Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: Z9HMm/uVz2Euyhz4an5WzPhTsU5tXDL8DzTLcDZUJAM=
Subject key identifier: 92:C5:04:D3:A0:60:77:A9:5E:B8:0A:EB:AA:33:69:E1:97:35:89:D8
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 0196AB0C201E6CD21324272C4B7083A1A236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 04D5
Signing time: Wed 07 May 2025 14:00:20 +0000
Manifest this update: Wed 07 May 2025 14:00:20 +0000
Manifest next update: Thu 08 May 2025 14:00:20 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: wKuo/rrCVunS5FOJkubJcjKhQ8bVh+SWMcnNYu5Q2VM=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:20:1e:6c:d2:13:24:27:2c:4b:70:83:a1:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: May 7 14:00:20 2025 GMT
Not After : May 8 14:00:20 2025 GMT
Subject: CN=92c504d3a06077a95eb80aebaa3369e1973589d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:95:6c:d2:75:c8:93:34:1c:ee:35:bb:d4:
6c:27:b7:aa:fd:2b:21:4e:04:5c:cb:44:5a:db:95:
a8:31:75:e0:80:0c:88:00:6a:be:ca:e2:5c:b6:32:
54:2a:7c:4b:58:db:db:14:19:42:0d:b5:51:d9:9a:
23:ae:a7:17:2e:86:c3:a9:36:c4:f5:e5:12:d2:69:
44:32:f6:51:af:93:7c:6f:8e:a1:51:32:65:51:6b:
00:dd:79:23:6b:c8:da:cb:d6:3b:d9:7a:7c:2c:72:
60:65:13:5c:ce:c2:6e:2d:6b:71:24:76:a4:17:84:
89:6d:96:30:7d:8d:f1:42:8c:83:2c:dc:26:c3:c9:
c0:6d:19:35:d0:dc:f8:8b:61:82:3e:0b:96:44:c5:
e3:0a:66:07:fa:79:12:45:b4:58:8a:47:7b:7a:ec:
cb:6a:bb:d5:62:cf:cc:e4:9a:9b:a7:0a:12:ec:6d:
1c:dd:fd:f5:a1:d0:02:ae:dc:8a:42:6e:73:eb:7b:
0d:f8:30:60:4f:05:57:e9:30:16:30:c8:25:4e:2b:
40:a1:83:8d:43:d6:04:28:ba:d3:46:c9:23:84:ae:
32:d8:05:69:2e:0d:a5:af:2b:48:98:36:db:e4:31:
55:dd:cf:da:50:5a:ce:09:13:52:a2:ad:08:26:fa:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:04:D3:A0:60:77:A9:5E:B8:0A:EB:AA:33:69:E1:97:35:89:D8
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0b:95:ba:fa:a2:e8:1a:41:aa:4c:27:fb:05:59:98:9d:8a:
20:5a:0f:b9:14:30:d5:1e:6b:7e:49:bc:45:b2:36:89:fd:ce:
07:59:5e:c2:ff:f4:e8:0a:1d:36:ad:39:b1:65:68:da:7f:31:
6a:b2:a1:17:88:30:b5:11:98:50:8b:c2:d1:17:b6:4c:2d:22:
1d:93:6e:3e:14:6a:08:61:e3:23:d3:3a:83:54:5d:90:77:63:
e4:c3:84:65:64:59:55:34:aa:1b:b4:24:50:d8:d3:32:94:06:
68:15:e1:a5:7a:3c:c8:18:23:75:95:35:76:1f:88:07:ae:9f:
0c:f5:e4:aa:68:22:61:18:f5:ca:2e:93:2d:cd:62:ac:c9:90:
4d:62:90:de:b4:bc:4f:b1:73:96:97:71:4e:a9:3a:92:47:00:
10:ee:1a:3a:36:72:f7:85:ec:d3:a6:cb:5e:97:47:5f:b1:ab:
8c:44:1a:6d:b4:49:6e:70:46:ea:64:f0:af:5b:f6:1a:c2:31:
f5:d9:db:60:9c:27:f5:5f:d0:eb:9e:2e:6e:53:e0:12:64:45:
9e:80:57:06:d9:ad:c6:5d:eb:de:a9:4f:bf:78:f4:a6:0f:4f:
78:e9:77:d5:26:20:95:e5:9c:bd:e5:06:be:56:49:6e:26:65:
c9:9a:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:36:39 2025 by rpki-client