Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: eX9EQmEqACZXgEuYVgwC3897eNncpM5Nzo12S2LV9U8=
Subject key identifier: 38:A2:DA:8A:2B:D8:D1:31:88:71:E6:7E:D5:87:CE:0B:F8:DE:94:C8
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 01964DEC67AF956EF3C3716DA39AB99548AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 12:01:00 +0000
Manifest this update: Sat 19 Apr 2025 12:01:00 +0000
Manifest next update: Sun 20 Apr 2025 12:01:00 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: vV9vKfWYBZ/b+kClAYT36lSr6CVAUHZoywuQk9HyVAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:67:af:95:6e:f3:c3:71:6d:a3:9a:b9:95:48:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Apr 19 12:01:00 2025 GMT
Not After : Apr 20 12:01:00 2025 GMT
Subject: CN=38a2da8a2bd8d1318871e67ed587ce0bf8de94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:fa:ed:7e:46:e1:c4:5e:9d:79:33:fb:be:
fe:bf:86:e8:80:40:03:49:83:5e:a9:09:6c:ef:30:
84:f2:21:e1:07:2f:86:76:0d:bd:30:dc:28:3e:aa:
7a:b6:f0:62:10:64:c8:de:20:68:4e:8b:52:81:2f:
49:c6:af:38:41:d4:1a:0b:5b:42:4f:13:0f:1e:3c:
a1:63:a5:16:74:ef:e9:27:37:25:b2:46:49:2b:e6:
ca:ed:87:dd:59:a8:09:26:f0:44:28:90:3a:1e:25:
32:9a:33:25:16:e9:01:91:b2:0f:c8:11:df:fe:1b:
e2:69:e4:73:3b:a3:04:e8:82:a8:c8:74:dc:2b:3d:
93:ff:21:c2:76:92:79:90:08:d0:20:f9:cc:fc:4d:
3e:ba:90:95:e1:b5:51:7c:f2:fa:d5:03:ef:a0:e0:
fd:54:e4:11:ad:80:d7:2f:15:e7:f8:9c:97:a1:0e:
84:43:fa:d8:88:4b:d7:6d:cd:36:e2:89:3a:bd:18:
a1:53:d2:57:6a:71:7e:cc:4c:03:2f:cb:42:d7:90:
b0:8d:ed:d9:bd:3b:b3:7f:4d:01:fb:3d:2d:07:9a:
0b:1a:64:c0:cd:13:c3:9b:ce:62:da:de:78:33:2b:
55:45:73:48:4e:9f:f8:e9:51:e9:6d:bf:79:f8:57:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:DA:8A:2B:D8:D1:31:88:71:E6:7E:D5:87:CE:0B:F8:DE:94:C8
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:79:fb:32:1d:9a:2a:d3:38:66:aa:87:2f:01:19:4c:98:
b4:15:24:a8:61:9d:e8:e2:f0:0f:1a:2b:cb:6a:47:03:5c:86:
ff:df:41:ef:94:84:4c:60:55:e2:3d:ce:a2:b5:f2:da:00:11:
6c:05:c7:6e:f4:7a:31:91:c3:ec:af:93:29:1c:dd:04:ae:b1:
8c:1b:19:0b:fb:23:2e:1b:25:78:d0:bb:2d:f3:73:15:b9:e6:
d7:f8:5f:a3:40:0f:b4:93:19:e9:0a:ee:21:69:c5:f9:e9:f4:
70:26:96:12:ed:52:94:91:9f:e8:22:62:bc:95:55:5d:f8:12:
5c:2c:df:50:aa:99:9d:07:b8:fa:37:c2:13:ad:b4:b1:c2:d4:
66:ff:a1:e2:a9:a0:3d:d9:cb:f4:de:53:52:bd:e0:fa:ba:58:
92:3b:09:d4:9d:cf:bb:bd:8a:a4:b7:fb:ee:75:ef:88:4e:24:
1d:6d:ef:53:31:87:08:ab:9d:dc:ae:8d:15:74:3a:ee:44:33:
eb:4a:1f:2b:a1:62:c9:6a:ee:00:ef:e3:bc:fa:ea:ee:b1:08:
fa:b2:43:6b:9e:8d:37:e9:f9:bd:ae:54:41:48:12:78:ef:9e:
ad:55:af:aa:8b:6b:8d:53:75:43:3f:5d:93:f9:a4:cf:be:d8:
46:65:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:23 2025 by rpki-client