Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: RiTUU4mDKmPA3tqYZxQGXmealwSimjB6j2bg7USNKqE=
Subject key identifier: A4:F3:0A:9B:F7:EF:44:F0:92:57:28:80:F3:A8:5E:3D:09:75:5D:9D
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 0196BFDCF526E2414122B0555C3C977DA6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 11D3
Signing time: Sun 11 May 2025 15:00:50 +0000
Manifest this update: Sun 11 May 2025 15:00:50 +0000
Manifest next update: Mon 12 May 2025 15:00:50 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: DlbHhrvidXbKbgTQVJWMUtkKd2zXCGUrM1Ei7YyqLpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:f5:26:e2:41:41:22:b0:55:5c:3c:97:7d:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: May 11 15:00:50 2025 GMT
Not After : May 12 15:00:50 2025 GMT
Subject: CN=a4f30a9bf7ef44f092572880f3a85e3d09755d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:ad:b0:41:62:c9:e3:34:6c:79:8d:83:c1:
bf:8e:5c:9b:6a:bf:04:b2:ef:29:5c:31:16:7d:a5:
23:70:c6:e5:97:fe:29:a7:ef:7d:b4:41:77:02:d1:
72:a9:39:67:d7:86:f7:d2:1a:f7:11:86:ae:71:0b:
98:2b:21:b3:42:23:8e:92:c8:99:87:4d:01:66:17:
25:fe:3d:f9:dd:8e:de:2e:d0:da:ee:e0:98:45:5f:
34:d9:e2:e1:e4:1c:29:84:11:ca:b3:75:a2:55:2d:
22:f3:fc:0b:89:d8:db:80:ab:3d:01:ea:8b:f0:20:
d4:2e:09:99:6c:c5:8e:fa:b3:fe:fd:a8:2f:f0:42:
e6:12:04:f5:9f:78:cd:e3:71:a3:8a:ca:da:62:78:
41:f0:28:2b:31:3e:99:e0:c0:bf:c4:cd:71:04:5f:
9f:84:cf:d2:d3:b4:20:04:ad:3d:a1:c5:4f:2c:bb:
2c:d3:6f:46:89:fe:ea:2a:af:22:ff:a5:b2:0f:ed:
c9:2c:e6:df:97:96:a8:62:f0:e5:3e:56:fc:8e:da:
94:41:f4:06:39:ea:79:ac:33:ca:b2:a6:85:da:14:
72:e9:5c:60:1a:40:ca:66:df:cb:57:60:f6:85:a5:
42:f1:01:ac:3b:4c:5b:78:12:1a:c0:6a:9c:3d:c7:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:0A:9B:F7:EF:44:F0:92:57:28:80:F3:A8:5E:3D:09:75:5D:9D
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:43:60:e5:17:71:1b:85:3d:9c:1f:c2:5e:e6:68:e6:4b:
26:c0:a8:6e:c5:f7:f0:61:f1:79:9b:51:9b:5f:e8:b0:96:2e:
ed:ee:d3:4e:f8:b3:74:45:4b:f8:37:99:c9:6b:ad:55:bf:c6:
ec:fe:7d:22:79:ee:22:b7:76:86:d4:36:51:cf:10:67:64:e3:
18:55:b9:e1:89:6a:94:1c:bd:4e:93:0f:d9:fa:cf:a9:9c:21:
8f:e1:5e:da:1d:17:02:83:09:24:9b:6a:d1:fb:46:ad:03:7e:
49:93:14:a1:00:83:53:b6:d3:16:57:42:9f:3c:ee:52:26:fa:
43:c3:f7:ed:c2:bb:2a:d1:3e:e9:14:03:11:9d:c5:b5:91:fd:
48:18:15:83:64:b4:7f:ee:07:a2:4a:28:c5:fb:b4:f9:3e:07:
f7:f0:3d:0a:af:00:4e:2d:61:9f:9a:4f:cc:9c:5b:f3:2f:18:
b7:56:9d:84:67:9a:fe:23:6a:19:03:95:ff:87:d9:61:0a:45:
db:31:45:37:0f:9d:9b:6f:7e:eb:1b:28:dc:c5:57:b5:77:93:
6f:cd:37:79:c4:15:1c:75:44:84:8c:11:fe:2a:68:44:78:56:
17:cf:8a:de:dd:c1:be:24:33:6f:31:d1:cd:81:9b:54:78:a4:
f3:f5:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:24:02 2025 by rpki-client