
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: +boagaDVtJHJsTM1rHi5pxDUpLLg/pCieeSHP8O6xxU=
Subject key identifier: 39:A0:37:4F:F7:68:6F:00:3A:C9:07:67:E9:E7:8D:30:77:A9:9B:F1
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 01965E71CEC9A782F15D258918A6534784AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 0D45
Signing time: Tue 22 Apr 2025 17:00:38 +0000
Manifest this update: Tue 22 Apr 2025 17:00:38 +0000
Manifest next update: Wed 23 Apr 2025 17:00:38 +0000
Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: JkBuX8YBpU58PFij4kInosOqldJkhtdLgrANYdZngGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:ce:c9:a7:82:f1:5d:25:89:18:a6:53:47:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Apr 22 17:00:38 2025 GMT
Not After : Apr 23 17:00:38 2025 GMT
Subject: CN=39a0374ff7686f003ac90767e9e78d3077a99bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:fc:97:4d:cb:b3:fa:1d:63:24:93:1e:2c:
3c:27:e8:e5:6a:9f:f1:2d:f2:2c:05:d0:0d:1f:cd:
62:35:96:bc:a6:5e:53:e6:75:a6:66:85:ae:c0:11:
37:ad:84:88:d8:a7:19:aa:a5:7a:5d:3f:4b:f3:df:
df:c4:de:10:79:e7:6c:cc:30:b2:e6:30:ec:bf:74:
6b:b7:dd:43:83:8d:af:a0:c4:fb:df:c5:15:51:a1:
9c:a8:41:e1:c0:0e:48:34:d9:0e:75:4e:9c:93:ca:
e1:93:8e:4f:8b:35:f2:c4:79:4d:24:73:8d:f5:17:
7e:6e:02:87:6b:61:d6:1b:22:12:e3:f7:7a:2f:38:
16:6f:bc:6b:f2:58:06:e8:5e:05:99:10:94:14:c2:
f4:ec:e0:45:af:0f:f8:a8:e1:a0:90:41:bb:95:b9:
65:9d:db:de:17:8f:b9:7d:22:4e:9d:f4:7d:e0:36:
3c:f6:12:80:a4:81:6c:af:6f:5f:6a:5e:0a:56:3a:
58:94:39:2a:6a:13:c7:d0:f9:a8:7a:e0:e0:45:6d:
53:1e:1a:66:0f:91:36:ec:9f:8b:79:f1:75:e8:c0:
aa:06:67:87:48:66:3f:b1:10:1c:6c:7b:3c:82:1c:
a2:3b:bd:e6:37:c3:da:35:3b:c8:c0:ea:a8:75:e8:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:37:4F:F7:68:6F:00:3A:C9:07:67:E9:E7:8D:30:77:A9:9B:F1
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:13:d7:b2:0c:f7:99:6d:50:34:d5:cb:21:86:ca:89:71:50:
08:2c:37:b0:81:03:06:df:b1:33:cf:c8:e0:5b:39:cc:59:09:
40:66:70:34:d0:d4:8e:5f:4f:8d:b8:cb:45:53:cd:f8:a3:da:
4d:9b:a5:7c:88:e7:28:57:1a:9b:31:b4:d5:da:cf:4a:85:9b:
86:56:4c:f6:fc:9e:50:de:af:62:b7:8b:d3:10:63:b6:c7:ba:
cc:ee:7c:e5:4e:ed:44:89:f8:41:15:1b:29:c6:94:c9:3c:d6:
75:07:f3:59:7a:f2:d7:81:97:ed:7e:2d:ee:72:8d:13:76:34:
46:f0:56:53:4d:b4:22:f7:97:ed:ce:5b:28:8f:8c:42:dc:82:
b0:35:61:c4:1f:2f:2d:23:b2:b8:f7:0d:29:97:52:dc:18:be:
75:00:59:9a:6c:e6:0c:65:a5:d1:87:33:63:41:e3:60:19:77:
26:b9:b2:df:01:6a:3f:b5:91:d7:3b:f4:bd:f1:59:eb:24:10:
af:32:c9:e9:e7:f1:50:14:c1:65:35:6b:80:8f:7a:80:fa:18:
5d:7e:cd:83:6a:19:2e:0a:3c:ca:46:47:a0:5b:0d:d4:f7:5b:
a0:c9:b6:68:2d:5a:15:d3:b7:82:35:47:b1:c0:66:88:90:e7:
93:66:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:58 2025 by rpki-client