Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: n7xGcJV6ufu+wtyhAZovsqfeiJg1D4T4DS1MPphXeBw=
Subject key identifier: 60:2A:7C:A4:F0:3C:28:E5:A7:D9:1B:C4:71:CD:78:DE:43:E0:08:5F
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 0196B8FF41B0C9AACB7D9CA3D04775C2DB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 0FDE
Signing time: Sat 10 May 2025 07:00:58 +0000
Manifest this update: Sat 10 May 2025 07:00:58 +0000
Manifest next update: Sun 11 May 2025 07:00:58 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: 3z9W7+jhvadmX/mU3etFKEfNFoeo2F8qTPl1pHTCXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:41:b0:c9:aa:cb:7d:9c:a3:d0:47:75:c2:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: May 10 07:00:58 2025 GMT
Not After : May 11 07:00:58 2025 GMT
Subject: CN=602a7ca4f03c28e5a7d91bc471cd78de43e0085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:52:d8:d0:e1:f8:eb:5b:32:e4:ee:aa:a8:
56:36:cf:c5:a6:90:5c:32:29:4e:6e:dd:21:88:7d:
39:0a:b6:5d:59:e2:7b:6a:af:41:7b:c8:8d:ab:8b:
80:69:b2:e0:20:90:01:0d:d6:0a:ec:d6:c7:76:fb:
f5:d3:84:2b:40:33:de:90:2f:c3:1e:90:d1:3b:b9:
25:81:ba:08:e9:83:56:16:bc:4c:f7:f3:5c:b9:3e:
d8:b9:a6:78:d3:3c:c5:04:ef:2b:58:ca:06:3d:9d:
7c:93:1f:df:38:5e:ed:15:fb:c4:0c:f2:f4:84:53:
e0:96:f2:74:d7:b6:fe:da:24:68:91:9a:e2:ba:ea:
d0:49:c3:a9:07:62:40:79:81:cf:09:27:09:81:fa:
2f:57:05:f4:9c:67:3f:f8:cd:cb:04:42:2f:5e:60:
09:91:5e:72:8e:bb:5e:10:cc:e0:e2:6b:a4:4c:7b:
cc:6a:e4:77:86:3a:4d:3a:a4:67:62:e0:dc:39:9c:
6e:e9:bc:bf:db:f6:d9:25:4f:d3:c4:53:e3:80:32:
17:86:0f:e5:fb:ed:ec:48:64:b9:f1:55:06:42:6e:
c0:ce:6d:6b:10:59:b8:78:dd:c2:4a:0e:a3:4b:11:
51:3a:ad:ab:cf:19:c7:ba:7f:79:86:87:f8:0f:9a:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:7C:A4:F0:3C:28:E5:A7:D9:1B:C4:71:CD:78:DE:43:E0:08:5F
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8e:f1:85:11:82:9c:ff:02:f5:15:7d:60:7d:92:83:bc:77:
a3:13:9a:b6:92:0c:a0:05:ad:0c:8a:a9:03:60:85:f0:57:fa:
fa:98:3f:b3:69:81:7f:cd:80:6a:14:52:0a:e3:ca:a1:02:70:
2a:ef:b1:d3:48:0c:58:2f:eb:1e:1e:9b:a1:b3:04:31:cb:13:
51:7c:62:0d:3c:6c:3f:3f:5b:95:d8:29:c0:8c:34:be:9b:9e:
3c:da:54:d7:79:9b:7f:22:64:be:e6:c6:43:03:23:e4:c1:d9:
4c:8a:de:0d:bd:c2:0a:ac:7d:dd:69:02:5b:ff:0a:a7:ee:d5:
70:26:99:2f:df:56:ab:f4:a4:29:06:e3:3d:c3:1c:46:7a:4a:
25:19:08:69:15:96:37:c2:eb:7b:b4:9e:94:10:59:b4:e9:11:
f9:c4:a4:0b:3e:ac:bf:aa:f9:23:02:1c:2d:f8:db:ad:7c:e9:
67:1c:a3:ca:d7:53:12:2a:31:22:3c:f6:33:25:0b:6d:7c:74:
06:9a:b9:70:89:6a:5c:e5:82:d5:ac:f2:ff:ec:31:fe:63:0c:
69:8f:e8:12:30:b2:9f:bb:6c:07:3a:42:e5:80:46:9b:31:f5:
96:9a:b9:46:b7:71:67:9a:a7:f2:ed:f8:d6:d1:73:a4:34:1d:
44:27:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:19:09 2025 by rpki-client