Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: Qm2T+BoTYPGH7uHS38M05Td7Z7QAWVcJXmx3e653uzo=
Subject key identifier: E5:58:B9:FA:25:68:9B:9C:33:1B:71:AF:9F:F8:65:27:DA:32:AF:7D
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 0196A0F6BEEF19E7343B2269C774F80DCB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 15:00:47 +0000
Manifest this update: Mon 05 May 2025 15:00:47 +0000
Manifest next update: Tue 06 May 2025 15:00:47 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: HqzCJuYwszOg80EJHtz+/ZcafN/4e1aNzDvMYGFOTrI=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:be:ef:19:e7:34:3b:22:69:c7:74:f8:0d:cb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: May 5 15:00:47 2025 GMT
Not After : May 6 15:00:47 2025 GMT
Subject: CN=e558b9fa25689b9c331b71af9ff86527da32af7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:5c:6e:8e:59:2f:b7:4c:18:eb:0e:cc:14:
b8:8d:16:a1:20:bd:94:da:b6:5a:0e:06:39:33:ea:
37:26:e6:00:a5:91:82:d7:43:a4:52:1e:e2:2a:42:
7f:8a:05:c8:94:61:6f:98:0e:f7:a3:a2:67:c0:3a:
29:e1:c5:58:b1:4e:5e:f8:b8:17:0d:5b:34:f7:fe:
9a:18:ea:30:db:d2:df:54:1f:c5:8c:13:b0:67:a6:
6b:19:41:fc:47:e2:7f:3f:79:cb:3f:4f:89:aa:16:
0a:00:ff:84:9c:6b:82:95:1b:4e:92:74:3f:b4:a2:
bc:01:1a:47:59:73:cd:89:c2:35:18:8f:b5:93:7e:
c0:c9:6e:69:d7:66:80:36:26:ed:58:a9:04:d4:52:
65:00:19:d3:34:3f:a2:06:75:05:a8:6c:10:19:1c:
7f:5e:0b:41:d0:81:f6:09:8a:0b:dd:87:f0:38:ed:
eb:bd:47:f7:5a:a8:c8:da:a3:b2:08:8b:c7:5d:f7:
75:88:c4:38:0b:a6:94:65:b3:cf:82:a4:ba:b7:cf:
01:89:b3:d9:f2:51:d8:fb:63:1c:e1:22:af:59:41:
fe:0d:c3:87:28:78:78:b5:6c:0a:7c:7e:45:93:30:
a8:05:28:36:2e:d6:af:d6:3a:f6:10:9a:ac:21:d6:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:B9:FA:25:68:9B:9C:33:1B:71:AF:9F:F8:65:27:DA:32:AF:7D
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d0:70:91:ec:1b:52:49:50:14:9e:0e:c3:69:13:83:f9:54:
db:33:f0:df:d3:60:81:ef:7f:63:8b:8b:c5:27:24:2f:98:4c:
1c:41:dd:59:65:2a:8f:bd:1e:37:90:a1:cc:3d:d2:af:00:b6:
b4:49:5a:c1:c3:34:ed:46:98:a2:4b:34:b1:79:fe:41:a4:43:
49:89:95:ad:30:1f:e5:01:b5:5e:83:b9:e2:ca:a4:0b:f0:45:
8f:a8:3f:56:83:45:23:cd:e1:29:ab:c2:dd:5e:c3:3e:42:f2:
2f:02:17:6b:77:b5:d5:d3:4a:45:8b:df:c2:f7:62:29:7f:c7:
99:56:bc:b6:cb:12:e6:f8:3f:4f:43:82:7e:8b:b4:2f:eb:8b:
a5:6b:2b:cd:53:28:0c:31:bf:3e:92:c5:01:f5:db:bf:74:bd:
43:89:22:f5:74:78:5a:03:58:c6:17:6f:fd:e3:bc:32:43:8e:
be:ec:3a:3b:3b:8d:44:76:39:0b:91:dc:e6:93:5d:8f:98:d6:
34:0d:c9:27:23:8d:db:a4:6a:08:cd:3b:c5:02:d5:93:bf:d1:
6b:cc:39:14:8a:03:69:04:2a:c3:8e:cf:e1:0a:42:5b:f3:33:
3a:3f:4a:68:25:27:02:ca:00:a1:7a:96:fa:df:1d:b4:e9:aa:
33:79:e3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:13:38 2025 by rpki-client