Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: Cs/BvPWWdssSmCxG66PuEk9Ux0Srvko6Y/L8vlDX58o=
Subject key identifier: 3D:CC:68:00:DA:DA:BC:43:13:3D:89:3C:93:D9:A9:8D:F7:01:7A:B3
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01963FC274F4982DCE1E5E24ED66DB2F4846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 091C
Signing time: Wed 16 Apr 2025 18:00:30 +0000
Manifest this update: Wed 16 Apr 2025 18:00:30 +0000
Manifest next update: Thu 17 Apr 2025 18:00:30 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: UCOnglpggWu5GaQtcIQ6236iCZudLB829z6blYK0/EU=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:74:f4:98:2d:ce:1e:5e:24:ed:66:db:2f:48:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Apr 16 18:00:30 2025 GMT
Not After : Apr 17 18:00:30 2025 GMT
Subject: CN=3dcc6800dadabc43133d893c93d9a98df7017ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:55:c8:80:76:d1:74:41:41:87:29:8e:28:ea:
8b:7d:74:bc:04:df:26:de:a7:52:ea:16:a6:99:03:
34:b2:94:8f:f6:5e:92:18:e7:98:18:16:68:ad:f3:
8b:9e:9e:6f:59:72:73:08:e8:c4:79:8d:d2:ca:39:
49:a1:67:e8:26:06:8a:47:15:c6:55:d9:18:b6:4c:
99:04:d4:53:31:b3:0e:ca:15:03:46:3e:e0:90:c4:
02:ed:d5:94:3d:ed:fa:27:98:39:a2:5d:f7:af:04:
e7:a9:c0:9c:35:57:af:23:d9:d7:f3:f8:8e:c1:96:
71:03:27:ca:d1:93:7c:67:20:48:1e:cb:7a:bf:9d:
04:4c:cf:a1:f1:31:00:a1:4a:e5:a0:be:d4:c1:39:
ca:18:a6:c9:1a:6c:0f:3a:23:54:54:41:87:b6:f9:
36:d0:a2:4a:45:30:75:80:cb:9f:5c:be:af:dd:f1:
b1:a7:3c:40:ac:76:09:db:41:f2:bf:76:ee:63:b8:
44:04:45:1f:d3:6a:81:25:bf:66:27:75:e0:e9:cc:
0e:ef:af:60:ad:f1:e2:92:14:ed:99:b3:3b:5d:14:
6d:01:2a:ee:23:39:8d:da:5e:da:96:87:3c:0c:6e:
d8:1d:9d:f5:ac:8c:01:80:98:04:1f:f5:54:be:9d:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:68:00:DA:DA:BC:43:13:3D:89:3C:93:D9:A9:8D:F7:01:7A:B3
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c7:41:33:ad:90:eb:c7:ce:f3:3d:7e:e9:09:94:3b:b3:1e:
17:d5:9b:74:0f:21:4a:ef:a0:fe:f0:d8:3b:d4:d1:b7:17:c2:
30:27:13:28:38:f0:53:83:ea:6c:6b:a2:61:c9:51:76:aa:2a:
9b:f2:6d:10:6a:f4:9d:fd:55:fe:27:ad:cb:f6:08:ec:d5:d2:
a0:2e:77:66:72:76:72:3f:22:dc:c5:7e:a6:d9:a6:33:22:0c:
00:43:21:8a:0f:f9:45:e5:a2:5b:0a:79:1c:e2:72:40:9b:2f:
95:06:68:c2:1c:4a:ab:a2:3f:52:a2:76:44:cb:08:0a:46:b7:
a9:1b:40:57:2c:16:18:75:d1:e5:77:a2:57:d2:84:8b:96:ba:
08:70:06:93:75:18:8a:8f:ad:8f:41:55:61:2f:35:4d:88:81:
ae:c2:3b:91:cf:ce:98:06:83:b4:ce:ab:c7:85:89:67:80:fd:
f7:e4:6c:fa:88:df:c2:7a:3f:ab:41:ed:02:4d:c3:d6:22:1a:
5b:1a:73:ab:53:d9:a4:d8:b1:4e:a5:81:43:5d:64:ab:7c:b7:
9d:d2:d4:b2:f4:66:8e:a3:16:aa:af:bb:b6:bf:2a:00:63:2d:
48:07:60:f2:67:d4:95:54:fc:d8:3e:a1:23:25:c5:5e:20:46:
6c:88:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:24:31 2025 by rpki-client