Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
File: gO9no9w9cYRemxVVz_WtMbtCOpQ.mft (raw, json)
Hash identifier: Mimy0AqavJcshGbdG5CzIoIljLrTlhde71tidnAaSu0=
Subject key identifier: A0:CA:D4:48:8E:46:9A:B0:4D:08:E7:85:2A:D8:7F:DE:5B:55:B0:B8
Authority key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Certificate issuer: /CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Certificate serial: 01964B221BA764C0E8D33C7403DA373C107F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 23:00:48 +0000
Manifest this update: Fri 18 Apr 2025 23:00:48 +0000
Manifest next update: Sat 19 Apr 2025 23:00:48 +0000
Files and hashes: 1: 725G7dybLbuQKpUr5VC2q0wDs8E.roa (hash: OC0qz7BZ0oC6fOW2Sqogh+LE8Hr7cjZ2nPkrOk5rs7g=)
2: gO9no9w9cYRemxVVz_WtMbtCOpQ.crl (hash: y/u/dimMsOL/LlbCQyv9b8tDvSzn7lKKTxyfQL/I7fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:1b:a7:64:c0:e8:d3:3c:74:03:da:37:3c:10:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Validity
Not Before: Apr 18 23:00:48 2025 GMT
Not After : Apr 19 23:00:48 2025 GMT
Subject: CN=a0cad4488e469ab04d08e7852ad87fde5b55b0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:24:c9:f6:01:99:2f:7f:4f:2b:04:df:00:
ae:a2:b0:aa:a0:a2:9f:39:fd:88:00:95:3f:65:d0:
2e:b9:7d:e5:73:f3:b9:35:dd:f4:0e:e9:ac:6d:f6:
df:6c:c2:82:8b:35:6b:22:d7:1f:c9:a3:31:e3:54:
5b:60:48:6a:23:9a:2c:04:ae:27:b1:5e:ee:36:d5:
d8:19:e2:d4:21:88:55:6f:bd:11:e7:f3:1a:96:78:
74:4f:56:ed:9b:0c:f3:51:e7:32:0e:37:dc:15:5a:
66:a1:2d:b8:02:69:61:fd:6e:35:63:00:b3:b5:08:
f1:d1:c7:10:18:12:ff:cc:b8:83:64:05:59:bf:cf:
37:9e:8c:15:ab:44:f0:5f:19:83:8a:f3:91:5a:ea:
b1:a7:8c:7a:2e:9a:df:a9:67:0d:96:9d:2c:3e:9c:
06:34:89:3e:bd:4c:85:a3:7e:e6:de:92:57:c0:25:
ba:99:93:5b:ca:f2:39:c0:3b:00:51:d3:72:be:91:
10:4f:49:ed:89:86:57:bc:0e:f5:3f:bf:3d:99:b2:
a9:b0:1b:48:5f:f5:75:93:b3:2d:3a:c7:67:c3:41:
9b:02:f4:06:28:9d:89:e2:e4:c5:0e:a8:79:45:67:
89:67:d0:f5:7b:0a:44:96:a1:a0:dd:a5:da:05:f4:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CA:D4:48:8E:46:9A:B0:4D:08:E7:85:2A:D8:7F:DE:5B:55:B0:B8
X509v3 Authority Key Identifier:
keyid:80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:f4:e9:30:3c:29:60:eb:5a:63:f0:6f:a1:34:30:46:59:
5c:37:ed:19:e2:8f:72:2a:47:ea:16:38:9d:eb:9f:6b:f5:9f:
8d:a1:5c:0f:74:3f:75:62:5d:09:af:ce:38:5a:08:4e:af:b5:
58:7f:d3:e4:bf:57:7c:38:59:7a:48:fc:d0:6c:49:99:da:de:
fe:78:76:d3:d9:11:b4:c1:2c:84:13:1d:98:31:b1:e4:80:11:
46:b8:51:cb:a7:d3:59:14:7d:38:44:6d:b8:17:08:c3:2a:25:
bb:c4:12:9b:09:b9:39:61:21:39:cb:31:e7:16:05:4d:0f:7b:
aa:6e:03:31:92:80:50:8a:99:4a:7a:dc:7f:17:35:33:57:f7:
5d:d7:c3:cc:10:97:0e:b4:b2:43:d5:63:c0:d2:22:c5:52:a0:
16:fe:a7:4b:78:da:e2:07:72:25:18:20:e3:79:18:4a:7a:59:
23:66:ad:bd:f9:47:60:2f:3f:b4:d0:63:77:67:85:d2:b2:4e:
1e:e0:f6:30:a5:db:25:af:cd:b2:40:38:8b:aa:d6:65:44:49:
8c:02:d0:03:56:dd:4c:67:45:31:9e:95:98:ef:9c:48:2a:fd:
a3:f6:95:df:8a:88:17:40:0b:5a:81:18:1a:9e:66:34:76:8e:
96:48:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:02:02 2025 by rpki-client