Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: pPkTdGHCvQ68kc/naUSpcov8eS7rMCsCFp2AEk8WpV0=
Subject key identifier: 45:59:E3:CE:65:4E:55:67:6D:BD:43:67:2B:04:9F:8E:11:98:40:DC
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 01960FE9062C6F8DDAD718F132912191F372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 11:00:51 +0000
Manifest this update: Mon 07 Apr 2025 11:00:51 +0000
Manifest next update: Tue 08 Apr 2025 11:00:51 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: ZVw62LUYXVs/EAWmQX2oRb4eX4hZrb7I9HOJr5Ynlmo=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:06:2c:6f:8d:da:d7:18:f1:32:91:21:91:f3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Apr 7 11:00:51 2025 GMT
Not After : Apr 8 11:00:51 2025 GMT
Subject: CN=4559e3ce654e55676dbd43672b049f8e119840dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:78:ad:24:8e:3a:51:00:5e:ae:d1:b9:53:
2e:9d:9c:98:f3:35:f5:c9:ec:2b:23:a9:6d:67:f8:
31:7e:ea:35:52:87:bd:f7:ec:39:f5:0f:a9:54:2d:
38:7e:03:84:f4:60:86:fb:2f:6e:f4:57:f6:f4:a7:
29:a8:2a:db:82:ab:d7:58:61:3c:f9:9c:e8:d5:0d:
58:58:8b:31:a8:61:74:0b:66:d1:40:4d:c9:83:5e:
1f:c1:56:bb:d7:ad:6c:df:e6:57:88:48:26:b4:71:
93:97:67:cb:a3:7a:b0:84:cb:5b:a7:9e:3a:95:c8:
f5:3b:be:56:f0:e0:c1:68:9f:f6:ed:93:68:92:de:
2f:d9:e6:15:d2:41:73:ef:a6:92:71:ec:49:38:b0:
c4:60:34:22:61:6e:4c:14:8a:a5:ed:98:83:7f:95:
0f:c5:5f:6c:2d:97:31:88:ad:79:b7:25:8b:c8:99:
c4:34:89:9f:50:21:4d:8b:6a:34:a6:74:12:b7:6a:
d6:9d:1c:ca:ac:d2:99:d4:16:45:60:7a:db:87:59:
e6:30:9e:08:30:e7:0f:80:0d:a0:81:bb:ce:43:53:
4f:fe:9f:be:5c:42:f9:eb:e3:51:c2:93:32:eb:cc:
33:4c:20:6d:d8:28:81:72:63:da:b2:72:e5:24:92:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:E3:CE:65:4E:55:67:6D:BD:43:67:2B:04:9F:8E:11:98:40:DC
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:fe:4a:a3:f3:9d:91:bc:28:eb:06:bb:81:9c:b9:20:25:
f1:08:16:24:ca:62:a0:2d:a4:67:7d:da:1f:3c:38:ab:63:f9:
78:b4:b7:b2:39:9f:ab:27:12:e6:38:d4:f6:b9:6c:7e:34:c8:
69:14:e8:c1:6d:19:c3:ec:4e:94:af:26:29:ae:ac:2e:02:d4:
5a:92:22:83:7d:08:70:2c:02:7c:9b:28:0b:52:0f:43:84:ac:
3f:a8:3d:2e:fa:2c:96:6b:e0:72:5d:b4:18:4d:a2:98:1e:73:
ae:b5:13:7e:24:8b:66:0c:ec:56:db:df:a9:cf:26:6d:11:ea:
42:25:83:ac:3a:ff:91:d4:2d:f4:1a:b5:92:fa:33:20:09:63:
16:0c:32:15:1a:4e:10:5b:be:05:8d:27:46:8f:f5:56:f7:f7:
75:ab:5e:1b:78:63:bd:cf:ee:17:22:c2:f2:07:2b:0a:1d:b6:
43:fd:10:21:da:1d:69:92:84:2e:73:e2:0c:9a:e3:05:01:0d:
da:ea:c9:9d:0e:50:b8:0b:b8:fa:f6:b8:44:bf:4e:fc:75:4b:
03:2c:00:92:7b:c4:ef:8a:db:da:01:4a:23:63:0d:9f:d4:7a:
f6:5b:03:80:f5:e8:85:e9:82:01:f2:9a:fb:5b:63:03:95:00:
74:4a:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:32:53 2025 by rpki-client