Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: Sdk3irnSXj6uWNUZWvwgtiWo936q31I1N5+FB5brIhw=
Subject key identifier: 61:B5:1F:CA:EA:56:26:62:A1:E3:29:04:76:F5:7D:3C:F3:F9:1C:F4
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 0196CC4ECC0D5DD2F1D9E887C0E5B0500416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 0F33
Signing time: Wed 14 May 2025 01:00:38 +0000
Manifest this update: Wed 14 May 2025 01:00:38 +0000
Manifest next update: Thu 15 May 2025 01:00:38 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: q3IYMhzDGj4WSfFGOM62EMVW0Rp7xzv10ZZuXSaxc70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:cc:0d:5d:d2:f1:d9:e8:87:c0:e5:b0:50:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: May 14 01:00:38 2025 GMT
Not After : May 15 01:00:38 2025 GMT
Subject: CN=61b51fcaea562662a1e3290476f57d3cf3f91cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:d6:a3:8d:28:a0:af:aa:30:81:7c:a2:92:
42:9c:2e:31:54:07:62:d8:c4:53:62:e0:91:f3:1b:
57:af:70:fe:c1:df:62:2a:e3:77:1b:58:4e:78:e0:
59:84:79:9c:f3:77:e1:5a:53:e7:d9:4d:e9:b1:53:
92:a7:58:fa:a8:f8:5c:a9:96:32:22:a6:e0:f0:64:
4f:39:89:c3:0e:a6:b1:ae:cb:21:93:38:cf:5d:ca:
ad:d7:bf:ed:b3:37:e2:57:ca:b3:03:a1:0b:25:35:
ad:3f:ed:7b:29:69:13:34:8f:21:ac:2f:fe:62:3e:
72:e2:74:fe:87:62:fb:18:68:66:b5:c3:e7:6b:14:
12:6a:04:e1:b8:f9:01:26:51:97:02:9a:25:ed:7e:
66:82:97:90:69:87:83:71:2e:2c:53:8e:48:b1:57:
10:41:0c:87:6d:1f:50:86:ba:fa:2c:80:2e:08:2c:
d0:78:c9:ed:9d:32:74:be:5f:b2:8b:fb:c6:36:a5:
a1:3b:f5:eb:ed:d6:26:38:79:f8:31:14:0a:42:a0:
13:56:f7:b8:0e:0d:51:d8:88:d6:51:41:16:68:74:
8b:2d:a2:2a:06:b3:f1:d0:60:2d:c1:dd:c0:91:51:
c0:5a:b0:eb:61:24:77:ec:9a:ae:57:f0:d3:45:79:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:1F:CA:EA:56:26:62:A1:E3:29:04:76:F5:7D:3C:F3:F9:1C:F4
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:37:a6:00:9e:44:ab:08:19:c9:8a:9c:94:90:f4:90:24:fc:
29:1f:d0:e6:2a:8b:84:5f:29:a0:80:5d:9f:71:de:15:bd:41:
05:94:d7:69:12:43:e8:c7:4c:7f:02:e8:90:a8:c7:37:70:f6:
1a:31:7f:d6:81:61:d6:b5:8e:00:57:df:aa:d7:04:83:46:a0:
df:0b:58:0c:eb:ee:5e:65:68:40:aa:2d:fb:b2:26:4f:a0:fb:
a5:fc:15:58:fe:62:50:85:4a:72:44:99:72:3e:f1:fb:23:dd:
46:8e:79:d0:98:e0:fc:36:ad:33:5a:c8:9a:65:df:50:e7:6d:
07:b1:75:5f:0f:1f:68:5d:75:52:cf:f5:17:20:85:05:7a:4e:
ea:8c:26:37:02:20:dd:b6:73:74:39:02:38:65:88:e5:0a:37:
bb:a6:a5:2a:8a:f8:98:52:ea:99:6f:65:5c:21:39:e1:d1:5e:
7a:4a:b5:89:c7:f5:30:ad:42:5b:5c:ce:98:28:d3:5d:0e:18:
2f:db:39:f8:34:fc:2f:8e:15:60:cc:75:2c:e5:0b:fc:d8:b9:
c7:1f:43:a1:1d:bf:8d:af:37:6c:4c:a1:25:22:81:2b:7f:9f:
97:59:ee:a9:0b:85:c8:41:56:78:f0:fe:3c:f4:13:0d:c4:ea:
02:94:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:03:24 2025 by rpki-client