Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: dHWCPfcsPFAinpP/srJPYxLX15C68Bz1Y93UemS4vY0=
Subject key identifier: 8B:61:AD:B2:44:B6:86:8D:90:4B:8E:0E:A7:D9:64:72:CC:EB:B8:E4
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 01964F35D4CCD8D547970325BF0DB392FF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 0EF5
Signing time: Sat 19 Apr 2025 18:00:49 +0000
Manifest this update: Sat 19 Apr 2025 18:00:49 +0000
Manifest next update: Sun 20 Apr 2025 18:00:49 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: rC8iX8Wwlco+9/FoOI+9CjqJJOyUPF9PkvQ5SUsV5d0=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:d4:cc:d8:d5:47:97:03:25:bf:0d:b3:92:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Apr 19 18:00:49 2025 GMT
Not After : Apr 20 18:00:49 2025 GMT
Subject: CN=8b61adb244b6868d904b8e0ea7d96472ccebb8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:7d:0d:0b:c8:1d:86:7c:39:be:13:56:19:
22:bb:03:5a:da:bd:13:a5:25:4e:df:3c:72:72:ad:
76:f1:63:52:cf:bd:47:75:a4:33:5b:e3:1c:48:39:
7a:b9:2f:88:a8:24:f0:02:6e:89:94:01:dc:66:43:
4c:65:dd:57:99:df:a4:42:ca:36:7c:60:97:ac:f4:
fd:07:eb:1f:59:77:d9:f2:98:f6:98:ac:44:f5:80:
dd:e5:ac:8a:5a:60:73:ef:7f:35:8a:71:a0:03:63:
5d:aa:71:c2:74:49:14:28:bd:c7:1a:7c:97:18:ed:
c2:f2:8f:67:66:fd:a2:b2:05:29:fa:b8:34:68:c4:
45:45:21:57:74:58:57:89:73:4a:95:e7:fd:59:89:
2a:3d:31:4e:50:65:cc:5e:d0:da:ba:05:e5:66:c7:
21:ed:3b:fd:29:51:9c:74:a5:f6:f0:5a:89:de:1a:
ce:33:d5:ec:f3:7a:e8:f2:f2:c1:ae:eb:b4:2a:a0:
18:d0:5d:e3:d8:bd:dc:b9:a6:1a:dc:a0:fa:46:09:
76:95:e6:71:f5:6b:5f:b4:c0:1b:59:a8:50:63:31:
95:4c:31:74:57:97:a1:bd:77:bc:63:ac:f9:1d:cd:
23:0d:9a:91:8b:aa:d4:8b:34:58:d4:72:76:5b:9a:
6f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:AD:B2:44:B6:86:8D:90:4B:8E:0E:A7:D9:64:72:CC:EB:B8:E4
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:1f:f9:77:12:14:8c:01:71:58:c5:8f:02:e9:ea:02:7a:
2d:0f:5f:37:a2:dc:64:a9:97:5f:85:1f:29:23:1b:97:df:cf:
7f:a0:d9:7c:22:d5:8d:38:c3:3f:c9:6b:70:2c:93:f6:a1:ab:
ea:63:a1:57:2e:f1:02:90:2e:86:f0:0b:48:d8:97:2c:c0:43:
64:8b:3b:12:ff:b3:eb:10:48:38:98:3c:1c:c4:69:ba:32:45:
32:0e:df:5d:ef:6f:3e:27:7b:94:16:16:a9:8d:16:f8:2d:75:
41:b0:0e:05:b5:eb:10:c8:2b:56:7a:ad:80:92:cd:bb:96:4f:
db:bb:f1:f8:d3:cb:e8:c9:78:d2:6c:63:b6:62:0c:15:ef:2b:
83:56:31:b7:19:62:fa:b1:5f:b6:22:31:89:91:43:41:a4:d4:
ae:e7:d4:20:87:f9:48:f1:cd:5b:cf:2b:ea:24:73:10:60:5f:
d3:cc:9d:18:6c:57:4b:9e:52:5d:e4:26:6d:95:48:c9:2a:5a:
64:50:ed:09:d9:f9:35:51:02:af:9e:d7:d7:87:25:32:2b:e9:
f2:b1:6e:fb:db:5f:85:5e:a6:ec:ef:c6:07:74:97:cc:96:9b:
01:14:d2:69:6e:bc:30:0f:8a:60:e8:63:eb:26:22:b8:2b:75:
52:21:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:30:58 2025 by rpki-client