Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: 8l20bgVZcyQtMysJoB8CvQ7cK8rzVjH9xFO85eDK4fI=
Subject key identifier: 05:E1:A3:1E:F7:86:7A:B1:64:38:FA:7B:EF:3E:A7:54:6B:17:62:1D
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 01959073DD246FCD03ACFD4D4DCCD1E28C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 17:01:07 +0000
Manifest this update: Thu 13 Mar 2025 17:01:07 +0000
Manifest next update: Fri 14 Mar 2025 17:01:07 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: TEQ5ckj9Cn2CsbAXubARjekDw6hkc2Ry1b/gj7j8mB0=)
3: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:dd:24:6f:cd:03:ac:fd:4d:4d:cc:d1:e2:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Mar 13 17:01:07 2025 GMT
Not After : Mar 14 17:01:07 2025 GMT
Subject: CN=05e1a31ef7867ab16438fa7bef3ea7546b17621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:93:56:42:6c:71:8a:76:af:2e:00:78:05:
e2:e1:04:f5:ca:b7:55:2b:18:55:79:b1:ed:5a:8f:
50:c1:b5:de:b9:e1:fd:a2:9a:93:85:d9:ba:a4:f0:
ba:fa:a2:c9:02:7c:74:65:7f:8e:7f:c4:3c:17:2e:
22:5e:46:50:b9:3f:0f:ea:25:84:ed:3f:c1:b6:83:
53:41:01:05:c2:05:4c:0b:0f:ff:a8:bd:3c:98:22:
4c:30:ea:df:4a:1b:7b:3a:eb:f3:08:dd:ee:fe:f8:
60:d2:15:4b:df:eb:c4:e1:7e:03:31:b2:02:25:a7:
88:d7:18:ba:82:ad:d6:a3:e8:31:52:c3:b6:5b:d0:
18:ae:78:d4:46:aa:1b:2a:ae:df:38:5b:7b:75:70:
56:87:68:a3:c0:97:dd:a1:20:6f:7a:06:5b:3d:c4:
cc:f4:e9:d3:a0:cc:4b:d9:1f:e6:c9:bd:60:44:c0:
5f:46:b7:f4:74:f3:33:b7:00:4f:7f:1e:65:2e:63:
9b:72:18:bc:4c:32:bd:4f:bc:01:b5:10:e7:d5:03:
69:ac:dd:77:f6:e7:7a:28:43:be:fd:9d:e9:93:eb:
e9:d7:a2:b2:ae:e4:0b:f6:85:fa:69:09:35:fe:33:
ea:8d:da:7f:f2:6f:1c:c6:30:70:c3:d9:67:a3:cd:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:A3:1E:F7:86:7A:B1:64:38:FA:7B:EF:3E:A7:54:6B:17:62:1D
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:38:1b:ff:e3:dd:dd:a5:19:8d:82:4f:fe:1f:e8:5e:69:92:
00:ae:12:5c:37:86:00:a9:65:9c:37:44:cd:d5:47:b9:47:7b:
ca:bb:0c:9e:e8:64:59:4d:62:5e:04:30:af:82:8e:64:39:f2:
8f:51:2b:18:cf:34:06:36:88:79:52:55:53:49:ba:22:04:eb:
f9:3b:b1:19:dc:7f:f1:92:37:eb:a6:c8:77:ea:39:90:00:27:
24:02:e7:72:a5:fa:a0:55:a4:8c:3e:17:a9:ac:74:4d:5a:59:
15:cb:c2:8c:92:9f:6b:88:1e:97:da:cc:8a:3e:1f:1b:3e:d1:
0a:75:1a:11:fd:49:b9:3a:bc:af:57:12:14:0b:c7:68:20:aa:
3d:ad:f9:3f:69:1d:b1:af:eb:95:78:9d:a4:9c:a3:93:b5:3b:
f6:b2:2c:45:da:94:ee:ee:6c:2d:f1:fc:f4:2a:ed:54:0a:39:
db:1d:b0:36:fe:2d:e8:18:94:8f:db:4a:ea:85:71:df:35:b1:
fe:15:87:8b:61:54:f9:c9:d3:5e:76:f4:bf:42:7b:07:03:67:
54:28:4f:d8:f3:4e:2f:76:be:8e:85:62:24:43:60:ef:20:b5:
eb:c4:0a:ab:59:a8:d5:9f:49:be:ae:70:74:d6:00:02:31:1a:
84:81:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:54 2025 by rpki-client