:0c:ee:e8:79:ea:b9:f3:e0:d6:fe:32:
11:f0:98:bd:72:9e:ae:4e:28:a0:f0:bb:26:14:73:
18:b6:4f:c5:21:ec:b9:c3:ad:54:d7:ec:3c:0b:a2:
b7:57:39:67:70:9a:21:2a:3d:de:e2:bd:c7:70:b2:
4b:e8:56:56:77:dd:e7:19:4e:6c:ff:2a:a2:2a:08:
5e:e7:0b:74:1c:22:4c:d8:53:4f:78:c8:55:b8:18:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:13:91:8F:AC:07:CF:CE:B3:A8:72:F9:9B:86:2A:68:EB:3F:FD
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:1a:70:b8:e1:ee:6c:da:c2:fe:58:09:7a:19:ae:a5:51:
43:d1:14:bf:65:61:29:6f:ca:60:e3:4a:6e:2a:58:64:be:3f:
a9:bb:c3:ba:b3:f5:25:78:c7:92:3c:57:a0:71:25:8c:c1:2a:
47:35:29:62:f5:37:43:0a:67:3a:a9:cc:41:ac:4d:02:3d:6b:
be:42:8c:73:af:28:3e:a1:21:ff:f6:ec:ce:5f:e2:ee:5d:35:
8b:8c:58:e4:60:c8:65:c4:62:b9:2c:61:49:ae:94:fb:98:b2:
00:07:0f:11:b2:6a:c7:57:e3:8a:31:9f:a5:64:91:4f:6a:69:
2c:0b:77:1d:a1:56:27:4b:f1:5e:16:1e:b2:7b:92:5d:b0:24:
4c:b6:ba:58:ab:1c:47:29:a2:e4:55:62:00:08:88:eb:9a:0b:
98:ca:7a:66:73:58:aa:bd:57:cb:5c:c6:20:3a:88:dd:af:9b:
d3:f0:65:d4:63:ae:84:cc:bf:b4:88:53:3f:da:dd:86:06:9c:
9f:ed:66:69:50:38:2a:33:cf:7b:cc:17:7e:12:d7:b9:77:7b:
cf:9d:5b:72:2e:16:8c:f5:1d:d7:77:ba:0f:8f:1b:8a:03:01:
47:37:89:d0:ff:c1:af:98:d7:aa:6c:ea:b7:53:87:45:48:50:
05:8d:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:35:57 2025 by rpki-client