Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: u2qx2GaVwYGpNaRqswbM1w+H2iu234dhGzTS3AVMH4Q=
Subject key identifier: CA:B9:2E:B4:EF:9E:A8:23:73:6E:DA:FC:0F:C6:ED:A0:BD:73:F8:32
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 019659F0527DCE035E55E6B655EBF727F2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 1208
Signing time: Mon 21 Apr 2025 20:00:44 +0000
Manifest this update: Mon 21 Apr 2025 20:00:44 +0000
Manifest next update: Tue 22 Apr 2025 20:00:44 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: DdL1OVjtfSN4SSx+xXnoBszt90XFqbyVqTpAb4vHI3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:52:7d:ce:03:5e:55:e6:b6:55:eb:f7:27:f2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Apr 21 20:00:44 2025 GMT
Not After : Apr 22 20:00:44 2025 GMT
Subject: CN=cab92eb4ef9ea823736edafc0fc6eda0bd73f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:b6:fe:f9:0f:14:70:4d:f2:82:2c:74:d9:
24:06:40:11:ef:ce:0f:eb:12:6f:53:e7:41:07:7e:
75:0d:ff:82:24:8d:48:58:7f:38:ef:aa:26:12:e2:
1c:ff:86:8e:5e:9c:c1:c0:b8:49:e3:fb:7e:db:ed:
9b:31:75:8e:36:c1:c0:ee:19:34:b6:c5:c5:c4:2d:
d2:53:d5:bc:c5:70:72:cb:54:af:90:7b:69:5a:bf:
07:86:51:28:eb:ca:2d:36:d8:9b:47:24:c0:9b:74:
89:13:a0:c7:6f:31:2d:cf:e9:b5:4e:30:01:4c:88:
68:f3:ed:e2:59:f8:2f:3c:7d:21:1d:d6:7e:f7:87:
ec:b5:f4:17:10:40:e4:d6:77:70:96:43:d5:22:55:
d4:ae:40:ef:12:22:f7:74:a3:79:3d:fc:7b:bd:c1:
81:ce:81:2e:99:99:a8:15:90:3a:71:b0:86:3f:cd:
65:54:18:7c:75:ce:b6:82:10:7f:36:67:89:65:36:
e8:d7:70:ab:4f:8b:6d:2d:b7:a7:bc:dd:26:6b:2d:
26:d1:2c:5e:ca:ef:9e:9a:c5:79:ff:d5:1a:72:21:
21:41:63:3d:2c:a6:9d:2a:d7:17:f9:fc:44:98:0c:
85:da:18:fd:9b:bd:5c:9c:9b:e6:c3:83:f3:6a:c0:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:2E:B4:EF:9E:A8:23:73:6E:DA:FC:0F:C6:ED:A0:BD:73:F8:32
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:38:3d:16:0f:f2:20:a3:30:c6:b1:2a:81:81:c5:8a:82:30:
04:0e:38:90:2e:a1:27:d2:0e:91:03:68:88:52:04:e6:e7:7c:
95:0e:51:7f:ce:9d:66:53:e2:1f:e4:fe:59:87:5d:7b:d4:99:
36:1a:15:5c:dd:3a:3f:48:f7:d1:57:47:bc:7b:1c:36:c4:73:
77:e2:6d:14:a2:ba:d7:a9:f7:07:cf:76:1c:37:cc:7c:44:1a:
0a:97:8c:55:e9:95:b9:8a:ce:ed:cc:bf:01:b1:a0:dd:e2:1c:
b1:9f:6a:f3:12:79:7f:82:73:cc:95:41:90:17:6b:d9:55:25:
8e:3f:a5:c4:8f:fc:ee:7e:3e:25:e1:b4:3d:bc:01:f6:08:1b:
e5:92:17:18:ba:d4:24:7e:a3:d5:f0:d0:26:0e:23:fe:8c:fe:
eb:8a:2e:71:5f:13:5d:72:1e:b4:ba:b5:45:3a:90:13:12:e6:
3e:89:1d:af:fd:9c:0e:06:9e:1a:ed:9e:c8:36:d2:b5:35:e6:
36:8f:91:03:d5:b9:a7:94:c6:ea:8f:af:47:48:4b:cd:84:94:
ac:b9:34:fd:a1:9f:62:85:f6:85:cb:04:89:1c:7e:d1:f0:7b:
f1:6a:34:d9:9d:a9:98:28:80:7c:18:9f:d9:6c:57:6b:bf:89:
e4:c9:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:10 2025 by rpki-client