
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: NVdt57swyo+r0BmhP0eGZRDLLEKoxnXbwgFihSEy2DE=
Subject key identifier: A0:76:29:1F:80:A8:15:A6:DA:08:B1:22:A2:3B:95:5B:1F:0E:F6:48
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 0196D62DCB8109E6EE12133120821CF1ED14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 1542
Signing time: Thu 15 May 2025 23:00:47 +0000
Manifest this update: Thu 15 May 2025 23:00:47 +0000
Manifest next update: Fri 16 May 2025 23:00:47 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: O63PKL6U60tIrJX9a3ratkJUCAimHq94gIFItNr53i4=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:2d:cb:81:09:e6:ee:12:13:31:20:82:1c:f1:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: May 15 23:00:47 2025 GMT
Not After : May 16 23:00:47 2025 GMT
Subject: CN=a076291f80a815a6da08b122a23b955b1f0ef648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:76:0b:66:76:84:a0:e9:8e:18:96:a4:95:
73:09:d0:89:f3:4f:b5:62:b0:7e:d9:a3:33:d4:eb:
76:68:47:1b:dc:3f:c0:12:b6:c4:00:d1:46:6f:07:
0c:2e:4a:2b:be:6f:a9:f0:d6:65:df:f0:77:b4:47:
ee:ae:44:87:2c:6f:f6:c1:a1:5f:42:dc:57:2e:34:
0a:85:e8:d9:9e:bf:35:22:90:f1:70:31:ce:71:c4:
cd:6b:16:f6:c7:0f:44:dc:76:f6:60:55:d9:ae:74:
7a:14:8e:9a:f4:50:47:e6:36:bc:ea:89:57:60:c9:
6b:77:47:f4:be:59:ab:73:54:71:70:48:4b:dd:bc:
cb:17:6d:3c:d9:36:6e:4a:b4:b1:75:13:b6:1c:5e:
35:6c:2b:c6:a6:23:ae:31:33:9f:c3:5f:94:f6:ae:
21:39:91:d3:e8:69:9e:04:43:e3:ab:b6:8c:8a:13:
98:07:e5:74:67:50:a4:47:1d:db:b1:11:11:e2:eb:
4d:d3:6d:73:67:b3:37:b3:44:6e:ed:f9:31:f4:3f:
49:d8:28:4f:e1:03:5d:f2:54:43:eb:6a:10:82:d7:
a2:0a:2a:f0:0f:af:52:f7:2b:66:ea:da:2e:7e:dd:
b8:2d:9a:1e:ae:89:39:5e:40:0c:a5:7f:5f:11:84:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:29:1F:80:A8:15:A6:DA:08:B1:22:A2:3B:95:5B:1F:0E:F6:48
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:77:3b:f8:3f:84:20:27:60:f3:0b:ea:60:fa:b1:67:82:bf:
81:67:07:10:44:93:10:8d:9e:a0:91:ef:31:ff:f6:c1:ad:ab:
91:e4:3c:86:3a:f3:05:d4:13:a3:c3:57:fe:91:21:c3:4d:44:
31:c2:94:cd:4e:d5:89:f3:40:e6:d7:86:d8:2f:86:5d:e3:c0:
b5:ce:ce:ac:52:e7:6e:cb:1f:02:78:fe:f9:71:89:9c:11:07:
b1:ce:60:d9:fa:a5:79:39:12:1a:64:43:a7:ca:5c:57:45:6c:
a5:a6:31:b5:f1:d9:70:47:e7:2b:39:a8:57:03:db:09:ab:cd:
cf:d1:5d:a7:39:49:92:67:2f:4a:fc:30:98:69:fa:fc:c8:4f:
1d:f7:39:33:24:e7:85:3c:20:2a:62:53:ed:7d:79:96:56:ab:
ee:36:5c:d5:70:18:c7:82:a5:e2:9c:a4:00:45:a0:b7:62:b9:
51:e3:f4:03:86:e0:81:47:0a:80:b7:fb:ff:8b:4e:5d:fb:38:
51:35:b0:d3:37:01:45:03:03:91:5d:a9:dc:f4:8d:62:7f:b1:
86:31:a8:3a:88:3d:e9:d2:a5:6d:ce:c2:20:38:cc:ec:43:e6:
2e:bf:1e:fa:42:33:47:3c:53:45:63:ac:2a:98:b2:c2:61:7b:
69:76:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:31:52 2025 by rpki-client