Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: 0vhcc3aqd6Gg8n5gJMPd4j3Kr2xRt0Z4MArE+moCa60=
Subject key identifier: 48:6D:F8:98:04:68:4D:2D:A2:CD:5B:7E:C4:4A:7F:6C:48:FF:73:DA
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 0196A61CAE9FFCF1EB92FE14FD798413EA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0A80
Signing time: Tue 06 May 2025 15:00:19 +0000
Manifest this update: Tue 06 May 2025 15:00:19 +0000
Manifest next update: Wed 07 May 2025 15:00:19 +0000
Files and hashes: 1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: 7mNxgTDR+Jsx0mbA7Rw0OjRQ/DZJ8YHMNEOxS71qm5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:ae:9f:fc:f1:eb:92:fe:14:fd:79:84:13:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: May 6 15:00:19 2025 GMT
Not After : May 7 15:00:19 2025 GMT
Subject: CN=486df89804684d2da2cd5b7ec44a7f6c48ff73da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c8:c9:39:07:67:4d:7b:80:4b:d2:d1:c5:08:
b7:06:55:bd:2a:4b:93:25:67:77:c6:1e:32:f3:10:
8e:4c:be:be:c8:23:ab:18:8e:f8:ef:0d:f9:94:7e:
11:e9:2e:02:45:2b:5c:2f:c1:5b:5f:6e:58:e0:cc:
dc:11:1b:a6:f6:76:c1:0a:bc:fd:67:32:d3:7b:63:
ee:36:9f:3c:8f:41:24:cc:06:a1:5c:61:d8:e9:99:
8b:9f:0b:40:10:63:c9:9c:26:17:9b:bd:c2:69:4d:
28:39:ee:c6:40:41:1a:79:26:0a:18:69:ca:67:1e:
a9:9c:98:e5:f0:62:4d:48:95:0c:c8:8b:08:ad:0c:
b5:a8:29:24:34:a9:24:23:a3:c6:05:7d:c6:8a:d4:
96:ad:52:85:c5:7e:43:a9:68:b9:11:f6:dc:41:51:
8d:a9:00:a5:62:ff:8c:2e:76:6e:ce:2b:9d:6c:de:
18:2c:c2:11:d8:ba:76:6d:a4:cc:9b:5f:a7:51:6d:
c6:39:ea:84:63:7f:90:08:41:02:fc:b2:23:69:3e:
15:bd:a0:a6:84:60:80:be:d8:f8:c6:5b:f5:1d:75:
e2:e1:71:e5:19:c5:39:90:d0:d8:ef:91:c9:e2:d7:
88:77:c0:11:7e:ab:52:b9:29:c4:27:ef:d7:2d:d4:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6D:F8:98:04:68:4D:2D:A2:CD:5B:7E:C4:4A:7F:6C:48:FF:73:DA
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:9b:44:56:a9:08:5c:37:3a:0c:1f:cb:f7:0e:d5:ca:68:
db:35:65:08:bc:bd:a3:95:5e:8b:a0:88:8c:22:cb:77:1a:61:
50:d7:8d:bc:18:16:fc:25:5e:e8:e8:af:18:bd:9e:b1:71:ee:
4c:69:8d:65:c3:c9:72:23:df:5d:f4:33:af:78:ea:53:69:0a:
82:3a:76:56:e7:3d:11:d8:30:bc:e9:cc:7f:5a:5a:cd:5c:12:
02:d6:39:2b:48:bb:a3:3f:c7:79:c6:fb:c7:74:d6:20:4a:7e:
90:61:be:16:50:be:ae:be:42:8c:3e:c8:64:86:9e:14:80:3f:
e3:9c:f8:bc:7c:02:84:64:9b:34:7a:a2:08:c1:4b:f3:6e:48:
17:3d:28:c1:c0:96:04:fe:55:f7:1c:13:73:e0:3a:bb:00:bf:
99:df:bc:f0:02:05:02:fa:61:0c:6d:a8:d6:42:ee:52:6e:70:
17:79:75:3d:fe:bf:1c:39:6a:c5:07:13:06:e4:bf:35:4b:c6:
8e:1a:70:a4:23:e6:a3:1e:c7:7c:b0:bb:52:a4:49:d8:db:ea:
7a:84:24:3a:7b:c2:2d:4f:7b:83:73:11:50:9a:1f:fd:b7:db:
e8:38:98:ee:35:30:92:17:7c:94:b7:bd:4b:e9:39:77:2f:a1:
9f:f1:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:06:48 2025 by rpki-client