Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: 6P+p60+dB7ge5W71XIGr3mHON+Kc41MEIvqWpctPLd8=
Subject key identifier: 00:25:DC:2A:93:84:0E:C3:B6:0F:97:0C:05:9F:E5:40:EB:54:12:56
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01965011D6E5AB8EE192EED166371907EE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0A1F
Signing time: Sat 19 Apr 2025 22:01:08 +0000
Manifest this update: Sat 19 Apr 2025 22:01:08 +0000
Manifest next update: Sun 20 Apr 2025 22:01:08 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: 3orOQGFf/odaDeRsOBYwJwgXdpcG0QHQKE+KLo8awM8=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:d6:e5:ab:8e:e1:92:ee:d1:66:37:19:07:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Apr 19 22:01:08 2025 GMT
Not After : Apr 20 22:01:08 2025 GMT
Subject: CN=0025dc2a93840ec3b60f970c059fe540eb541256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:2d:39:71:24:e2:d5:58:98:9d:8e:89:2b:
20:b5:cb:9f:1c:7d:8e:26:d9:9b:7d:79:6f:20:a6:
bb:09:0d:ed:be:66:41:c4:10:d6:f6:1f:7f:10:26:
3b:03:d3:dd:45:ea:9d:07:53:32:96:18:94:53:b7:
79:3f:25:d3:8c:ee:96:16:0d:d9:4a:81:3a:8e:62:
f7:80:0d:c6:06:ae:01:af:2e:3a:05:d2:3d:61:c6:
6e:ff:3c:fe:b2:e8:dc:5f:cd:0f:f3:95:bd:8d:91:
f1:ab:51:60:42:55:41:a6:5e:da:e2:e0:fb:9a:f9:
e1:14:05:d6:11:30:d9:95:40:b1:e8:ec:be:5a:47:
a0:9c:8b:84:8f:69:3c:5b:0f:49:e5:8e:4e:e8:96:
35:b0:71:ce:3a:9b:85:6a:b9:60:9a:06:43:92:f6:
94:71:6b:d8:2f:a4:39:62:cc:18:3e:7c:de:8c:8f:
98:22:d9:0e:b6:1f:8f:cc:e5:2a:e4:ae:28:f0:36:
d8:45:09:5c:48:79:41:b8:64:85:fa:ac:2b:88:66:
cc:1d:c5:8d:56:c8:4c:8b:8b:81:86:c5:af:37:97:
77:ff:18:f3:12:4e:9f:0b:f6:53:cb:51:ab:9e:87:
04:65:94:a9:71:ab:4f:93:b5:3c:bf:02:3d:62:51:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:DC:2A:93:84:0E:C3:B6:0F:97:0C:05:9F:E5:40:EB:54:12:56
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:22:94:ce:fb:5b:39:8f:92:fd:46:d0:ea:55:63:2f:c2:
06:44:a8:ea:b8:33:f9:75:3d:85:92:79:9c:e1:46:41:1a:0a:
fe:91:cc:3f:bc:69:6a:35:90:30:8e:ca:70:4a:3d:88:95:45:
27:c5:d2:15:0b:50:37:9a:aa:15:7c:da:ca:5b:df:a6:85:2d:
1d:f0:92:a1:e8:5d:15:4d:d5:dd:fd:30:e4:98:4f:96:99:fb:
90:87:84:04:38:2e:39:0c:8d:15:18:cb:63:bf:4f:37:f2:93:
db:52:a1:b0:bc:8c:db:06:98:50:57:ef:0c:ce:a4:9a:6e:d9:
a8:2b:76:36:c9:69:27:a9:92:7b:bf:05:1c:2b:53:c1:2b:43:
03:0e:e8:95:fd:b0:b0:dd:d0:4f:62:84:92:e6:15:38:ae:5b:
c3:23:fb:ec:3c:a0:b8:ce:8d:d2:ab:8c:7b:74:fe:3a:6a:97:
6a:ba:6e:05:7b:90:b1:a3:d7:3e:c0:6b:1c:cd:1e:4f:38:e2:
6e:e3:dd:d2:d8:8b:b5:f7:d2:ce:d9:c1:aa:e5:a4:b2:ca:72:
98:19:2e:71:51:fd:63:c4:f0:93:06:59:db:e1:56:00:01:70:
c4:82:81:a2:0d:6b:a1:fb:11:b5:e1:9a:c6:39:12:1a:1b:c6:
19:5d:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:40:11 2025 by rpki-client