Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File: gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier: +HGQnaSx5JS6x5QlqpT8AbWsbJ84bKjCbV1g9RgyeHc=
Subject key identifier: 2A:2C:0D:3C:20:49:0B:CD:20:F8:93:CD:C1:18:C5:AC:E4:AC:64:FF
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 01958BBBA668BAD3926FF218E2B95B798417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number: 10E8
Signing time: Wed 12 Mar 2025 19:01:25 +0000
Manifest this update: Wed 12 Mar 2025 19:01:25 +0000
Manifest next update: Thu 13 Mar 2025 19:01:25 +0000
Files and hashes: 1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: V9Y/+fboT7YDghAVnpR0VHIcv2Mnqo22x2U+Ncld/6w=)
2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:a6:68:ba:d3:92:6f:f2:18:e2:b9:5b:79:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Mar 12 19:01:25 2025 GMT
Not After : Mar 13 19:01:25 2025 GMT
Subject: CN=2a2c0d3c20490bcd20f893cdc118c5ace4ac64ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:59:47:36:d7:a1:8d:0f:3c:85:21:74:69:
36:c9:67:d5:23:6f:28:88:00:1c:80:42:db:3a:90:
d3:7f:33:54:d6:bc:02:e6:c6:89:d4:f0:61:79:bf:
4a:5d:9a:70:28:d0:40:81:26:e2:23:28:71:38:c3:
df:2e:e3:21:23:db:25:86:e2:92:b8:35:2d:4a:c3:
36:8a:19:55:1f:ac:48:a7:ca:af:3b:7a:1b:05:e6:
ac:d2:e3:1f:a0:6e:6f:5f:ba:61:65:02:df:94:80:
70:d0:7e:7e:98:1a:bc:7b:6f:af:7f:76:b7:52:4f:
15:35:80:0e:3d:18:0c:c2:34:cf:a3:7a:d1:61:6e:
de:e6:d2:bb:4a:22:bc:f8:43:28:03:43:18:12:99:
f2:22:04:e9:44:5a:c2:b6:bf:d9:2e:1f:e4:44:a9:
83:61:4b:8a:35:14:bc:da:8f:47:2c:43:ee:27:41:
74:be:59:9c:92:ef:a4:18:47:b1:74:66:6b:f9:2a:
2a:0f:a2:67:30:b8:f5:17:98:e4:5c:0b:bf:80:80:
2d:88:e5:bc:c7:25:72:4f:2c:91:40:99:80:d8:45:
7b:31:44:db:67:c1:01:da:e6:66:a1:4a:c7:93:c3:
74:90:bc:8f:46:75:6a:7b:20:da:47:ed:77:24:16:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:0D:3C:20:49:0B:CD:20:F8:93:CD:C1:18:C5:AC:E4:AC:64:FF
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3e:fc:2a:4e:f3:ef:fc:4a:c2:43:54:38:90:16:6d:a5:ac:
fb:aa:3b:50:f4:76:d1:a8:ab:c1:c6:9d:bc:75:31:ed:15:3a:
e2:45:8d:28:56:36:e6:ec:eb:1f:66:ef:ff:23:d3:d1:95:23:
af:ee:2a:d4:56:8e:5f:29:15:63:e5:27:d2:84:fb:80:b0:c8:
67:7f:90:c0:b1:89:f4:28:6a:84:e8:f0:b8:1b:69:5c:06:ad:
aa:61:57:e2:0f:cd:bc:34:42:bd:a9:bf:38:70:4b:b5:bb:85:
dd:0e:6a:bb:9f:e5:50:b6:2a:f9:a6:02:24:9d:ad:9f:5f:25:
c1:03:01:ac:1f:be:78:8f:47:19:d4:20:5c:dc:1e:6a:92:56:
ba:67:83:c1:51:4a:4a:3b:a2:5a:c3:42:23:e7:53:39:6e:c1:
2b:1b:db:ed:85:95:16:f7:5d:23:52:b1:b2:1e:b1:c1:f7:07:
52:09:c7:a1:d9:4f:c2:da:a2:56:05:b4:91:5f:6e:29:ee:de:
db:35:ea:7b:07:42:05:87:ff:03:b6:df:e5:0b:fa:80:f9:44:
29:4d:f0:fc:0f:30:5a:23:a1:6f:5f:e8:d8:19:a5:9f:26:3f:
e3:f1:a7:72:78:c0:a9:56:f8:b3:81:a2:c3:d5:59:5c:71:70:
af:1a:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:11 2025 by rpki-client