Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: ljcTCSRWOTEWgy7dbDHqUbJzJX65thiKoHOVo75QuX4=
Subject key identifier: 23:5F:CC:87:D2:4A:EC:A3:C1:DC:52:CA:F3:92:32:97:35:72:D5:52
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019654C984890FB541E4403226CD4AC6740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 13D7
Signing time: Sun 20 Apr 2025 20:00:14 +0000
Manifest this update: Sun 20 Apr 2025 20:00:14 +0000
Manifest next update: Mon 21 Apr 2025 20:00:14 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: +Z4+LNkso6l/zetu63/pEOUTeXtfo6QYIEGYs5FQ85k=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:84:89:0f:b5:41:e4:40:32:26:cd:4a:c6:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Apr 20 20:00:14 2025 GMT
Not After : Apr 21 20:00:14 2025 GMT
Subject: CN=235fcc87d24aeca3c1dc52caf39232973572d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:e5:9f:57:ca:19:8d:8e:f6:d6:ae:ae:b4:
89:1a:d1:97:dd:54:18:6e:c9:d0:67:b2:cd:7e:47:
4b:d4:18:c8:d1:fe:91:ca:07:a2:5c:a8:66:d7:74:
39:a3:66:c4:ce:8d:fe:f7:ca:ed:59:1c:f9:5d:6d:
f9:30:a2:ac:96:b3:01:58:ae:eb:df:f4:3c:46:07:
c7:9c:98:65:dc:27:c3:de:ce:44:f6:b4:bd:a2:a2:
e5:70:3a:8c:91:f2:58:c7:33:b5:cd:79:f9:19:05:
52:9d:85:57:9c:c0:a5:72:22:e4:07:f0:8d:08:7b:
70:10:ca:71:78:c0:89:79:2b:c9:b8:1d:5c:56:08:
6f:82:ad:6d:c1:6e:67:ec:4c:a5:09:3c:9c:f9:ae:
6f:2c:37:3e:46:24:d4:5c:21:b9:84:84:3c:d6:64:
d1:ca:ab:7d:85:78:b6:b2:6b:36:fa:4e:49:2b:47:
87:43:71:7d:9e:1e:f4:ac:46:8f:78:34:20:70:fb:
78:d5:2e:9e:b0:ba:63:1f:42:53:3b:99:5f:8a:f7:
60:8f:85:9d:c5:3d:49:08:05:51:55:bd:81:ad:a0:
df:b6:74:73:d4:fc:80:25:f8:8a:3b:22:be:7d:d3:
41:ff:ee:df:81:d9:77:c2:ed:80:f3:74:99:56:2d:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5F:CC:87:D2:4A:EC:A3:C1:DC:52:CA:F3:92:32:97:35:72:D5:52
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c7:61:e8:96:34:f0:a0:6a:26:29:a1:96:4a:1e:a7:df:74:
4c:03:c2:0b:70:4b:19:cc:eb:28:b7:47:13:ec:ee:70:19:fa:
af:b4:94:13:1e:61:26:d0:b3:78:1c:b6:c9:ee:2d:db:47:e8:
3f:86:cc:b1:c8:42:3d:97:e5:8f:13:45:83:75:5c:56:09:8c:
9c:35:d0:fd:55:53:88:4e:74:af:1a:f7:fd:b2:87:0e:6a:e3:
27:fc:a9:8b:02:ee:86:2b:d0:db:a5:73:1d:29:da:ca:0c:3c:
aa:4c:29:af:f4:64:53:32:cf:6e:97:fb:b5:c4:bd:84:a9:6a:
8c:d3:90:44:a3:18:86:e0:a9:25:83:bf:f2:f2:22:0f:d1:8d:
3f:d5:a7:0e:5b:07:dc:2a:16:7f:48:40:72:2d:72:b3:98:c7:
00:5f:af:c8:03:e5:66:86:fd:0b:74:7d:33:28:3c:83:3b:ff:
dd:a6:25:aa:1f:73:9a:fd:d1:72:e4:84:11:cf:1e:1c:93:34:
e4:41:ba:66:dc:8d:a0:1f:8b:b6:b3:7d:d8:dc:eb:15:75:7b:
d5:0e:8c:88:e2:92:e0:12:b8:08:2c:40:39:e7:b0:73:df:e1:
ae:1c:f7:b6:40:e4:c6:9d:14:71:a9:1b:04:bc:b1:cc:cb:ef:
c6:28:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:47 2025 by rpki-client