Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: Zn+bJ4hxDyGK+tUD3yqfFFZfAthvdsV2PGBPejUZ4Uk=
Subject key identifier: 26:22:D5:02:7D:3E:18:73:2E:70:EB:36:6E:25:12:DE:8B:EB:85:7A
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 01960ED664DC310A40EDFA488A6E7AFCD54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 06:00:53 +0000
Manifest this update: Mon 07 Apr 2025 06:00:53 +0000
Manifest next update: Tue 08 Apr 2025 06:00:53 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: aGUpjHgXB7mTbFWJRmaV3Wtc3nnoR6HD7BkiaJestKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:d6:64:dc:31:0a:40:ed:fa:48:8a:6e:7a:fc:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Apr 7 06:00:53 2025 GMT
Not After : Apr 8 06:00:53 2025 GMT
Subject: CN=2622d5027d3e18732e70eb366e2512de8beb857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:8e:01:13:f4:00:11:84:b6:92:78:76:72:
02:6c:6c:70:53:99:0b:65:da:be:3d:6a:22:10:c4:
1b:83:0d:f4:d7:25:73:57:22:2b:81:2f:99:cb:ae:
95:bb:9c:4e:50:8b:48:07:ed:fb:a7:06:a7:0d:65:
42:36:5e:42:79:df:ed:16:3f:2f:47:f1:4d:4a:39:
4a:6d:96:de:92:8d:0f:c2:0c:a3:a5:5d:9b:1e:7e:
52:b8:36:8c:bc:de:f6:5d:7f:bf:30:ac:0f:4e:42:
0f:96:d2:09:83:fe:d3:75:44:be:11:cd:73:18:5a:
98:a3:92:05:f9:bc:0f:38:a6:15:5b:e2:8f:55:09:
2e:34:b2:8a:e8:53:a9:c8:a8:25:03:7b:47:7f:f9:
96:32:c7:7f:50:ad:74:7a:82:77:58:d1:06:51:8c:
7d:c5:17:88:14:7d:7a:67:6c:bc:84:1f:56:77:b1:
f0:5a:e7:68:8c:f9:69:dd:d0:74:f4:0d:0b:62:69:
d3:5b:67:c8:a3:f3:46:26:c9:e8:4c:6a:d7:2f:52:
8a:1a:67:5b:ef:21:6d:94:6b:87:e8:ea:cd:18:66:
53:c1:a7:e3:b3:da:ad:f4:4a:50:5d:c1:bc:aa:05:
98:fd:9f:e7:58:1e:ee:3b:88:eb:55:b3:b4:02:cc:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:D5:02:7D:3E:18:73:2E:70:EB:36:6E:25:12:DE:8B:EB:85:7A
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a3:80:a2:a3:a9:53:02:12:97:4d:cd:6c:c1:20:60:3d:08:
02:64:0a:01:b4:d9:20:31:d3:b4:fb:ca:cc:a3:b1:89:54:34:
ac:18:97:ba:85:3f:a8:bf:70:c4:2b:27:ca:d4:e4:21:cd:89:
0b:9b:62:c7:84:ee:d9:ff:d2:72:e0:4e:16:72:48:a3:0f:06:
a5:bd:a2:f3:fa:cb:65:75:34:bb:68:e6:6b:29:a1:0d:1c:b7:
d7:02:c9:98:52:ea:f6:9a:b1:e5:b9:0a:37:40:4f:fd:ad:bf:
d7:39:75:ef:fd:9e:39:64:dd:56:50:e8:cc:47:18:5f:00:0d:
dc:05:ec:cb:05:1c:bf:6d:01:9f:4a:5d:c1:36:d4:39:de:39:
89:f3:58:ef:67:b2:e0:5a:ae:cd:fc:0c:62:1b:21:00:d8:e9:
d1:e0:e8:f2:50:1d:41:19:85:d2:91:2d:c6:81:ca:27:29:45:
0b:68:96:84:c6:cc:86:5d:04:49:3d:35:ee:5f:85:27:04:82:
a2:08:f1:a8:8a:c9:fa:ea:2d:5c:ef:c3:d8:58:0d:3b:ad:00:
a4:a9:cb:8e:8f:38:7e:a2:1f:c1:ad:cd:d1:08:e9:af:9e:c1:
c8:fc:a3:ae:9f:1c:59:99:22:f5:92:71:dc:30:10:e6:b3:e1:
8c:af:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:23 2025 by rpki-client