Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: ua48P0ZNv/SliULljszQ/IMO4BweXMKzld6gQ05gX0Q=
Subject key identifier: 42:A8:B4:20:52:62:8B:4A:13:8D:72:8D:E4:2B:5B:B3:65:98:C0:E9
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 01963CF8CA14FF73262FE149E49412908C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0BC4
Signing time: Wed 16 Apr 2025 05:00:59 +0000
Manifest this update: Wed 16 Apr 2025 05:00:59 +0000
Manifest next update: Thu 17 Apr 2025 05:00:59 +0000
Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: GrLYvmTvmEnSfkxC0t2+K3MPWMbcYUTsBjDSjcjRGO8=)
2: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:ca:14:ff:73:26:2f:e1:49:e4:94:12:90:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Apr 16 05:00:59 2025 GMT
Not After : Apr 17 05:00:59 2025 GMT
Subject: CN=42a8b42052628b4a138d728de42b5bb36598c0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:ce:c0:87:59:0c:d5:a2:09:a0:9e:9a:d8:
cd:ce:b3:c7:3c:fe:ac:e2:3e:ec:09:74:bc:ec:0f:
45:33:88:f4:40:54:79:56:2c:1d:10:eb:ac:8d:b7:
56:9d:c0:69:7b:2e:c1:6d:06:bf:db:cb:df:39:de:
bf:f5:cd:89:b0:c2:f0:30:90:50:c8:08:7c:8b:0c:
f5:d9:d3:ff:6f:b2:86:52:c8:d1:ea:4d:0b:b5:1a:
db:ec:42:49:46:f9:5a:1a:54:20:77:58:4b:c8:a7:
04:95:00:79:79:b4:c8:90:bd:da:af:e8:1a:aa:24:
31:e7:0d:e6:0e:f4:23:7b:ff:7b:c5:2d:e6:41:4f:
49:42:96:09:5e:c8:85:71:0c:2a:af:e4:f1:5e:8b:
56:5c:b6:d8:84:e8:8d:4a:9d:c9:49:bf:27:27:80:
c3:08:b0:a8:f8:f6:8c:a5:3f:f7:f6:b1:40:40:2f:
97:cb:a4:eb:56:45:2f:dc:61:16:f9:b1:c5:59:d5:
d9:dc:19:9b:48:d6:aa:f7:59:21:a3:25:ff:87:03:
ee:22:ee:b9:60:23:76:60:e9:3c:de:2c:42:5b:80:
3c:cc:26:1e:c3:df:52:17:17:13:7a:e7:3d:11:77:
e5:b0:bd:94:07:95:ea:e4:72:f1:26:4b:d2:50:53:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:B4:20:52:62:8B:4A:13:8D:72:8D:E4:2B:5B:B3:65:98:C0:E9
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ec:41:80:b1:b0:3e:9f:27:69:ec:5c:93:c9:8b:6f:0c:1c:
05:48:5a:a8:e3:4b:16:78:b4:47:fb:9b:dc:6c:84:13:a8:92:
98:fb:c7:49:a8:76:36:1a:87:94:e4:95:89:3d:43:bb:df:ca:
4c:d2:80:25:1e:af:94:9c:4c:b4:49:7c:8d:c7:7f:bf:83:ec:
9f:68:06:fb:df:77:c4:25:eb:27:54:e9:9c:c6:e9:6e:0b:33:
6c:ad:e9:dd:04:a4:a2:ff:55:3e:08:6d:ef:11:0c:62:02:8b:
97:7c:b2:f0:c0:46:79:84:c4:4e:23:d8:95:03:e0:67:7e:39:
44:3c:70:15:7e:3f:41:8f:01:e8:94:ab:33:64:f5:5a:e7:b4:
18:bd:ce:e9:d9:41:77:67:5d:57:61:fc:ae:34:e1:06:91:26:
65:c1:76:b7:95:40:cc:05:9a:bd:76:7f:2c:cf:a1:33:0a:19:
46:ca:e1:49:4b:b7:66:fc:d4:ca:69:d0:45:eb:c8:18:12:0c:
bc:f4:43:7e:ce:d9:a8:fd:a5:5b:a7:16:ee:3b:56:67:9a:d5:
14:e1:47:cc:2a:e8:ab:7a:5b:6a:d1:34:5a:50:02:77:82:8e:
dd:f7:02:b2:1d:4a:7b:7d:a9:81:6f:00:c3:d6:70:98:9d:e0:
02:19:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:06:55 2025 by rpki-client