Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: PotDMxH6povhZi+cJ0FqhHeeoSZneq8hnMP9mx/nD84=
Subject key identifier: D3:F4:5A:5D:46:15:62:03:10:35:DE:7A:46:39:41:93:A8:46:5B:7F
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 0196C571094C3986CD6FC53C1AEE52D8D4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 1494
Signing time: Mon 12 May 2025 17:00:41 +0000
Manifest this update: Mon 12 May 2025 17:00:41 +0000
Manifest next update: Tue 13 May 2025 17:00:41 +0000
Files and hashes: 1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: O4Ki7Ughs0OUlaDnCmaojU5V/ps2wJP5wpZpNE+fh38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:09:4c:39:86:cd:6f:c5:3c:1a:ee:52:d8:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: May 12 17:00:41 2025 GMT
Not After : May 13 17:00:41 2025 GMT
Subject: CN=d3f45a5d461562031035de7a46394193a8465b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:a0:bd:95:c5:75:e7:db:3d:6b:dd:23:d1:
7c:a9:f7:a6:8e:2d:0a:37:88:78:37:ae:0b:f0:26:
23:3a:34:f1:ad:a8:c3:b3:71:06:ac:d0:74:8b:d6:
08:ca:51:71:af:af:4a:47:ff:b6:eb:d4:f9:0a:be:
a8:7f:a6:ce:1b:83:b9:ac:6c:17:9e:72:c8:1e:98:
cf:85:f9:82:b0:15:40:98:b8:77:b7:05:ef:a8:4d:
d8:0d:7a:63:4f:28:73:96:de:ab:fd:ab:60:c8:f2:
e2:dc:8a:6f:d0:6e:87:e3:cc:1f:13:b8:31:75:a2:
0b:d5:e9:da:cd:5a:fd:bd:fc:35:0a:cc:36:d0:be:
b0:ff:96:e8:a8:08:07:f7:dc:c6:51:60:d2:bf:d5:
cc:22:a7:cc:4f:01:22:80:97:a2:7b:99:57:4d:60:
e9:72:cc:5d:4c:2f:0a:24:64:cb:84:8f:8d:2a:c3:
77:01:d6:57:cf:21:c9:78:b4:69:b2:bb:99:80:d7:
11:18:50:ca:eb:06:8e:47:5a:7d:de:47:1f:2c:99:
ee:0b:6a:70:39:af:a2:95:f7:7a:58:75:d9:16:47:
84:c9:f7:b9:d0:ec:e9:92:86:91:f4:46:78:07:7b:
d6:3c:ac:b9:f6:5f:75:c3:d8:ec:4d:c1:71:40:1a:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:5A:5D:46:15:62:03:10:35:DE:7A:46:39:41:93:A8:46:5B:7F
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:77:cf:5c:e5:d7:88:80:d1:f5:18:28:2d:ff:6d:55:75:1e:
bf:2f:2e:60:2e:9c:2b:88:a0:75:af:20:6c:15:64:8c:17:63:
11:d9:2d:25:3e:71:f2:d2:cb:ab:63:c7:31:1f:cc:f6:94:5a:
fc:7d:a1:89:4a:ba:19:64:b5:45:ed:31:7c:c2:b2:38:bc:4f:
14:74:74:68:ef:05:8f:37:8d:93:c8:9a:28:5a:e2:8a:7c:10:
2d:05:10:d6:6d:0a:b4:29:a3:a5:d8:f0:33:fe:c3:05:4b:fe:
bd:93:da:ef:c8:08:36:68:37:7b:ae:1d:21:4d:e7:f8:01:ea:
45:37:01:c4:d0:ec:1b:6d:c1:55:7f:bc:b7:84:8f:28:ef:31:
de:cf:59:25:77:7d:f5:42:8a:2c:c6:e8:7b:53:fa:5b:ad:38:
a3:ae:28:39:7b:ba:a5:44:77:e7:b8:e6:a1:1b:b9:87:c3:69:
e6:e1:c9:7b:ab:e1:19:89:8f:85:30:c0:7d:e4:49:71:82:ef:
3d:4c:49:6c:c8:e2:66:fb:84:d5:54:2b:bc:d4:4f:4a:03:09:
c9:2f:e2:0a:e1:b7:63:18:e9:84:ec:0b:3f:03:1d:2a:7f:3f:
7e:23:66:e7:49:82:e6:60:1f:48:da:40:87:f5:f4:ed:a8:c4:
8a:31:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:09:49 2025 by rpki-client