Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier: CLiEnyZw/CXwXzvlBgAKMeWpYDU0c/fmcgeCYxeadyg=
Subject key identifier: C3:0D:2B:1A:02:AC:12:B1:BC:4A:D4:13:39:0D:C4:82:47:D6:EA:7E
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 01961020864E6B7D275BE3448DF4878FBC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number: 100D
Signing time: Mon 07 Apr 2025 12:01:28 +0000
Manifest this update: Mon 07 Apr 2025 12:01:28 +0000
Manifest next update: Tue 08 Apr 2025 12:01:28 +0000
Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: IpGBDsjA7cN3Yhp9wYvloY5jFFA3oIbDiibM6VC+8hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:86:4e:6b:7d:27:5b:e3:44:8d:f4:87:8f:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Apr 7 12:01:28 2025 GMT
Not After : Apr 8 12:01:28 2025 GMT
Subject: CN=c30d2b1a02ac12b1bc4ad413390dc48247d6ea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:de:a0:14:15:92:5b:57:62:43:89:ce:5d:
fb:76:03:b2:64:93:7a:e6:2e:2b:49:5b:2d:5c:e0:
3f:79:fd:00:31:7c:10:bb:2d:14:61:c7:44:4d:0d:
cb:9f:e9:14:1b:6b:51:99:31:ef:49:46:b5:84:fa:
0f:3e:46:c9:14:bf:3f:94:2d:c5:55:0d:5d:50:42:
42:a9:e6:c2:39:b1:ad:3f:7b:66:ad:fd:ed:6c:68:
24:4b:3d:2f:00:e0:ab:9e:1f:ed:cc:65:ba:89:75:
f8:05:09:8e:fd:b3:fb:a0:3f:cb:33:86:bc:4d:fd:
e5:5b:e8:fa:66:a8:6d:e7:b4:c5:3f:63:f1:11:5f:
bc:04:eb:59:ca:04:a4:61:12:ea:c1:9d:8c:0b:94:
57:9c:88:a8:d3:d1:83:70:85:0e:b1:e0:3c:50:3c:
eb:9c:8e:5b:0f:83:68:0a:8c:59:2f:d4:dd:20:70:
c6:90:5e:15:21:53:02:96:ce:1a:0a:6e:b4:42:6c:
8a:77:3f:5a:83:9a:b6:ca:7a:ee:82:54:e4:75:5b:
9c:ba:0d:dd:55:7d:1d:ae:9b:87:23:81:59:18:be:
db:71:91:02:61:08:f8:08:6a:1a:83:dd:a5:04:96:
0f:cb:10:c5:9b:c7:08:e8:48:dc:9d:dc:2d:38:44:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:2B:1A:02:AC:12:B1:BC:4A:D4:13:39:0D:C4:82:47:D6:EA:7E
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8c:15:0b:44:3f:6b:39:87:64:4a:12:c0:af:7d:2f:35:a9:
cb:1f:e2:50:31:fb:4e:8a:57:a6:38:cb:af:fd:42:ea:26:57:
1e:15:13:0a:4e:fe:90:47:91:be:76:ab:41:15:b8:78:6e:e1:
98:57:e7:fe:e6:6e:d1:c1:b2:0f:8a:32:09:3c:b1:18:00:fd:
23:38:56:30:dd:85:15:e2:32:4c:0e:01:7d:5b:fe:a2:4c:34:
cc:99:92:ec:85:9f:a7:d4:23:bf:aa:ec:bc:29:70:8c:d2:dc:
3c:25:48:8c:02:1e:e9:ae:67:89:21:6d:f0:07:c7:ff:5c:c4:
e1:6d:72:05:a8:90:99:6b:ac:65:ea:61:a3:c6:3b:97:ba:d3:
45:ae:a9:e0:bd:76:09:f6:1b:b0:7a:6a:30:47:09:2d:fd:32:
6f:2e:e4:b9:e9:b1:e9:d9:d7:c7:9b:e5:41:88:fc:68:a0:bf:
8f:c0:a0:2f:81:e0:fa:e2:03:f8:2a:73:7c:fa:02:76:8a:6d:
c2:c9:1f:ff:e1:b0:4f:25:cb:a4:59:ed:7b:c3:9d:72:db:37:
64:83:3c:1c:75:03:d9:bd:e9:d4:30:2d:52:29:9d:72:04:44:
d7:0d:f9:b9:80:a0:53:f5:1a:45:e6:3e:ee:96:2d:e3:14:c1:
90:e2:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:43:54 2025 by rpki-client