Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: 8z71fX1CDkE3SYVnrjqKJlMNfoQLXEHP0VP+TeHWdxk=
Subject key identifier: D0:20:9D:43:F4:F9:0E:8F:64:72:04:07:F4:8A:66:11:FF:19:5E:1B
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01969DF605E7A28C650DCCF0530F3A954C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1205
Signing time: Mon 05 May 2025 01:01:08 +0000
Manifest this update: Mon 05 May 2025 01:01:08 +0000
Manifest next update: Tue 06 May 2025 01:01:08 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: 7E8FTZ+9ZNnx4Qymoq+ascLfZClNOljoaAh5P2qyKe0=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:05:e7:a2:8c:65:0d:cc:f0:53:0f:3a:95:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: May 5 01:01:08 2025 GMT
Not After : May 6 01:01:08 2025 GMT
Subject: CN=d0209d43f4f90e8f64720407f48a6611ff195e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:fb:83:f7:68:0c:86:f0:fe:11:25:c4:59:
0f:be:75:4f:70:25:e1:b7:2c:8d:63:44:03:51:25:
8f:b4:cd:74:b7:df:1c:a9:39:4e:a5:9a:19:e1:43:
6f:0b:f4:64:61:8d:ac:bf:89:1f:88:27:33:48:64:
43:a3:dc:64:68:39:fc:21:6a:8f:80:6f:48:24:d8:
40:1f:4a:d9:c2:49:e8:42:28:1e:70:b1:35:75:21:
cf:19:27:d0:ab:19:9a:4e:32:cd:59:bb:ff:21:4e:
8c:49:d0:3e:02:0d:5e:bd:46:47:51:cf:cf:5e:74:
46:e0:4c:8b:71:bf:aa:4e:b8:c7:bf:00:cb:c2:cb:
1b:1f:ef:ec:3a:60:90:df:c2:e9:8a:07:a9:ee:73:
72:e5:07:13:66:0e:97:c6:7d:68:bf:2c:8f:1a:35:
e9:9c:dd:45:eb:78:4b:68:86:6d:ff:48:ef:af:ef:
ca:d3:0a:50:85:9c:9d:1b:5d:a1:34:f0:5c:ed:87:
ed:49:b9:69:56:cb:c7:d7:82:e5:f3:55:4e:12:cd:
13:72:c8:cf:a4:c6:5f:07:23:9c:58:56:ca:97:6d:
b1:30:3e:b7:be:a9:9f:15:06:0f:c9:e1:1c:e8:26:
0e:ed:c8:a9:f0:8b:d8:6d:f4:94:59:67:5a:55:5e:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:9D:43:F4:F9:0E:8F:64:72:04:07:F4:8A:66:11:FF:19:5E:1B
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:60:e5:2f:a4:af:61:79:72:6c:aa:aa:e1:41:9b:63:c7:
5c:63:33:1c:df:ee:e5:55:df:f9:66:ec:a2:0d:f9:c2:ce:ab:
ca:51:51:6f:39:32:52:03:44:95:7b:e6:4a:3d:94:ca:b5:c5:
a4:8e:86:d3:d4:3e:50:c3:ba:bf:1b:1f:1f:3c:3a:49:4a:b2:
fa:54:13:26:56:9c:68:18:29:74:bb:15:97:50:6b:68:56:25:
1b:ef:e7:f9:71:64:d4:47:2d:72:21:1d:18:82:3e:54:3c:86:
33:90:a4:9c:5b:04:30:e2:8b:26:45:c4:b6:5f:ab:a0:21:f9:
1b:14:70:67:24:d0:4e:29:b7:d9:29:a1:4e:23:be:f9:bd:c3:
7c:b7:13:16:23:27:f6:c0:e0:76:98:a8:f1:b6:8e:5f:c9:46:
21:b5:49:cf:0a:8e:55:6b:a2:de:26:68:ca:88:35:64:32:eb:
12:c7:0b:d7:a7:67:9a:82:81:77:f6:da:0c:0f:48:63:d7:a9:
26:77:de:e4:97:2f:1c:96:8a:2a:6d:bf:5f:e9:17:0f:11:44:
af:57:e6:ab:5f:19:66:45:ba:62:c3:85:8f:f3:33:e3:30:30:
8f:12:11:f2:de:cb:3a:9b:9a:68:ef:2f:3a:c6:77:e1:c4:5b:
ce:d1:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:54 2025 by rpki-client