Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: x4R+3oRb/qay/XXOMp4kfwttbiqWUdV6LYIcmASccDY=
Subject key identifier: 31:1B:C8:CE:93:70:4C:10:55:E9:7E:67:67:C4:42:7D:A3:C9:59:24
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0196120E64468A5A5F30A000A2C02916BE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 21:00:55 +0000
Manifest this update: Mon 07 Apr 2025 21:00:55 +0000
Manifest next update: Tue 08 Apr 2025 21:00:55 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: kNIal+PBGBz3YP2vuQ/mcnCJWp1gDV4r7Q96vzh3xA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:64:46:8a:5a:5f:30:a0:00:a2:c0:29:16:be:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Apr 7 21:00:55 2025 GMT
Not After : Apr 8 21:00:55 2025 GMT
Subject: CN=311bc8ce93704c1055e97e6767c4427da3c95924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:10:4b:cc:60:b9:58:3d:d1:52:06:47:d7:
c4:e8:95:dd:95:72:01:2a:1a:0d:65:65:51:b7:35:
40:c9:8e:4a:6e:5e:9c:41:c4:8c:0b:47:0b:aa:f2:
66:47:1f:e5:44:bb:e7:a5:36:25:18:9e:07:22:63:
fa:ba:a2:16:9d:eb:ab:15:bb:cc:7d:62:e5:2c:f8:
b4:c3:4d:b2:f8:61:14:58:ad:0d:58:12:0b:97:95:
66:47:de:c3:6e:61:c1:d2:9c:ee:a5:8d:13:a1:4d:
ed:e3:46:f2:f5:37:57:46:76:1f:bb:cf:1d:4b:8e:
0a:fa:c9:1a:ab:00:4c:39:c8:81:1a:62:7f:1e:49:
28:bd:a0:35:4d:03:0b:94:f2:84:8d:15:31:d5:c1:
0e:1d:9f:58:70:6f:51:83:11:93:50:fd:4b:34:19:
5b:27:73:f2:34:cb:86:dc:ee:c7:fd:35:98:64:e0:
25:e3:a2:7b:b3:50:dc:6c:ce:a7:70:cc:3d:36:fb:
64:a6:c5:85:f9:f3:49:1b:d6:c8:f2:01:ba:27:d0:
15:1c:8a:2f:d6:ff:a3:4e:fc:e9:4d:f7:9a:0d:8e:
d9:3a:dc:3c:3c:d0:49:ff:d6:07:e2:65:f6:06:dd:
e5:44:ab:6e:05:d8:8b:08:02:34:97:4a:5f:7f:68:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:C8:CE:93:70:4C:10:55:E9:7E:67:67:C4:42:7D:A3:C9:59:24
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:75:74:b0:f0:49:93:a9:30:04:ec:8d:55:d9:6b:ea:d5:2f:
4e:a0:28:12:67:c0:d0:e6:ca:ad:d2:92:ab:4e:bc:7c:35:32:
a7:dd:8c:be:10:af:17:fa:d7:83:a2:d3:82:91:4a:fe:ec:c8:
fd:88:d7:a2:f2:20:d7:15:3f:f7:5b:f7:a3:8d:1f:ef:88:ca:
e8:af:1c:33:35:20:36:c0:94:a8:04:fc:d3:30:73:cd:64:dc:
17:59:a9:53:b0:a9:6e:a7:18:23:21:a4:d8:7a:4b:bc:76:5b:
df:e6:e8:b7:1f:8b:a7:d5:64:a0:16:1f:2b:3d:e0:f4:9d:ea:
ca:52:67:26:54:36:c1:b2:e4:95:ca:66:58:05:cc:4a:83:c3:
9d:08:50:ad:5a:d9:39:37:88:4b:f1:71:36:80:dd:9f:2d:ca:
45:2d:41:1f:a0:88:d1:7e:31:ac:ed:47:59:5c:2e:49:91:61:
cc:65:6a:ff:3e:f3:9e:98:c9:a2:83:eb:f1:34:7b:84:ca:60:
dc:70:00:13:76:1c:6e:d7:4d:1e:ce:a0:c2:2d:e4:ba:d0:7f:
e9:60:a2:0d:5f:aa:c7:ce:42:6d:95:0b:a1:d1:9d:52:eb:45:
b2:e0:ff:57:9e:c3:7e:c0:5c:73:b1:67:69:42:ab:29:83:d0:
13:13:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:07 2025 by rpki-client