Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: Xu3qTpOBZyqxmjwj5HlDx4GTsY1UHTn6/lxk8OlB3MY=
Subject key identifier: 2C:73:C5:C8:E1:9E:10:C5:A5:25:8A:E0:C8:B4:C8:97:43:52:E9:6C
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 0196A0BFDD31A5FDD398F7591E932F7252C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 11E5
Signing time: Mon 05 May 2025 14:00:50 +0000
Manifest this update: Mon 05 May 2025 14:00:50 +0000
Manifest next update: Tue 06 May 2025 14:00:50 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: JN5Psfgri3xNc3ISy8wpuMGBU3MeGWT0JLIkytzQFSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:dd:31:a5:fd:d3:98:f7:59:1e:93:2f:72:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: May 5 14:00:50 2025 GMT
Not After : May 6 14:00:50 2025 GMT
Subject: CN=2c73c5c8e19e10c5a5258ae0c8b4c8974352e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:27:83:04:3a:d8:6f:0b:47:18:ce:8b:9b:
d6:8a:56:d4:98:09:f9:b2:79:54:0d:5d:1f:a2:a6:
cb:18:4f:8a:4f:5e:20:e3:63:73:24:58:71:4d:7f:
66:39:17:9f:aa:47:79:2f:07:52:13:77:64:cd:7f:
2d:26:39:db:03:2a:a1:c6:66:20:f9:ba:64:bd:68:
dc:e2:56:06:e1:61:73:cb:5f:d9:a0:de:96:9d:3e:
82:2c:31:4c:ce:ee:90:0f:fb:f3:f7:9d:54:05:7c:
06:43:5a:46:fa:d8:69:b1:6f:c6:93:89:cd:b3:d4:
af:fd:ae:88:96:d9:42:e3:97:55:54:d9:56:1d:4d:
08:de:ca:0b:49:03:9a:08:5e:fb:8c:ed:b6:2b:74:
3c:46:e8:f6:17:ae:ea:75:1d:b7:35:92:df:0b:cd:
e9:d0:7d:3a:ca:55:5d:53:80:2f:17:b0:2e:3f:00:
ea:31:7e:ad:af:b8:b9:8b:15:e7:75:1d:3c:b2:74:
1a:99:5e:0e:8f:81:71:d2:9a:6f:9e:f7:be:50:65:
7f:ba:14:b4:38:52:12:5c:32:88:08:9a:a7:59:2e:
6b:05:cd:a9:f6:07:18:6f:73:4e:58:97:6a:6e:62:
82:8a:50:77:06:69:23:44:86:31:7f:ed:a7:8c:11:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:C5:C8:E1:9E:10:C5:A5:25:8A:E0:C8:B4:C8:97:43:52:E9:6C
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8d:a6:07:c1:7d:3e:a0:ac:63:8b:d6:3d:8b:d0:38:1f:33:
28:e5:77:b7:70:c9:ee:19:a9:8c:08:ae:33:ff:15:0f:1e:d6:
6b:28:c2:cd:38:50:f4:6b:52:33:88:59:36:52:8b:97:6b:4e:
88:c4:d1:6f:2a:d2:a1:2e:b8:e4:d6:0c:57:1a:66:aa:cf:70:
6c:18:a8:f8:00:4e:f4:f4:70:ed:15:49:b1:d8:0b:b1:65:d9:
56:bc:ca:d1:5e:d1:df:92:36:60:e2:9b:13:87:88:eb:d2:9e:
43:23:a7:43:51:32:fa:6a:36:9f:6b:4e:57:61:b8:a1:7d:0b:
9e:3c:ed:a3:72:70:4c:15:ca:f0:88:54:c5:55:42:9a:90:9e:
92:03:45:74:80:53:63:ec:fd:64:c7:51:c7:a3:3d:20:bd:b7:
04:a4:b6:31:44:3f:45:f5:51:3b:2b:d8:d4:78:fb:31:53:d8:
16:17:d7:dd:d0:df:71:48:7e:e4:d9:a8:b3:bc:c5:ac:f1:80:
87:d1:16:e7:27:73:02:8a:9d:d5:f6:ec:e2:38:0e:5e:5f:50:
0f:90:0a:66:17:bc:1f:b2:60:46:6e:39:35:ba:62:35:c2:bc:
2f:11:a4:fe:66:a0:f9:43:37:2e:06:15:e1:15:cd:44:17:24:
19:54:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:11:04 2025 by rpki-client