Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: ZXxR2UfXvjf6tlry6UBAV/jhh+/tW98zZrq6eSv8YeE=
Subject key identifier: BD:CF:29:ED:23:4A:01:93:2E:35:4C:A2:21:9C:3C:F5:D2:61:A8:4C
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 01958B8451C89C6AB4CAA3CAF91328B7781E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 147B
Signing time: Wed 12 Mar 2025 18:00:59 +0000
Manifest this update: Wed 12 Mar 2025 18:00:59 +0000
Manifest next update: Thu 13 Mar 2025 18:00:59 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: 56nJK80To8943gJiMCj1Sqq0REylpkxJrQ5QihNcPgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:51:c8:9c:6a:b4:ca:a3:ca:f9:13:28:b7:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Mar 12 18:00:59 2025 GMT
Not After : Mar 13 18:00:59 2025 GMT
Subject: CN=bdcf29ed234a01932e354ca2219c3cf5d261a84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:dc:0a:c3:53:9c:7b:8d:63:da:03:1f:7c:
5b:fd:34:f7:29:12:52:3f:ce:24:95:76:ef:bd:f6:
f9:49:83:83:56:56:00:a9:f6:c8:1d:74:cb:74:7f:
22:36:e7:ed:75:71:5d:cc:e4:65:01:a5:29:a0:f5:
bf:59:13:20:01:62:67:1d:99:10:cf:5f:2d:ec:5a:
f6:03:6b:dc:36:74:94:94:69:5f:0f:ab:e7:4d:40:
35:61:b2:c8:2b:fe:c5:1c:0f:7c:1a:c2:fc:5a:16:
33:8b:be:6d:9e:17:e1:af:63:36:e1:f5:68:2e:d9:
90:78:70:f6:6d:97:40:01:e5:79:74:fd:28:f1:9b:
8d:14:f4:3f:fa:7b:0d:f2:ce:47:ee:59:c8:23:3c:
12:08:d0:31:62:c5:4e:3e:d0:77:4b:76:58:bb:f6:
ae:ad:76:e6:1a:13:e3:7f:e8:e5:97:13:a3:71:9c:
9e:48:69:bf:52:33:22:52:94:a1:f7:14:0b:b7:76:
4a:61:af:bc:91:8f:4a:d9:ed:57:a7:31:6b:5c:da:
9b:ec:1b:14:eb:69:e9:ac:01:65:c6:db:42:00:1e:
31:f6:00:03:cd:01:81:9b:60:b0:ae:2d:5e:00:3e:
f2:c0:b2:8c:20:3c:82:84:44:4b:01:77:c0:b0:0c:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CF:29:ED:23:4A:01:93:2E:35:4C:A2:21:9C:3C:F5:D2:61:A8:4C
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1f:77:7d:61:82:e9:55:cc:c8:80:3e:fe:0e:54:99:7f:5b:
37:e4:38:fb:91:3a:25:1e:a6:aa:69:6d:5d:bf:a4:a9:15:e0:
3f:eb:ec:03:37:9e:fa:d6:e8:c2:cd:13:7f:82:e3:b7:a0:ad:
d5:73:0a:ac:91:f7:26:62:e6:c0:97:4d:94:87:55:15:4b:28:
83:a2:80:02:1b:1d:59:7d:30:ef:4f:33:04:98:56:1b:d0:a2:
da:f2:c0:8a:32:dc:87:ac:e8:d8:ae:32:8e:c7:e0:cc:3f:44:
c1:ec:ee:d2:6f:82:cc:41:7b:fb:35:b3:4a:7b:85:0d:fb:2c:
33:0c:db:c4:a7:d7:07:ac:07:9d:d2:fb:2c:fc:d0:96:13:4a:
86:a8:0e:24:86:72:c1:6f:6c:66:89:fe:7e:2e:88:d3:26:79:
bf:53:66:5c:2b:7a:21:6f:fb:49:1b:0f:d0:d8:5f:db:c7:cf:
4f:43:d1:b8:1b:4d:f7:8f:cc:fd:df:b5:fe:9f:e6:06:8e:6d:
15:c1:43:84:df:a6:a3:38:22:27:5d:40:e8:15:29:33:6e:a0:
46:bf:9f:e4:0b:39:97:66:47:77:97:5d:65:de:94:34:43:16:
26:48:c7:51:55:c3:20:df:f2:3c:c9:2c:64:ab:6a:52:e2:8c:
cd:54:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:07 2025 by rpki-client