Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: O4vWnxyBgECo8fylJEtcAQvki356l78rzaKMRDfq4VU=
Subject key identifier: 19:5B:93:45:BD:B5:2A:0B:CB:58:12:16:45:07:CB:56:9D:E5:D0:5C
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 0196CF4FECA9342509EC62C47C7E1A3E7C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 1540
Signing time: Wed 14 May 2025 15:00:43 +0000
Manifest this update: Wed 14 May 2025 15:00:43 +0000
Manifest next update: Thu 15 May 2025 15:00:43 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: 3OVV9JhovZ9TK28rAFY1X6lvzGiRdz2FhHJLJdy4Z4I=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:ec:a9:34:25:09:ec:62:c4:7c:7e:1a:3e:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: May 14 15:00:43 2025 GMT
Not After : May 15 15:00:43 2025 GMT
Subject: CN=195b9345bdb52a0bcb5812164507cb569de5d05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:84:3d:8d:12:cd:91:40:0c:40:70:51:e5:
c3:16:aa:aa:59:85:8f:b8:ae:1c:ec:c3:d9:c2:c4:
d7:9d:9f:74:19:7c:4c:19:c3:2a:06:f0:e1:92:18:
02:18:6d:ca:23:69:26:83:b2:3e:3d:3e:e2:89:d2:
a8:20:d1:e1:50:ff:f8:be:76:01:14:5a:2d:15:cb:
89:86:e9:fd:4c:f4:13:7c:e4:32:e4:90:d8:23:5c:
ca:52:63:7b:6d:c8:e1:36:7b:c9:85:0e:57:2c:4a:
7a:47:fb:f1:22:51:e4:ab:1a:2f:77:d4:0d:62:de:
f2:13:e8:13:5b:e6:c9:aa:f2:e3:2a:90:c3:bf:af:
b4:da:6e:b6:77:ac:cb:37:06:b5:05:45:56:33:01:
2a:e7:a9:03:93:c1:5c:90:cc:ee:c7:ac:35:7b:26:
16:84:49:a7:90:0b:d3:15:5c:34:8c:3e:44:a2:e6:
f1:64:99:27:ca:ab:42:2d:52:9f:38:8b:f3:ed:77:
1e:5d:4b:53:31:a6:4f:79:56:3c:84:a2:ed:4a:ab:
8a:d7:d4:35:8f:ca:e4:40:eb:4d:98:33:43:51:91:
99:1a:3e:73:4a:72:2a:cd:d5:0c:c5:5f:14:d8:cf:
e7:ce:ba:97:1f:98:31:b0:77:82:4c:16:7a:fd:b4:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:93:45:BD:B5:2A:0B:CB:58:12:16:45:07:CB:56:9D:E5:D0:5C
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:16:5e:c8:50:3f:33:db:5c:71:3c:f4:55:b2:8e:b4:71:6b:
d5:08:6f:5b:56:c9:74:29:e6:6c:19:c3:b4:9d:7b:52:b3:f3:
6f:cf:10:de:d2:4b:d1:04:91:61:6b:b3:dd:d5:1f:01:bd:1d:
39:09:ec:dd:52:7c:04:18:77:af:47:65:32:13:62:15:8b:0b:
a6:18:a6:4b:1f:07:3f:42:5c:26:b3:9d:bb:66:c7:ff:98:3b:
7e:d5:4d:ef:ca:ae:bd:17:dc:ec:4d:7f:28:1c:a3:ad:c9:7c:
c2:e8:f3:9b:af:76:28:5a:9e:3e:5f:ea:2f:3e:83:87:6a:26:
5a:fe:b0:46:87:75:fb:ef:a9:85:70:e5:e5:58:ec:14:1f:47:
c6:7b:96:53:88:d9:40:3c:18:5c:da:4a:b3:52:fa:5f:91:7f:
5a:cf:3d:00:d6:ec:cb:a6:67:ce:67:54:cb:66:a6:93:1d:c0:
d5:af:ec:bd:dc:07:86:fb:9f:88:fd:90:29:83:70:80:b3:43:
1f:9b:20:65:b9:7e:05:3b:50:98:da:c1:51:0d:c3:7f:dc:cd:
e0:a1:45:7b:d6:38:ce:39:14:a1:22:06:be:ab:5c:e1:a9:fe:
6c:89:45:ed:a8:86:7a:70:58:9c:0c:96:d0:d2:34:2f:7c:09:
60:c9:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:30:31 2025 by rpki-client