Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: YGSF3oRp6IDhs4udbkxtl2MyfUWU027jqDNSfllHVSU=
Subject key identifier: 42:DB:2A:15:84:CE:00:6C:76:09:C5:C2:6D:45:02:C0:73:23:39:05
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 01969ED1348EBC949E409F93A677AE085399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 03EC
Signing time: Mon 05 May 2025 05:00:32 +0000
Manifest this update: Mon 05 May 2025 05:00:32 +0000
Manifest next update: Tue 06 May 2025 05:00:32 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: N2RxFcczRGL9py5C6PlEzxBtninCySDZig2izb0jp8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:34:8e:bc:94:9e:40:9f:93:a6:77:ae:08:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: May 5 05:00:32 2025 GMT
Not After : May 6 05:00:32 2025 GMT
Subject: CN=42db2a1584ce006c7609c5c26d4502c073233905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:87:16:d4:fb:f4:fa:c8:30:bc:00:f7:34:
51:96:eb:c4:d2:b0:dd:51:57:2c:dc:39:51:15:9e:
9d:c2:a5:b7:5e:35:dc:57:da:ab:53:63:a1:64:81:
a7:5f:56:b2:ad:70:04:be:2c:96:4e:ee:4b:b7:52:
48:8c:73:a0:c3:52:ce:a2:eb:58:76:e3:19:8a:bb:
d4:21:e4:09:07:ac:da:4e:ae:03:99:8a:dc:cf:2b:
df:f1:f5:e4:4f:07:67:4f:ff:98:a3:fd:3b:c6:5a:
cf:0d:2b:d8:ca:56:d2:93:8f:0e:e4:93:19:3e:a2:
d5:ce:34:2b:41:6f:55:be:bc:7f:6f:93:23:46:96:
c4:19:79:35:43:75:52:bc:b3:de:87:99:e6:ee:b5:
dd:a2:95:6c:15:7b:4a:85:f9:0e:b3:26:65:ef:85:
66:fd:e8:f1:15:ca:a1:3f:3a:74:14:78:5b:ba:d8:
41:36:f5:e2:da:77:c6:5f:da:03:83:b5:87:27:e9:
e3:38:ee:33:23:7e:c0:a4:e5:66:49:ec:24:0d:8d:
c6:c4:a1:04:d5:17:88:46:10:64:03:d5:f0:83:99:
aa:45:19:2f:b7:e0:38:60:51:8c:c6:11:d5:2e:4f:
33:39:f4:69:ba:a0:a0:30:7b:8e:49:3e:81:39:f8:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:2A:15:84:CE:00:6C:76:09:C5:C2:6D:45:02:C0:73:23:39:05
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d3:97:15:c7:74:e7:24:40:60:18:0e:a7:35:eb:8b:9b:24:
3c:4b:70:b6:16:a5:28:18:0b:97:bb:a1:34:99:95:0a:fc:ed:
4e:16:dd:ab:6e:cc:16:f1:36:70:a3:31:27:5b:74:64:05:6e:
8d:76:59:1c:aa:5e:6e:d8:af:4f:a1:2c:78:7c:35:7d:f6:90:
64:b9:6e:54:16:b5:07:f6:38:a1:2b:3e:b2:27:28:48:db:74:
31:f6:bf:b3:b1:72:ee:66:f2:f4:66:e2:46:1c:3b:af:cc:86:
66:86:59:f2:80:b0:e4:7c:1b:36:b5:81:19:04:0b:1e:da:1b:
5e:2e:42:63:95:38:6b:53:0a:54:98:90:43:84:88:bb:80:25:
ac:58:4a:d4:85:cc:a2:ba:a1:fa:af:db:1a:ab:dd:96:81:69:
2a:bf:ed:21:f9:de:a6:dc:59:01:14:10:99:f0:2c:a8:b1:db:
4e:a5:a8:45:a8:8a:36:db:ed:21:58:42:74:ec:19:0d:4a:d7:
1f:98:3f:b8:c9:1b:c5:30:1b:da:66:fd:d0:1c:d3:e7:ce:51:
c1:e2:bb:48:2d:cf:de:0a:5f:99:0e:6c:ee:af:7b:7f:5b:a6:
6d:f2:e6:f6:26:7f:d3:a9:4c:5e:c8:8b:16:94:7b:d8:a1:8d:
74:a3:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:26:32 2025 by rpki-client