Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: hd2ZeuUHzkCSkE7Pcv/NvrcaJIEphVwacMI+hQ5sEVs=
Subject key identifier: 38:49:E6:01:76:1A:02:0F:DB:C6:4C:46:04:BB:21:F7:25:94:D2:1D
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 0196BF6EC528B413E2056D88BD74CD64E8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 13:00:29 +0000
Manifest this update: Sun 11 May 2025 13:00:29 +0000
Manifest next update: Mon 12 May 2025 13:00:29 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: lxZ1iEG1WBzPtFLkpMhXVbDKfoMtALaIrQArQDr7ESk=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:c5:28:b4:13:e2:05:6d:88:bd:74:cd:64:e8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: May 11 13:00:29 2025 GMT
Not After : May 12 13:00:29 2025 GMT
Subject: CN=3849e601761a020fdbc64c4604bb21f72594d21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:ad:73:80:ed:c9:29:5b:dd:7a:1c:6b:ad:
88:cb:65:af:19:63:51:5f:58:e7:30:52:fe:88:e4:
57:85:c5:71:5c:19:8f:a0:38:23:b0:14:5f:1d:d4:
96:a4:78:e6:20:25:67:65:8e:50:96:a9:40:9b:6e:
ce:1a:cb:b1:81:b9:1b:33:d0:94:9a:fd:6c:45:7b:
4f:e1:59:a1:8b:9d:04:e6:e2:2c:6e:06:0c:ab:90:
59:4a:c8:8b:aa:2c:ab:d7:19:9c:3b:1f:a8:38:ef:
d7:6b:2b:46:b6:2f:c2:5e:59:a3:5d:29:dd:ca:64:
e8:33:44:c9:ca:13:72:85:74:2d:5f:7e:57:7a:36:
95:68:3b:c0:48:70:a3:3a:30:b3:29:9b:fa:ed:28:
19:7c:0a:98:1d:aa:ca:d3:55:08:5b:b3:0e:4d:91:
ec:11:6b:e2:f7:0f:cd:af:e0:b0:ec:51:ea:b2:fb:
81:ed:d6:ff:63:82:27:e6:0e:5b:51:b2:54:fd:ed:
58:21:86:8a:93:27:e0:64:11:01:93:91:1a:26:28:
81:fa:cc:49:35:a1:fa:6a:15:02:74:7c:9e:bf:3e:
93:49:21:87:f6:51:c1:d2:56:81:c2:c0:27:09:11:
3f:26:95:c1:85:a3:75:ea:4c:6a:16:23:72:5d:3b:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:E6:01:76:1A:02:0F:DB:C6:4C:46:04:BB:21:F7:25:94:D2:1D
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1a:0f:9f:15:2e:3c:40:18:fe:a4:7f:1f:b6:56:6b:ea:86:
4a:84:d6:9a:4e:86:0c:e0:c5:76:9a:5c:d4:80:bc:a8:9d:aa:
a1:91:51:a3:b3:80:d7:cd:d9:66:15:04:2d:61:59:15:31:c3:
9d:0e:bf:27:6f:32:ca:cf:60:3d:56:ce:a8:0b:c4:9a:6b:af:
76:1e:c5:2b:02:ea:74:84:a9:61:9c:54:50:60:6c:2b:eb:4e:
6b:17:56:e6:43:d1:31:0f:f3:02:25:87:2b:c1:bb:a5:73:c4:
e8:19:9d:55:90:74:ae:d3:ba:ec:1b:a4:a0:a0:99:fb:49:99:
b3:8a:dd:f2:78:93:82:a4:d6:3a:1c:2e:37:81:70:c6:3f:18:
98:54:15:66:1b:79:98:49:9a:ca:d8:0f:cb:37:1f:a8:d3:3b:
c2:96:8c:3c:18:cf:67:86:cf:62:5f:8f:90:09:f7:c5:b3:be:
07:65:5e:13:fc:fe:04:fc:22:5f:36:11:d9:91:b6:7d:a1:0e:
06:53:1e:2e:20:c2:c9:ef:54:e3:ff:7c:70:4e:bd:1d:28:8e:
f1:ef:75:e6:fa:37:8b:ca:1d:9d:56:b9:ce:51:01:8b:0f:9c:
a4:e0:76:97:ac:9c:c6:48:b8:e6:b5:ef:0e:bf:c0:8f:04:bf:
bb:e5:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:33 2025 by rpki-client