
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier: XBYszmJU/JMwd9ABRzCeybWZMWjc8k37nEHuCejWk+k=
Subject key identifier: 21:8B:19:C6:B6:FD:8A:E5:29:95:62:19:16:F5:85:F3:77:FA:16:95
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 0196CACE33C3FF8C7431E0123A7E4A4B46CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number: 089B
Signing time: Tue 13 May 2025 18:00:33 +0000
Manifest this update: Tue 13 May 2025 18:00:33 +0000
Manifest next update: Wed 14 May 2025 18:00:33 +0000
Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: Dd1azmPhHkaroVV293qdtE/8FfGfb4/bfslP1VMcmYc=)
2: sQzNar_4JseiL9UNqmWgBSd_A68.roa (hash: 6EjRuBumMEH87fOFnzWurdMoQt/hXzQEoZOF6qbEThc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:33:c3:ff:8c:74:31:e0:12:3a:7e:4a:4b:46:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: May 13 18:00:33 2025 GMT
Not After : May 14 18:00:33 2025 GMT
Subject: CN=218b19c6b6fd8ae52995621916f585f377fa1695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:be:22:86:2a:ee:44:c9:ac:46:58:68:28:
0d:50:e3:c7:67:70:c3:2f:1f:2b:ad:f9:3e:37:87:
6f:cf:ac:08:53:8b:0c:67:72:56:8b:53:c9:5b:34:
2a:68:4b:d2:80:80:70:97:c6:d5:77:43:e5:6b:2a:
5b:a1:92:29:fc:c8:23:75:01:b5:52:f8:b4:a4:8a:
3a:3d:69:1e:21:79:ce:fd:9f:38:b0:27:44:84:d7:
cf:3f:a3:11:27:34:bf:3c:1a:b6:a5:c6:b3:0f:c6:
2d:d8:f0:81:69:42:b7:81:13:6b:e1:81:db:ac:0a:
a0:df:26:f9:8a:d7:74:05:7d:35:1c:92:1f:14:04:
5e:86:b3:39:4c:43:38:93:e4:54:07:2e:fb:89:97:
4b:2b:b1:51:c7:c3:74:5f:11:25:9d:c5:73:14:60:
8b:d1:b1:69:69:76:51:9f:7f:bc:e8:90:d7:d8:fa:
29:a8:42:d0:29:88:02:28:50:6e:b8:38:58:ac:aa:
1b:c8:da:d4:c9:44:4c:19:fe:1d:18:ff:f6:48:6e:
0d:3b:69:6e:c3:2c:38:21:33:51:ea:da:c9:a1:51:
1f:01:cc:e9:b8:2a:48:52:e0:a2:1e:07:12:14:89:
2e:b9:d1:d2:b5:d6:25:80:26:92:68:2c:64:f3:5b:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:19:C6:B6:FD:8A:E5:29:95:62:19:16:F5:85:F3:77:FA:16:95
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:59:33:0b:4d:ed:47:49:22:2b:af:aa:5f:46:f9:b0:3e:
ec:ac:16:21:25:7c:69:cc:c6:04:53:25:2f:83:63:7a:59:40:
a2:1e:50:62:b9:2f:73:26:7d:cb:c5:eb:05:1e:86:06:fb:9b:
3c:c8:07:97:24:ba:fa:7f:e1:0c:c6:b5:1d:70:91:6a:3e:0c:
a4:3c:3c:0d:a2:b2:de:0c:92:84:7b:d1:a8:39:96:8f:a1:a1:
b2:70:a3:3d:c9:30:70:bb:98:2f:4e:69:f3:82:f7:1a:ee:92:
ac:f6:d8:f5:35:fa:f9:fa:c9:a8:3d:54:36:63:89:b8:d7:9f:
ab:80:0c:ef:52:14:b3:09:de:88:87:37:0c:d2:95:8b:57:e6:
cd:2a:ea:43:45:0a:76:a2:55:f4:e4:d1:68:d2:de:4e:5e:d8:
5a:f9:c6:3f:7e:a2:14:ad:05:16:f1:bc:11:a7:bf:cd:cf:3a:
00:75:51:ed:f8:5d:34:dc:e2:44:d3:f8:f9:ed:57:02:0d:96:
45:e8:07:dd:36:e6:57:7e:c1:fa:b0:4f:85:20:77:ce:91:21:
57:88:95:02:35:2f:d8:f8:f4:27:2f:7f:8c:1b:a7:61:4f:5e:
9f:8e:29:ab:a2:25:5f:6d:a4:71:af:dc:63:61:02:97:95:5e:
01:3f:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:33:05 2025 by rpki-client