Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json)
Hash identifier: PLyoXWlpA3139hBCZyJxQz93QKyfrhhqrOdrgNNz53M=
Subject key identifier: EF:27:0F:B1:E6:AA:D4:FC:FA:66:FD:A3:03:70:08:39:71:B5:A2:01
Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Certificate serial: 019655A5471653356284AF65F88B04BE8942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
Manifest number: 0B
Signing time: Mon 21 Apr 2025 00:00:16 +0000
Manifest this update: Mon 21 Apr 2025 00:00:16 +0000
Manifest next update: Tue 22 Apr 2025 00:00:16 +0000
Files and hashes: 1: GQ42kTqn472NU0Utg1aKLG7W0bI.roa (hash: oM3P06tzeH7/sG3RLnC5jVN3WHhv6hvEc5nYDWBm418=)
2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: 37m9KZ7T1yNAJpKNqR7I30v2Plfq0orM5jQo5KtAUKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:47:16:53:35:62:84:af:65:f8:8b:04:be:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Validity
Not Before: Apr 21 00:00:16 2025 GMT
Not After : Apr 22 00:00:16 2025 GMT
Subject: CN=ef270fb1e6aad4fcfa66fda30370083971b5a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:16:94:db:b7:b7:35:c4:6f:42:e3:5f:9d:
62:43:73:4c:55:68:85:ae:86:d2:a3:26:31:9a:41:
7c:b1:ba:b3:6d:13:65:36:13:47:6b:6c:e0:52:dc:
21:9f:b8:7b:d1:85:cb:25:44:09:1f:e6:64:b8:5b:
33:81:e1:32:e5:dc:8d:6a:e2:6d:b5:b8:62:7a:f3:
e4:a9:84:06:bc:8c:01:38:e3:b1:de:53:6a:46:16:
cf:c4:7f:27:55:56:81:42:41:d7:7b:c4:ce:7d:ad:
94:6f:36:14:74:a7:c6:cd:02:21:66:4e:ad:f5:52:
fc:35:0a:02:cb:2c:c6:67:16:e1:c2:16:34:41:1b:
46:57:ad:09:cd:d2:d6:c0:65:12:a4:64:f1:5c:c9:
56:52:7e:bd:49:96:0e:bc:5f:ae:21:a5:f8:0f:79:
f7:99:e0:82:be:74:47:c5:3b:30:eb:b6:8d:e6:b0:
03:f5:e4:63:c4:58:d1:f8:76:f8:1b:0d:fa:4d:24:
9b:ed:e0:6b:81:51:89:fd:1e:1b:00:72:a3:2f:b7:
e9:5a:6b:fa:43:61:b7:f2:e5:56:f9:bf:a3:64:79:
76:ad:3c:99:ec:54:7c:5a:a3:fc:dc:e4:8e:6b:40:
31:af:57:1d:22:c8:e0:df:9a:4b:e6:86:a2:c5:d4:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:0F:B1:E6:AA:D4:FC:FA:66:FD:A3:03:70:08:39:71:B5:A2:01
X509v3 Authority Key Identifier:
keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:df:95:2a:63:0f:8a:e8:3b:84:4d:17:9f:61:f0:2e:0c:fc:
51:ed:65:dd:76:b0:f2:2f:0b:61:3b:00:5c:01:9c:74:3a:de:
81:71:3b:77:a9:97:bb:59:38:4c:d4:13:f1:a3:5c:3d:59:3b:
bb:27:d3:ae:14:50:46:d7:bc:48:38:5f:a9:d5:28:33:0c:ed:
b3:b2:ff:29:5c:fc:47:51:31:a6:7d:2f:55:e1:cc:dd:be:78:
fa:87:66:98:b6:2d:0b:ad:1b:59:cc:a2:b7:ee:0c:ae:0c:b8:
ec:89:ef:df:81:6f:90:f1:fd:23:75:59:95:a9:1b:d3:5b:a7:
f8:5a:43:57:d5:41:d5:73:8f:89:2f:0a:b3:b1:8e:c5:30:0a:
10:ca:c5:49:c5:08:41:33:ea:61:9c:8b:69:1f:3c:39:b1:ab:
8f:1f:97:5f:61:a9:09:4e:ee:c7:55:c6:f5:39:5e:4c:a8:df:
25:de:61:5e:42:8b:b1:1f:f2:26:9e:df:5d:23:fa:bd:d2:5f:
09:5e:23:f3:4d:3c:95:7c:9e:66:1a:09:70:2f:ca:c7:ce:a3:
a5:d3:38:71:45:ab:0a:72:8d:ac:b8:da:12:de:0f:ed:19:9f:
69:3e:6e:4f:4e:6d:a5:6a:27:9c:a4:8d:1a:13:2a:21:b5:0a:
b4:5d:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:39 2025 by rpki-client