Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: j05HmEshoiXoIIM699g0ZWbY5mA0prSg+vU/0biM44w=
Subject key identifier: ED:74:36:E1:A7:1A:8F:4D:1F:2B:88:07:BE:90:67:F9:34:1D:5C:C7
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 019651FF9B8B4BDF876C7C844AC3BD79007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 1194
Signing time: Sun 20 Apr 2025 07:00:27 +0000
Manifest this update: Sun 20 Apr 2025 07:00:27 +0000
Manifest next update: Mon 21 Apr 2025 07:00:27 +0000
Files and hashes: 1: 15Cc0rkgOAAGUx8rhsWE0wocji4.roa (hash: w5RcK6dKOaSgSCjKMtRrWFYt+lmDT9Fb/OPGmzxAWAs=)
2: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (hash: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=)
3: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: pkE0IyfnJqNLM6eO38TO07NETBgzzb0Io2A7h4ytQb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:9b:8b:4b:df:87:6c:7c:84:4a:c3:bd:79:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Apr 20 07:00:27 2025 GMT
Not After : Apr 21 07:00:27 2025 GMT
Subject: CN=ed7436e1a71a8f4d1f2b8807be9067f9341d5cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:89:1a:7c:f5:18:05:8d:7c:82:63:ca:25:
44:87:d0:78:77:18:66:8c:f3:84:aa:b7:f3:a1:5c:
6a:19:04:f7:7f:20:d8:46:5a:d8:54:9b:71:2e:7c:
27:f9:41:6e:e0:8c:00:70:94:5d:21:ba:9d:39:90:
5d:71:ff:cb:8e:dd:44:94:89:25:08:26:b5:bb:51:
24:aa:0e:1f:02:3b:e6:a2:98:be:61:96:75:8a:66:
d3:bf:34:28:22:a9:52:7c:d9:82:82:7f:e8:6e:e7:
fa:0f:9a:c8:da:c9:c5:76:75:e0:4b:50:bd:01:8f:
45:78:ae:5f:70:0f:f5:91:2a:a7:1c:40:d0:b9:08:
38:e0:4c:cb:e5:3d:e9:56:3d:cd:6d:e5:6f:bd:40:
fb:8a:a5:6a:b3:7e:e8:20:e8:ae:2e:db:43:de:34:
3c:eb:34:0f:d2:f8:27:cb:5f:39:f6:00:02:59:e8:
b6:99:58:ca:47:2a:a7:9d:e5:a5:c3:ca:68:ef:d8:
76:1d:2c:ef:05:86:b4:96:a6:ad:d7:85:27:7e:76:
ed:ea:41:88:75:fc:17:86:61:dc:ec:4f:c2:8a:56:
c8:ae:0a:17:68:aa:98:36:12:da:c9:b6:27:8b:c9:
16:3f:93:ae:bc:b9:b8:b1:64:56:c5:59:1a:50:4a:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:36:E1:A7:1A:8F:4D:1F:2B:88:07:BE:90:67:F9:34:1D:5C:C7
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9d:14:05:c2:8a:c4:04:29:d8:29:ed:78:fa:0b:ca:6f:bf:
e1:05:95:6b:d0:26:4f:80:46:49:49:62:00:2d:dc:4a:72:3e:
93:d8:34:11:a8:c7:3a:b2:32:1f:9f:6b:3d:fb:2d:ab:a6:7c:
9a:ec:c0:21:04:e3:c1:f6:13:52:9a:4e:fd:8e:16:e6:2b:8e:
9d:7f:08:46:22:96:90:ff:dd:a9:77:78:3e:00:78:96:4e:c2:
8d:db:ec:01:37:42:9f:ab:13:00:c6:55:e4:b3:25:fb:0c:b7:
c0:c3:b6:ed:c8:bc:43:59:89:55:23:06:21:ce:ad:0a:22:b2:
0d:7f:5b:a8:1d:e9:b7:80:34:18:98:bd:f8:f4:4c:e3:70:9f:
bb:18:17:b6:f3:2a:57:bf:c3:16:ec:1d:be:7d:5f:de:c2:ff:
ad:a2:ce:c0:63:33:57:8a:1f:16:06:19:54:41:b7:2d:db:a0:
75:1b:c2:10:ef:28:b0:d6:4a:c8:3b:b2:7d:0b:91:c0:8a:6a:
f2:5f:5c:b0:29:2f:43:60:90:65:d2:ed:b9:8d:e9:4e:c6:4a:
fa:8b:46:f5:4d:1a:44:d4:96:ed:f2:aa:e8:c9:da:ab:8a:a7:
b2:29:9b:11:40:8e:d4:71:05:35:34:f0:09:5b:69:fd:63:d4:
60:81:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:47 2025 by rpki-client