Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: vvC6d6jbGuTgZXeD5YF9iEP2Qg9GFF9fBubF7EooX6U=
Subject key identifier: 58:42:D9:2E:CF:98:97:EB:39:71:7F:45:E6:B3:36:73:5B:30:90:88
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01963CC14F2785334787A5797C05FE09ED3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0E57
Signing time: Wed 16 Apr 2025 04:00:23 +0000
Manifest this update: Wed 16 Apr 2025 04:00:23 +0000
Manifest next update: Thu 17 Apr 2025 04:00:23 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: M5KuhEty/XxlfgjoHA9ps2fDW8TPJMF7JGP7hjfw+rQ=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:4f:27:85:33:47:87:a5:79:7c:05:fe:09:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Apr 16 04:00:23 2025 GMT
Not After : Apr 17 04:00:23 2025 GMT
Subject: CN=5842d92ecf9897eb39717f45e6b336735b309088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:b2:17:11:5d:10:98:89:0c:6f:24:3d:16:
bd:f9:db:ac:f0:29:de:4b:47:ef:cf:64:4a:ac:dc:
40:68:42:af:b4:56:ec:63:08:41:5b:f4:1c:dc:e4:
ab:01:f8:cf:78:25:81:7f:49:f0:12:e1:92:4c:ed:
b2:56:61:54:d2:b8:53:d3:84:38:b4:2e:d5:72:8b:
33:ee:58:70:30:6e:30:e6:2a:77:ec:67:2f:37:15:
9c:1a:9e:6e:35:a4:00:3f:da:b0:f7:3c:5e:2f:08:
d6:b6:7a:bb:12:27:37:fc:52:4a:80:6c:b2:64:ee:
e2:47:a7:53:0b:68:d1:3a:c9:d7:e1:05:1d:8d:6a:
a7:35:f5:ca:ef:b2:63:de:e2:51:14:8b:58:45:c4:
5d:2b:f7:90:7a:24:26:00:7e:38:f9:5b:3b:7c:81:
af:77:06:2c:55:5f:f3:25:5f:14:4f:6c:60:2e:a9:
79:d3:1a:db:00:2c:91:50:63:9c:aa:4e:92:24:1a:
ec:86:d2:d9:78:e7:25:a1:68:05:4c:8a:ac:49:b4:
c7:d2:88:e2:56:1b:ba:85:6a:ee:78:04:b2:83:36:
cc:2a:e2:45:6c:ab:27:dd:93:f3:83:92:41:75:95:
83:78:a5:f7:2d:74:47:78:f7:94:4b:5f:c7:0d:aa:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:D9:2E:CF:98:97:EB:39:71:7F:45:E6:B3:36:73:5B:30:90:88
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:7e:1d:31:c4:db:d1:12:cc:02:63:9e:ba:06:70:9a:30:
cc:78:bd:b3:80:cd:ae:4f:da:7d:38:e4:11:a9:5f:70:51:04:
f3:88:08:88:ab:c0:03:ea:ff:bc:57:fb:ed:d6:6c:ce:cb:b0:
d4:a0:8e:bd:ad:c6:9d:d6:c5:7d:fb:ac:98:f8:d5:e9:16:eb:
85:28:14:e2:f3:03:f9:ca:fd:dd:25:22:13:20:42:db:bf:d3:
9b:9f:33:41:d2:fc:cf:5b:d0:6f:3b:33:73:8c:df:3a:4e:43:
06:34:22:29:06:71:4c:69:d5:2a:83:a3:32:77:d4:8e:96:ab:
47:01:b1:69:dd:d6:8e:9c:1d:34:fb:fe:bb:d7:9a:8e:52:5f:
88:74:3a:0a:2d:f4:e5:89:4d:8b:28:96:4d:77:d5:af:e4:94:
44:58:e9:a0:41:6e:ca:3b:e9:05:67:48:7d:0e:a0:28:d7:ba:
3c:d8:79:80:99:a2:bb:61:4b:28:c5:85:83:9f:dc:43:3f:93:
95:33:a8:17:60:db:f5:88:38:c5:c0:5d:26:d0:70:eb:fc:6b:
1b:f6:90:a2:a8:31:d1:6b:e5:81:79:e8:e8:f4:71:8b:39:65:
f2:0e:01:35:18:7d:ee:e2:bd:10:71:fe:2e:1e:29:42:e0:f4:
0a:65:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:37:49 2025 by rpki-client