Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: +YazCk/zRbMlj1+D4RWYWJzb6dYeSQWDTPuOvNvZDvU=
Subject key identifier: C1:82:E4:36:22:4C:0E:7A:2E:52:E2:11:02:CD:C3:2F:C5:B2:58:A1
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019603401BCE075820C8DBA50584403A9DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 14D4
Signing time: Sat 05 Apr 2025 00:00:55 +0000
Manifest this update: Sat 05 Apr 2025 00:00:55 +0000
Manifest next update: Sun 06 Apr 2025 00:00:55 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: +oVHBBG1M1MheOxY2s9Q4igo4gKUj9Mqvalcic4m0i8=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:40:1b:ce:07:58:20:c8:db:a5:05:84:40:3a:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Apr 5 00:00:55 2025 GMT
Not After : Apr 6 00:00:55 2025 GMT
Subject: CN=c182e436224c0e7a2e52e21102cdc32fc5b258a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:78:8f:0a:f3:7e:ab:68:bc:20:74:1a:60:
5a:a0:56:ad:35:d0:e2:06:ab:45:ca:e9:6c:46:6a:
32:4d:d2:94:0e:6c:78:13:fa:da:ea:5d:d9:52:8b:
5c:f4:25:dd:48:bd:04:05:60:3a:56:7f:f7:58:be:
14:8e:77:a6:47:e8:82:55:f7:72:e6:1c:7a:ae:d0:
57:55:94:5d:1c:52:be:49:db:5f:35:fc:13:0e:fe:
f1:8d:8b:cf:17:79:c2:04:78:ff:e2:0d:d5:24:86:
50:9b:9a:42:ae:be:d3:d9:a1:3a:d1:5f:56:06:25:
52:36:59:dd:7e:c5:be:75:0b:e3:b0:08:23:84:93:
03:ba:c1:44:a8:cd:86:5c:44:ba:1c:78:2b:b5:14:
27:ac:43:98:16:19:6d:34:43:6d:00:28:ee:da:70:
89:30:39:4b:db:1d:57:e2:97:9c:ae:fc:67:7e:2f:
41:ab:4b:98:f1:2d:56:e7:be:e1:33:21:79:17:3e:
95:ba:2c:43:18:85:ad:72:ef:2a:43:bf:7a:04:64:
7c:a9:4b:c4:53:1d:1f:42:08:7c:5b:74:56:22:0c:
c1:25:04:fb:db:21:6b:4e:f0:64:7a:68:bb:bd:19:
ce:42:df:6a:57:39:7e:26:ec:9e:a8:27:ab:d9:79:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:E4:36:22:4C:0E:7A:2E:52:E2:11:02:CD:C3:2F:C5:B2:58:A1
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ab:34:15:d2:b7:1f:8a:27:a4:48:bc:45:fa:8f:14:09:e1:
81:8d:76:a2:15:4f:f8:77:ea:03:1b:fa:32:e6:da:e1:4c:94:
49:ce:8e:06:78:a3:f3:b9:40:0d:8a:f5:a0:fb:f3:35:07:6c:
0a:2a:69:e3:f5:0c:41:77:e1:ef:99:c3:b5:87:a4:a9:f4:97:
35:f0:ca:f7:55:cf:68:11:78:1c:d5:c3:d5:31:b2:05:f1:37:
72:52:06:fc:94:77:c7:e2:6f:0c:d6:ba:53:84:dc:f3:b1:77:
ca:31:7d:e1:cd:a4:e0:0b:89:c0:3a:81:e5:59:44:80:a0:9c:
9b:85:3c:23:a7:c6:94:02:65:b8:42:c3:45:51:c7:7a:35:f3:
f2:14:74:a8:73:f4:87:0f:f9:81:41:4c:91:55:e6:e6:61:65:
20:96:c7:17:cd:a3:aa:b7:1b:55:be:09:b8:11:08:b8:ba:bc:
32:37:13:ba:38:fc:bf:83:51:88:2d:2f:8f:8f:6f:83:b1:e8:
ea:bf:eb:65:2c:18:1c:69:19:83:36:a2:3b:bc:82:52:56:7b:
e3:7f:96:db:a0:a4:a1:f1:6b:35:5e:90:27:32:d9:91:ad:24:
e7:82:5c:fd:b3:03:ef:b6:e3:e5:5d:aa:84:5a:91:09:c5:8f:
65:d1:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:01 2025 by rpki-client