Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: EjHlcY5R4SbY0Di6TyDuPvx9ps+9rVPdjFPfVDMG5RM=
Subject key identifier: 9C:A7:19:7F:D0:15:EF:9B:77:28:32:54:AF:41:7E:4A:83:77:D6:D9
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 0196BD81627F670D79BE4FFE992182756A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0C15
Signing time: Sun 11 May 2025 04:01:35 +0000
Manifest this update: Sun 11 May 2025 04:01:35 +0000
Manifest next update: Mon 12 May 2025 04:01:35 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: oUAtUMF+aMS8KtLmFRGa2b677uQx/Ns2E1qcICYOIoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:62:7f:67:0d:79:be:4f:fe:99:21:82:75:6a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: May 11 04:01:35 2025 GMT
Not After : May 12 04:01:35 2025 GMT
Subject: CN=9ca7197fd015ef9b77283254af417e4a8377d6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:11:9b:31:95:8f:90:af:57:d1:86:0f:60:
6f:d5:4b:99:34:29:fe:83:2a:dc:c7:31:62:81:e8:
5c:d9:36:f3:b2:e8:2a:ac:ca:cf:9c:1d:6f:01:62:
ef:79:c1:50:7c:8f:c7:18:28:65:b0:53:82:37:fe:
29:cd:be:61:f6:91:cc:11:bc:57:52:97:08:f5:f7:
ca:0a:b5:df:7d:44:8a:c4:15:b2:3e:ce:6f:25:19:
7a:19:b0:6b:5c:dc:b6:69:bb:82:5c:4f:4d:73:95:
51:fb:fc:40:21:7d:f4:fd:83:56:fe:17:9b:74:0b:
9f:9e:7b:67:09:87:3b:ec:ec:d8:c6:ff:f8:3a:bf:
14:56:79:67:da:6b:00:d5:74:bf:78:34:c9:d9:71:
64:93:07:32:d5:8e:92:38:9b:0f:6f:b8:dd:52:e9:
81:e2:c7:9b:d2:09:53:b0:c2:95:72:a8:86:4b:b5:
59:29:b3:fb:ed:0e:1d:b6:00:23:c6:55:dd:3f:ee:
f8:bb:f2:08:fb:32:ac:de:f2:0b:05:87:64:a3:35:
00:42:74:65:3d:d3:b3:35:70:a0:23:a4:d9:dd:1c:
f9:f8:c1:ca:d8:98:20:3e:11:af:a6:d6:a5:c0:4a:
1e:68:5d:9f:5e:c3:21:06:3c:7e:56:5d:9c:44:d7:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:19:7F:D0:15:EF:9B:77:28:32:54:AF:41:7E:4A:83:77:D6:D9
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:74:1e:f9:05:82:c8:9b:af:36:00:08:49:8c:34:d7:ad:10:
32:63:4a:02:6b:5b:46:23:1e:05:88:b2:8a:a1:49:99:35:d0:
b4:3d:0a:14:3c:3f:cb:de:c8:66:cd:b8:80:d9:c7:55:17:ab:
3d:80:58:ca:f5:b3:7b:98:67:ff:96:49:5a:65:b9:e1:d5:25:
3b:34:af:58:3f:16:12:93:0a:65:52:1f:7b:37:b0:9a:5b:88:
d4:17:6a:26:f1:03:3b:f0:e8:cb:9a:0d:65:66:08:5f:08:06:
05:f6:69:a9:bf:be:cf:43:26:e4:21:ac:e4:4e:5c:94:c7:5d:
0f:a3:cb:58:61:56:12:a7:81:22:8d:9e:01:f4:06:5c:f6:07:
02:af:2f:50:24:6c:ea:15:96:1c:80:7e:37:d5:3e:76:ab:9c:
1a:fb:84:a4:4f:a3:1c:1d:8c:d7:39:3e:f8:ac:f3:6a:72:96:
03:51:62:4a:31:86:33:1c:8b:01:10:d2:69:6d:b2:94:1c:1e:
bb:16:7c:0f:32:6d:99:42:b9:b6:9b:b4:6b:3a:7a:ff:ad:62:
22:17:40:1f:48:ed:fd:48:58:18:f7:2a:e5:e0:7b:11:81:63:
88:02:0e:64:a8:6d:2a:d8:d6:1b:4e:d8:dc:45:5b:2e:ea:71:
c7:ef:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:37:47 2025 by rpki-client