Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: 3ZcaHsrB7jWjLVj+VDGKg9uu19G0/bbbv0/nJnfY+Bw=
Subject key identifier: 1A:DF:AE:E7:2B:3A:84:8B:A9:9D:85:E9:03:7D:0D:D6:B7:0B:A0:19
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01963876BF06F51CE9B7574A7A747BFB3231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 021E
Signing time: Tue 15 Apr 2025 08:00:28 +0000
Manifest this update: Tue 15 Apr 2025 08:00:28 +0000
Manifest next update: Wed 16 Apr 2025 08:00:28 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: DaAomIvCBKjX2jc6RQf19oRhAPlphPa4pTzoHDSq2TY=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:76:bf:06:f5:1c:e9:b7:57:4a:7a:74:7b:fb:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Apr 15 08:00:28 2025 GMT
Not After : Apr 16 08:00:28 2025 GMT
Subject: CN=1adfaee72b3a848ba99d85e9037d0dd6b70ba019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:da:66:e2:4e:df:6c:fb:f6:48:2c:62:4f:
de:ca:78:36:b2:cc:28:72:66:e6:af:fd:2e:95:15:
42:80:34:66:44:ae:75:ea:0e:8a:b2:7f:0e:74:c4:
f7:3d:5a:41:72:3a:ae:81:02:4b:d0:b4:b1:c6:7c:
9d:df:12:75:02:c3:e0:4d:32:52:ee:17:c1:29:30:
87:b9:85:f0:3c:31:37:dd:1e:ca:55:98:22:51:5b:
d1:0c:db:b4:d8:2c:42:b1:f6:22:33:0d:4a:8e:e8:
e6:0a:08:ea:97:f9:c2:6d:4f:ac:ef:9a:8c:0f:aa:
5d:4f:14:84:d9:2f:ce:46:f3:46:6e:8d:a1:8d:38:
c8:4b:2e:00:b7:50:07:31:3e:f4:62:11:07:6f:09:
93:3a:83:a7:06:e3:04:3b:2c:89:b6:2a:1d:ed:8a:
c6:1f:f5:83:ea:9a:14:7f:53:1c:9c:09:ac:c2:f4:
59:ff:ea:c3:e6:f7:ac:9a:87:7d:5d:61:dd:e1:ee:
5b:9c:aa:d6:34:4e:b0:7b:09:dd:96:04:7c:09:21:
54:f1:71:b3:92:6c:34:bb:9e:ff:02:6e:c1:30:98:
f6:7f:f6:40:2c:5b:66:81:cd:9f:48:86:7c:ec:27:
ac:b6:13:89:4c:02:5e:55:6f:2c:0d:ac:9d:18:27:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:AE:E7:2B:3A:84:8B:A9:9D:85:E9:03:7D:0D:D6:B7:0B:A0:19
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:97:72:33:93:88:f5:91:99:bb:4a:a1:d6:51:f3:69:f9:
95:c8:d7:1f:c3:14:74:5f:82:81:2f:14:6a:86:75:43:0e:da:
47:9f:8c:33:bd:36:7e:c4:56:a6:53:60:c2:c6:62:9c:4a:69:
64:28:e6:eb:03:78:85:7e:b0:20:61:fb:e2:a3:67:8e:92:94:
af:d1:02:e8:10:30:d7:ef:50:b2:15:41:cd:59:92:12:11:77:
e6:bb:27:ae:1d:80:13:a9:5e:eb:d7:86:ae:1e:56:d7:96:8c:
6b:61:47:f0:80:89:d4:5b:92:79:b6:df:f9:31:4e:1c:51:db:
6d:d6:ae:bb:1c:c6:58:90:2a:62:b4:03:2c:79:d6:50:1b:37:
17:92:2c:d6:0f:15:95:c5:8a:a1:d7:6d:3b:3d:25:e5:5a:57:
57:ee:da:16:af:2e:4f:53:af:11:01:9d:2e:ed:2b:a9:98:cb:
ed:7d:5c:93:42:34:d9:48:e5:bd:0b:2b:3f:dc:23:8d:16:63:
14:91:5e:c3:01:90:53:04:02:85:a5:64:22:c9:86:b8:34:f3:
c5:a9:98:e2:40:29:9e:f2:3c:b9:ce:ae:71:43:88:93:6b:5f:
17:b6:b3:01:14:83:16:eb:64:9d:70:84:b0:8d:47:88:5d:9e:
9a:1f:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:41:21 2025 by rpki-client