Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: XhiqQ5avP7Y4h9Crhd8crLTMQlBPYp75Mwk33QDTf78=
Subject key identifier: 13:52:0B:80:8F:CD:B8:2A:3B:A5:36:E1:9A:1A:72:C9:42:90:75:46
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 0196C04B33BB29F90BA581E1FE1F71A03784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 17:01:16 +0000
Manifest this update: Sun 11 May 2025 17:01:16 +0000
Manifest next update: Mon 12 May 2025 17:01:16 +0000
Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: DWVntZdqfywtctQs2NLVBg1YLG5z+1W0ak+27squbUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:33:bb:29:f9:0b:a5:81:e1:fe:1f:71:a0:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: May 11 17:01:16 2025 GMT
Not After : May 12 17:01:16 2025 GMT
Subject: CN=13520b808fcdb82a3ba536e19a1a72c942907546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:32:21:43:6b:95:3c:7d:b1:bf:a9:96:d3:
8d:d4:49:1a:89:c3:de:ae:1e:ad:fc:4c:f5:84:3a:
24:aa:05:a4:90:bb:ac:40:56:fe:8d:1d:6c:18:c7:
2d:02:5f:81:bf:4c:c6:70:fd:25:63:21:03:31:2c:
09:0e:c5:9d:35:51:f8:02:db:09:08:51:6b:14:62:
11:5e:77:c9:1b:75:89:63:a6:f4:12:e0:b7:c5:23:
13:f1:0c:d4:0b:d0:08:45:ae:58:b6:8c:81:f2:e0:
1e:e9:01:de:03:50:70:54:da:b2:d1:63:b2:f0:94:
8e:a1:fc:b1:e5:2c:4e:41:9e:6d:7b:93:23:b9:d6:
08:7a:38:f0:90:46:58:5a:9b:d9:69:ee:03:17:c3:
25:e9:71:d9:80:cd:62:6f:90:7e:fe:d7:36:d3:48:
08:61:18:41:25:49:2c:88:55:e3:5f:4e:a2:6c:9a:
93:36:68:c9:7c:68:b4:86:6b:d4:75:0b:97:c6:9f:
71:08:f8:75:4c:a9:3d:55:18:fb:a3:c1:e8:77:7e:
e3:19:89:29:80:05:8b:99:f7:01:d7:a3:e1:72:9a:
fb:ae:d2:2c:7e:2b:65:c1:38:fe:8d:2c:45:4b:ad:
23:4d:0b:87:ff:24:e7:86:01:b7:3a:8e:0f:57:58:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:0B:80:8F:CD:B8:2A:3B:A5:36:E1:9A:1A:72:C9:42:90:75:46
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:98:f4:08:44:da:d0:3e:17:fd:81:4a:c7:f7:a6:a1:0a:33:
ce:5d:4a:04:ae:fc:55:ec:77:bb:46:f9:a7:45:ce:3d:61:2c:
d5:bd:1c:89:fa:1b:64:90:c9:c2:a5:c3:a8:06:dc:99:78:e2:
2d:1f:0a:7b:82:56:9c:38:a4:86:f4:f1:f4:4f:bc:c3:8f:a8:
63:99:cf:55:76:0d:01:fa:de:a2:54:56:b8:83:a8:34:42:56:
3b:e6:bc:73:d8:34:87:9f:ed:bf:77:f2:95:af:e1:79:d8:44:
f3:25:aa:4e:38:fb:4d:ef:b6:df:ec:62:e3:70:7b:13:68:dd:
59:2a:d0:49:eb:62:cb:2e:44:13:60:2f:48:d9:c4:be:03:db:
d4:d6:c3:7b:8b:b1:43:7f:2e:81:8d:92:91:e3:e8:6f:93:3e:
2a:55:f6:c1:fc:26:22:e9:f2:cc:1c:c7:28:4f:b5:f9:2e:17:
dd:27:0c:81:1e:d0:48:b0:bc:d4:8d:6e:01:a1:8e:3c:75:b6:
00:ae:34:ee:47:2b:c1:12:0b:c2:ef:44:1f:a6:5e:b8:4c:7d:
d8:e4:7a:e6:f3:17:c7:50:64:d2:72:c6:3e:fb:76:a5:0a:3a:
88:4b:a3:d4:8b:7e:30:d8:71:0a:f6:9a:04:48:52:7d:db:d4:
8d:27:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:08:22 2025 by rpki-client