Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: 6jQ2gP+BKrMfNcM9E1m+RRGwvOUys/M3zhOyjgZ2ywg=
Subject key identifier: 8A:42:F1:88:74:F8:75:FD:C2:DB:EB:00:C1:C9:B6:05:98:0D:38:6B
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0196C6839EA5A3006F5133DB2C6F8FB16019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 22:00:36 +0000
Manifest this update: Mon 12 May 2025 22:00:36 +0000
Manifest next update: Tue 13 May 2025 22:00:36 +0000
Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: jT4xJNXkXqLfHd7xL/1EjsOIiqpd/M2kzDzD0EbNXv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:9e:a5:a3:00:6f:51:33:db:2c:6f:8f:b1:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: May 12 22:00:36 2025 GMT
Not After : May 13 22:00:36 2025 GMT
Subject: CN=8a42f18874f875fdc2dbeb00c1c9b605980d386b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:e8:4a:21:89:ee:2c:2d:f6:8d:fe:df:d3:
35:e1:4c:a1:0c:c6:5e:9d:b4:78:49:9c:8a:08:46:
f6:8b:b7:3f:70:25:2b:07:fd:c0:69:70:c5:d4:71:
6a:fc:2a:5a:ce:03:57:40:66:18:1d:3d:10:c7:b3:
5e:44:78:6d:fe:0f:af:ea:9a:1b:07:df:78:0d:88:
fe:b6:5f:c1:78:b7:06:01:8a:8d:23:80:d4:17:10:
dc:9d:dc:c9:c8:04:2a:c4:37:1b:43:2e:fa:05:3c:
4b:1e:df:3a:9f:85:58:58:80:35:43:f7:cf:b3:b3:
4c:72:ac:7b:3d:06:4c:14:55:12:16:63:82:53:70:
25:c0:46:9a:2d:9d:c7:5d:0b:b0:37:80:27:94:ef:
36:d4:13:2c:0e:8d:93:79:98:97:84:ec:c6:b4:94:
1b:12:c2:77:c3:4b:a5:32:36:67:bb:02:c3:98:4b:
96:ad:a2:bf:49:15:87:1c:8a:e3:47:d5:8b:a9:86:
4a:f2:08:a6:60:97:5e:79:db:74:f4:52:ab:5c:cd:
aa:3c:7d:2e:fb:80:37:28:74:4f:b8:65:da:71:05:
4a:74:f4:3d:d7:67:a9:58:00:52:97:36:08:be:d8:
9a:20:1a:66:6f:b3:85:0e:a9:36:c5:cd:3c:f7:01:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:F1:88:74:F8:75:FD:C2:DB:EB:00:C1:C9:B6:05:98:0D:38:6B
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:51:95:4f:20:2a:14:a3:ed:e3:1b:15:ee:a7:53:de:5b:
30:6c:89:b6:e3:39:92:64:9a:3d:a9:3d:a9:3d:07:9b:f8:a0:
ff:43:62:27:74:af:01:de:18:30:ec:14:21:ff:92:36:08:f8:
43:81:1f:13:95:b7:b4:90:e4:de:3d:ed:c9:2d:65:60:1c:1e:
8a:64:66:75:b3:74:7f:36:0b:2c:59:f1:7c:54:47:a5:a2:2b:
76:68:47:1d:79:55:54:2e:ff:79:91:c7:d0:fc:71:87:d1:46:
19:7c:2a:1b:53:7f:aa:34:aa:1a:8e:71:18:66:09:57:4e:3b:
3d:b6:65:f6:99:44:0a:a1:b0:c7:34:94:43:49:97:92:bb:9e:
1b:23:3a:25:16:b4:82:1e:72:5e:84:dd:1a:12:f5:56:43:03:
b3:bf:96:cd:97:c9:be:e8:fb:76:1e:56:35:49:02:01:b7:fd:
ac:f7:b8:52:b8:2f:44:e2:bd:ed:1a:78:51:e9:e2:27:ce:b6:
03:67:b8:b5:6d:18:8b:2b:14:8b:c2:b8:2a:b5:85:39:d5:fa:
c2:bb:ea:b6:6d:41:ff:6b:de:44:0c:6c:cf:c6:fc:6d:72:ad:
67:1d:8c:a8:df:c8:92:af:76:0f:ff:67:46:ec:ad:9e:2a:d9:
17:1d:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:16:10 2025 by rpki-client