Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: RZxeRmeqbRn6hKuTS59cR5qwAwaDFr/qVhKqG4erHUs=
Subject key identifier: F1:2E:46:C5:56:35:51:E7:A9:1C:29:2F:15:EB:AF:D4:4E:BC:A2:29
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0196564A1E229800F8AF37DCF4E9F4D1B13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0995
Signing time: Mon 21 Apr 2025 03:00:19 +0000
Manifest this update: Mon 21 Apr 2025 03:00:19 +0000
Manifest next update: Tue 22 Apr 2025 03:00:19 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: DJ1KYSjYHE/bBeEUKfgW4AOsoWr0S5pJVgVsWPLHpDA=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:1e:22:98:00:f8:af:37:dc:f4:e9:f4:d1:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Apr 21 03:00:19 2025 GMT
Not After : Apr 22 03:00:19 2025 GMT
Subject: CN=f12e46c5563551e7a91c292f15ebafd44ebca229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:bf:b6:1a:8a:b8:c6:25:0c:a5:5f:b2:32:
2a:3e:39:c5:75:23:ef:31:5e:98:0d:8f:22:ff:e8:
d2:3c:34:0d:c7:37:34:de:10:bd:89:34:de:2b:49:
fa:2d:32:ff:21:c0:32:f0:ac:46:e1:8e:6f:6a:04:
33:bc:57:0e:b3:fa:44:f8:eb:93:29:c1:af:20:28:
92:62:98:44:93:cf:9c:2d:a0:3d:e6:b8:72:5e:9b:
c9:44:d9:a6:a5:88:bd:12:e0:3e:81:67:1c:47:49:
64:fd:b4:d1:f4:9f:0a:e6:3b:ce:d8:69:c5:2c:d6:
9a:52:7d:3d:5c:62:0b:24:c8:09:5c:fe:57:80:de:
47:72:81:f2:44:fc:45:0b:e7:c6:64:28:3a:71:ab:
a3:4f:3a:92:4e:6e:22:d9:31:d5:d2:7f:7c:68:02:
2e:13:7f:b5:33:48:a0:f9:14:98:7d:a7:e7:a8:da:
21:64:29:40:c5:bb:2d:e7:78:c4:2f:3e:d0:48:fb:
f0:99:a6:67:e0:d9:96:f9:59:4a:a9:d5:98:08:ee:
49:1b:92:64:f0:da:eb:c3:9a:f2:66:de:fb:8c:52:
9d:d7:ca:43:7e:f6:34:58:9e:db:9c:8b:95:46:0b:
1f:e5:4c:a1:b6:e4:b9:71:68:fc:e8:37:f4:d3:fa:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2E:46:C5:56:35:51:E7:A9:1C:29:2F:15:EB:AF:D4:4E:BC:A2:29
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:34:c3:88:02:30:c2:76:5a:02:9e:07:c8:a6:15:3e:15:31:
96:b1:62:3f:be:af:0c:58:4f:9f:e2:cf:23:fe:fe:ad:0e:b5:
4a:da:d4:61:a3:cf:88:3a:10:db:ad:ba:b4:47:fa:5c:c4:61:
01:e6:d3:ca:53:48:f5:75:19:ed:65:af:07:7d:78:75:92:7b:
b7:3b:d2:f6:da:52:51:73:cd:b8:a6:e1:82:82:78:e7:21:42:
2a:e5:21:c0:67:03:47:22:27:20:2e:43:a1:32:cd:81:a8:c4:
61:90:a9:93:c2:5f:e0:05:b0:c9:1e:8a:84:74:fb:12:75:9b:
10:87:07:4b:de:cc:93:ba:69:4b:68:7c:1d:2e:88:04:52:77:
8e:49:79:cc:c8:0c:94:65:86:23:6a:8b:4c:b3:63:35:65:f5:
19:ad:5f:87:7b:5b:ac:b2:6e:2c:d4:45:95:bf:4e:77:69:3a:
50:24:4a:a5:0f:fb:97:0d:d2:27:c8:b8:f4:f6:65:d0:31:97:
18:81:74:c1:b7:2a:9f:4f:b8:a0:a9:9a:17:9e:c5:62:4b:44:
33:e1:fd:0c:29:27:5a:b2:ab:cf:d7:30:c5:2f:6a:d8:b1:14:
3c:d8:cf:3d:13:b4:50:3d:ed:dd:f8:88:d5:ea:67:27:a2:73:
bc:6c:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:22:36 2025 by rpki-client