Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: trGe7b/9BidEPtXuX+EXLNIPzIXKtf2duxS6KUrUYik=
Subject key identifier: 0B:03:7B:B7:05:0F:F9:FB:2B:DF:C6:19:35:D2:29:DE:52:33:71:FB
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 01964444BD4DAA2025E818C670F39A9F37B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0840
Signing time: Thu 17 Apr 2025 15:01:17 +0000
Manifest this update: Thu 17 Apr 2025 15:01:17 +0000
Manifest next update: Fri 18 Apr 2025 15:01:17 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: aBa6J6Wtj7KljqiGbUT3UpwrjGM7Aipp02YeINgr2Mw=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:bd:4d:aa:20:25:e8:18:c6:70:f3:9a:9f:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Apr 17 15:01:17 2025 GMT
Not After : Apr 18 15:01:17 2025 GMT
Subject: CN=0b037bb7050ff9fb2bdfc61935d229de523371fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:c8:2e:90:4e:92:1b:42:57:bb:d7:97:0a:
6b:b0:a5:fe:95:9f:ba:6c:e8:b0:a0:63:76:a0:cd:
5d:97:dc:35:02:7f:3b:07:33:51:21:2d:f1:ab:9b:
2f:90:46:87:10:81:19:31:f7:be:c9:63:3f:17:4a:
26:c4:ba:d3:06:c7:10:e5:d3:f1:a1:19:bf:dc:ac:
40:06:c1:88:20:92:fc:1b:4f:a1:28:4e:71:3a:4e:
4f:05:4a:b4:8f:23:6a:64:2b:ca:99:0d:5d:c2:12:
cc:a9:dc:ad:c7:e4:9f:7d:4a:04:68:d2:92:bd:97:
b2:dd:75:84:6e:67:1b:6f:5d:0c:df:f2:1f:f8:51:
9e:85:d6:35:2b:03:4c:cd:07:12:da:ce:ad:40:03:
e0:c0:be:fe:bf:85:8a:12:91:74:84:f3:a6:57:c7:
ed:5d:92:8c:ae:cc:61:01:4a:bb:b0:92:d8:df:b6:
ca:aa:b2:77:6f:ef:11:8a:74:bd:fd:c8:8e:0d:9d:
87:32:69:2d:13:7f:af:e3:bc:7f:ce:24:49:5a:2c:
28:25:4f:3f:b7:7b:43:4e:8d:92:0d:e0:f5:17:e5:
36:a9:6d:68:e9:46:0e:b0:50:b6:93:a8:b1:10:71:
47:66:ea:1b:64:d9:03:1f:de:f3:6c:75:88:33:8a:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:7B:B7:05:0F:F9:FB:2B:DF:C6:19:35:D2:29:DE:52:33:71:FB
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ed:fa:e7:b5:0e:08:b8:a6:09:13:01:10:6d:77:47:c9:95:
a5:b0:8f:2c:81:25:28:2e:44:1b:00:74:10:7e:14:a4:69:03:
0b:55:49:8a:87:95:d7:2f:b9:8a:15:1b:b7:7c:54:e0:80:23:
3b:00:14:be:4d:a1:11:ac:a4:4a:b2:33:b8:16:e1:68:7a:96:
fa:6c:d1:db:f1:75:85:82:f9:16:3c:b5:3f:56:14:48:3a:f9:
d0:d8:72:ce:ff:0e:b6:f8:bd:5a:64:88:0c:6b:1f:14:35:b8:
05:67:12:4f:ed:d9:7f:be:bc:2d:60:79:1c:f8:4b:5a:28:d8:
6f:f5:9f:3a:1b:fd:09:bc:ea:02:d9:e5:87:d5:35:a6:8e:20:
54:67:3c:bc:ae:ad:a1:52:2c:45:46:cc:3c:5b:8e:1e:a0:3f:
c4:ce:d5:5b:75:49:4a:2b:9d:29:1f:e6:75:0b:2d:48:91:ad:
51:2b:94:3f:87:ef:a0:d6:9e:a8:54:df:3d:f4:e9:24:a9:a6:
6d:d5:e3:39:6b:24:5b:cf:c9:a3:7f:8b:d0:69:a2:6f:d1:7c:
c2:4a:f2:81:f2:5f:94:dc:cb:8b:45:11:1b:1c:80:ba:9d:cd:
db:25:42:8c:b3:17:ed:ca:c0:42:8d:32:ce:0a:5d:0a:d2:37:
37:91:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:28 2025 by rpki-client