Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: Rgl3/I/vzcLaI3EJKbj9xpZB5cvtdZBqUh9goHdLw14=
Subject key identifier: 77:3D:D6:20:82:62:7C:72:23:AC:EE:2F:2B:FF:A4:20:D3:5D:1B:2E
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 0196BD499827739DA1D995D949A2BA525FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0BDD
Signing time: Sun 11 May 2025 03:00:38 +0000
Manifest this update: Sun 11 May 2025 03:00:38 +0000
Manifest next update: Mon 12 May 2025 03:00:38 +0000
Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: Dgh2jd95VO8d7UFua5jAoNMi4LGHTzc3OKHegUQuhkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:98:27:73:9d:a1:d9:95:d9:49:a2:ba:52:5f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: May 11 03:00:38 2025 GMT
Not After : May 12 03:00:38 2025 GMT
Subject: CN=773dd62082627c7223acee2f2bffa420d35d1b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:3f:35:56:b6:4d:19:0c:61:c9:ad:46:56:
b6:1a:b8:aa:e5:e6:3d:3a:e1:cb:d6:ba:f8:6b:86:
4b:9b:c7:da:0d:e6:93:07:cd:9f:56:9b:15:76:15:
72:8f:79:13:58:d2:39:81:a2:75:56:6b:2f:22:29:
41:80:db:8b:22:30:ca:ba:5f:58:26:19:72:3e:d6:
27:4c:97:43:22:c1:db:b3:44:fe:ba:b4:43:0a:48:
2c:c7:38:4b:f6:4f:c1:12:7f:37:63:c7:5e:08:77:
95:ee:94:38:71:ad:b1:8a:b9:8e:5b:78:b7:bd:e6:
73:c3:b5:e8:82:76:fb:02:fc:5e:cb:a2:fd:f6:ba:
1c:c7:42:d9:ff:f2:fa:13:34:05:04:5c:26:00:1d:
d7:e8:c9:1d:b2:60:e1:a7:51:e0:1b:0f:12:c5:98:
38:69:2b:c8:30:e3:b5:f4:e7:0b:df:7e:fc:fc:f3:
e5:c2:5a:de:0b:e2:24:30:65:92:a7:57:8b:eb:b4:
e8:68:44:30:8f:bf:62:ec:bb:fd:15:36:90:51:f6:
5b:df:c7:0a:60:79:8c:0b:b0:4c:84:85:43:8a:aa:
b7:36:f6:41:db:7e:59:37:4b:96:3c:d0:23:26:91:
ae:09:b9:ef:48:b8:29:20:57:66:fe:48:37:28:68:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:D6:20:82:62:7C:72:23:AC:EE:2F:2B:FF:A4:20:D3:5D:1B:2E
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:91:50:4c:e5:17:16:63:93:71:2c:14:34:63:c4:e3:77:fa:
f8:3b:63:95:98:36:07:e7:a0:96:0c:09:a9:1d:f0:a9:bf:9a:
77:2e:52:92:1e:74:43:58:ef:74:3b:69:14:52:76:34:69:62:
5c:5b:18:c4:97:b4:52:ac:e0:c3:32:17:3a:18:4f:b1:34:0a:
c8:e8:33:46:78:77:ae:ad:8b:8d:c3:5a:63:ec:c3:8f:de:06:
e6:1c:e9:a6:67:60:4f:f7:55:60:95:2b:ec:5a:83:b2:dc:85:
1b:0f:29:be:64:1b:79:23:1e:24:6a:77:b1:cf:a8:d6:fa:2a:
25:17:62:57:ee:66:f5:64:04:ae:2a:0c:ea:1f:cd:bc:a3:76:
36:5e:9b:2a:e4:c5:34:78:ee:e6:d9:fb:15:8e:c4:01:5d:71:
e2:f2:3a:76:3b:16:29:f6:2e:ca:a4:4d:68:17:1c:3f:b1:de:
7e:08:ab:0d:98:02:db:18:e5:f6:d6:e8:09:b4:33:dc:b1:71:
6c:71:4f:4f:e0:52:6a:80:fb:a2:f0:ff:8e:c7:91:e9:6c:bf:
97:ed:c1:23:c4:9f:37:ff:0f:93:04:3c:2f:91:6f:1b:4e:6e:
ce:91:9a:82:be:32:57:d5:27:ac:a1:af:fc:fd:ee:ea:1e:eb:
9e:a9:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:19:32 2025 by rpki-client