Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: slnltFbb8J8qPZl0N/HKZxocJEUQxV80aNiEWvMekEk=
Subject key identifier: 9D:32:33:74:8D:68:B7:31:21:97:49:9A:56:FE:A3:6D:7A:A3:24:7E
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 01958B4D528F0AE668637AE51AE4C70D5854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 17:00:55 +0000
Manifest this update: Wed 12 Mar 2025 17:00:55 +0000
Manifest next update: Thu 13 Mar 2025 17:00:55 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: blrZS1fmIaMMKtJ0JN8J58MRjyAfRp743D5c3bPoe/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:52:8f:0a:e6:68:63:7a:e5:1a:e4:c7:0d:58:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Mar 12 17:00:55 2025 GMT
Not After : Mar 13 17:00:55 2025 GMT
Subject: CN=9d3233748d68b7312197499a56fea36d7aa3247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:ab:e2:ba:62:06:9b:84:ef:23:fd:ad:31:
98:f0:0b:b2:d8:b3:6c:ac:ff:29:03:b1:83:15:74:
5c:a2:8b:e3:0e:71:cb:28:ce:23:29:ff:9a:99:9b:
e0:b9:ea:e9:41:6d:ac:5f:32:44:ee:b4:8b:ff:62:
b6:4a:b2:ef:de:02:44:ad:f5:21:b2:c2:fc:5c:9a:
eb:68:ae:75:19:9d:f7:aa:e4:71:31:78:52:af:20:
76:78:bc:c5:07:85:34:62:18:6d:3d:7d:3d:f6:29:
f4:d5:80:59:63:8e:1a:5f:1a:f4:f2:50:d7:1b:88:
e7:f5:2a:2d:be:a0:91:4e:be:26:a6:6a:be:b3:dc:
69:21:b3:f2:20:66:cf:f8:9f:4d:e6:81:1a:cf:39:
fe:8a:08:f1:44:75:e9:60:83:45:64:d7:34:c3:ef:
76:f1:82:2b:e0:53:b0:a2:c6:0a:b3:fc:17:6f:5d:
eb:58:0f:4c:dd:f5:39:92:f2:4b:70:75:14:37:78:
74:d2:85:c3:f1:b0:d6:b6:8b:c2:d5:81:0c:7d:3c:
a7:b3:98:22:4c:41:51:87:c0:39:69:03:d2:19:1d:
3c:63:48:46:94:8b:a8:06:dc:2b:14:6d:32:82:2b:
67:84:82:9a:e1:9a:ea:fb:df:59:88:eb:a0:ed:77:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:33:74:8D:68:B7:31:21:97:49:9A:56:FE:A3:6D:7A:A3:24:7E
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:60:63:64:f8:ec:15:29:80:33:cd:ee:4a:cb:ec:23:d5:
48:d5:85:71:5e:ec:54:c7:5e:ea:62:c1:d4:5d:60:bb:08:6e:
cf:30:a7:37:7e:da:69:0d:fd:fc:de:87:3f:54:ac:31:4e:b0:
5e:51:15:7a:9a:e7:db:04:af:ad:d8:e1:47:9e:e0:83:b0:44:
99:4c:20:f1:36:9d:40:56:79:89:11:62:35:d2:4b:37:7d:e9:
a8:c7:b0:18:67:99:91:02:ec:18:9e:11:e3:b0:ed:45:30:94:
a4:48:f3:c1:8e:a7:4d:f6:61:b2:2c:71:56:4f:68:f0:1f:06:
20:b8:d2:24:34:ec:01:3b:a8:19:ed:72:5d:44:f0:42:9f:d8:
5a:e7:21:c9:f7:cf:fb:ba:42:18:8c:4f:19:1a:c8:5e:d3:70:
dc:27:ba:ae:4d:9b:9f:af:8d:07:32:0d:a1:d1:7b:1a:87:8e:
f7:e9:9f:55:f2:ad:18:4a:0c:af:a7:4a:fe:5d:39:eb:9a:4a:
92:f4:23:f6:a5:33:18:6a:e6:7e:c7:27:88:96:ab:af:c3:63:
57:22:c0:c0:62:97:73:e3:82:a9:58:97:78:5b:ea:2f:c6:d2:
0b:a4:de:75:80:ea:3c:d8:1f:6f:fb:b3:9a:d7:8a:88:97:cb:
8f:80:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:28 2025 by rpki-client