Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: RWmELhqpLE5wZet3IxYe2QHv2mWkAOsAGtEM2nBulXk=
Subject key identifier: 95:66:79:8D:2B:46:77:CA:98:52:24:18:D5:49:5F:93:2D:9C:1C:F1
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 0196C615610620B626E925068F7E624265DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0236
Signing time: Mon 12 May 2025 20:00:11 +0000
Manifest this update: Mon 12 May 2025 20:00:11 +0000
Manifest next update: Tue 13 May 2025 20:00:11 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: JWdOXyd8+GgZy3F7RP6FnTjvanPy28nlldiy5ysAY2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:61:06:20:b6:26:e9:25:06:8f:7e:62:42:65:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: May 12 20:00:11 2025 GMT
Not After : May 13 20:00:11 2025 GMT
Subject: CN=9566798d2b4677ca98522418d5495f932d9c1cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:8e:b0:83:da:da:77:9c:3f:9c:6e:4d:0c:
5e:02:e8:e0:b8:8e:7d:e4:28:8b:e0:9d:93:91:79:
0d:39:96:8b:b3:e0:90:20:f1:b3:9a:f8:0c:cd:0e:
86:7b:b0:b9:74:9e:e8:9b:b9:c1:cd:35:27:74:d6:
ed:58:5a:d5:0b:a9:48:df:0f:e7:eb:65:b0:2d:99:
fa:77:b7:44:52:ba:44:17:b2:b9:b2:3f:24:95:8e:
79:bd:36:b6:72:73:4f:e4:f0:36:94:de:74:d6:07:
25:8a:9e:8b:c0:81:18:62:27:4b:24:48:a2:d2:a4:
87:69:f2:6a:39:1f:82:f8:9e:86:58:65:b9:13:ff:
5b:03:fd:e7:72:e6:72:61:2e:29:31:ed:93:df:f2:
c5:62:5a:ce:57:e8:e3:0f:e5:37:b6:79:8c:20:f6:
35:f2:b8:ba:f3:b4:0f:85:07:79:c0:04:1e:6b:d3:
1f:02:17:d8:05:f6:0f:65:a5:9b:01:11:27:8b:12:
5b:f6:6f:22:5b:60:f9:70:9a:f0:a3:19:26:a8:ef:
e4:40:bb:90:67:40:ea:a1:cf:39:71:dd:ad:5c:8a:
ae:37:52:63:a0:32:03:5d:62:39:7e:20:64:c6:8c:
cc:87:61:5d:bc:fd:3e:f2:08:09:51:ca:7e:5a:f4:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:66:79:8D:2B:46:77:CA:98:52:24:18:D5:49:5F:93:2D:9C:1C:F1
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:31:c4:f5:3e:12:d6:af:38:b5:72:c5:4e:cb:5e:52:e3:06:
4b:39:0c:2e:29:4f:14:33:4f:46:a3:da:e9:20:92:f6:9a:f1:
9b:11:b3:69:a1:09:9c:5c:a3:ad:da:84:b8:2c:c4:93:50:d4:
95:fb:fa:40:c0:4d:8e:33:88:c6:24:20:29:8b:6c:6d:24:ed:
d0:31:2d:4a:ac:b5:d0:18:15:a5:03:44:b1:a0:31:b4:b0:e3:
b8:d2:78:da:2e:30:e8:d9:dc:45:83:52:80:1a:23:34:4f:92:
13:e3:5a:50:2c:76:03:39:50:4b:be:12:68:54:d3:c4:a1:fe:
1b:1d:2e:ff:42:3b:6a:77:40:5f:2e:d4:09:fa:5b:a2:3e:de:
33:98:8c:18:1d:8e:67:47:fa:7c:04:77:c5:10:30:4f:fb:32:
f2:e4:91:b9:ce:04:7e:af:e3:05:f1:8d:5e:02:60:b9:a0:7c:
81:e3:74:15:29:64:5a:e4:94:7b:fd:b9:b0:ac:21:57:c3:9a:
03:52:30:6b:fd:57:3f:ea:5d:a0:2c:21:63:81:0b:f1:43:1e:
3d:6c:f6:2d:b3:ef:18:32:58:3b:a3:25:47:8a:92:27:d1:bb:
ba:ca:f4:71:31:7a:5c:84:95:ae:77:5a:9c:5a:af:f8:48:31:
5a:14:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:59:28 2025 by rpki-client