Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: SPlSdTtTKBjx8PydvOUuLyo6U8lrE/bBWrhTsjgOhNE=
Subject key identifier: 30:CF:F2:D1:E8:C0:D8:F4:1D:B8:46:59:B3:BF:9B:30:D6:53:CB:F1
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 0196C3F0CDBEB4D25628D1E222BB52C1F0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 14C9
Signing time: Mon 12 May 2025 10:01:00 +0000
Manifest this update: Mon 12 May 2025 10:01:00 +0000
Manifest next update: Tue 13 May 2025 10:01:00 +0000
Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=)
2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: XLU+wjNjz1mmYyc1CxXwwaSMssFRFGIseR6UCA6Gm+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:cd:be:b4:d2:56:28:d1:e2:22:bb:52:c1:f0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: May 12 10:01:00 2025 GMT
Not After : May 13 10:01:00 2025 GMT
Subject: CN=30cff2d1e8c0d8f41db84659b3bf9b30d653cbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:07:fe:06:7a:de:d1:8b:69:18:ca:78:ac:
99:7d:ea:3a:fe:02:3c:49:43:a9:d0:57:e9:3a:95:
5a:68:ff:4a:5e:77:93:a3:51:45:ab:ab:07:1e:7a:
56:13:36:6b:cd:64:6a:95:5c:fe:2c:e9:dd:83:8b:
2f:f2:77:b0:a0:b4:d9:cb:55:af:42:4e:8b:bc:73:
cb:0f:69:c7:90:c0:69:cd:0b:07:ca:72:9f:a4:e2:
e1:27:85:e0:2b:29:f9:a9:53:a9:99:37:98:f6:39:
d4:3a:61:66:72:b2:c4:8c:91:a1:0c:0f:41:b9:8f:
a7:cc:38:d1:82:f1:d8:51:4a:53:9e:50:51:e7:a9:
06:e7:84:36:95:40:bb:45:e3:96:93:13:b2:cf:1e:
c1:8f:bb:b5:0e:03:04:b2:69:48:56:74:cf:ee:53:
0c:38:ac:03:f9:8b:ea:93:b5:fb:5e:33:c1:e8:93:
bd:01:c9:3f:f1:79:e4:cc:f6:76:5a:30:41:40:e8:
95:ba:a8:8e:5d:be:d3:ae:cd:be:7c:f5:4b:3c:3e:
1c:cd:8d:23:5e:dc:44:a3:fe:de:34:eb:cd:d2:21:
b5:db:6e:a7:78:01:86:0f:ef:a1:eb:ec:84:72:9b:
d6:e5:2a:49:ee:74:b1:9d:72:45:ff:a1:25:38:c1:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:F2:D1:E8:C0:D8:F4:1D:B8:46:59:B3:BF:9B:30:D6:53:CB:F1
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:64:a7:5b:33:6a:05:56:eb:7a:f7:72:43:a2:be:41:07:64:
36:9c:9b:a0:98:f9:e0:24:87:b9:07:a1:63:0e:f4:e0:c9:ab:
e0:d9:f0:88:a7:a1:0c:cc:79:38:a0:6c:21:fa:bd:62:92:cb:
e1:d9:ec:40:ba:87:2c:87:ed:b8:48:ef:7b:31:64:79:8b:b3:
e7:56:b4:c7:76:d8:c7:08:8d:e2:71:c1:6b:8f:3f:4c:22:90:
47:f3:17:c6:03:70:ba:cf:19:a5:8b:09:0b:e3:a6:90:d2:47:
03:9d:f0:26:4f:fa:ee:39:e7:57:66:d1:44:21:f0:ce:d1:25:
c3:5a:14:cf:55:07:54:a1:83:8e:be:e4:dc:a7:c8:45:11:84:
34:d8:58:78:a5:91:43:67:6c:87:e0:e0:b7:71:79:e2:e3:02:
28:d0:f6:b7:28:ec:34:c5:09:38:f8:c8:ce:63:df:67:bf:d8:
63:33:d2:a7:f9:ec:92:49:c3:b7:82:d8:83:ae:29:7c:ea:4e:
99:08:26:ed:0d:31:a0:1a:17:22:5b:42:15:57:36:af:78:48:
6d:a6:0c:6a:37:ee:56:03:88:b3:03:78:13:75:41:cb:3b:c6:
59:ca:4d:89:fa:3a:3c:29:a5:72:71:f1:09:20:bd:cb:9b:b1:
f5:0a:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:43:23 2025 by rpki-client