
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: TvXmEMSbkIg1hK0E8jifg/0iYBrLMwT3TZ2FlXpfhJ8=
Subject key identifier: 12:6E:BA:30:3F:A8:05:0F:33:40:BB:81:6D:C8:1E:B0:AF:33:33:39
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01958BBBC032BB3527FB177432091FE8996C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 19:01:32 +0000
Manifest this update: Wed 12 Mar 2025 19:01:32 +0000
Manifest next update: Thu 13 Mar 2025 19:01:32 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: /Nnz6ktE3QAHzFw8pUuTjjNhwXkyVps9uUp5NdceSPE=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:c0:32:bb:35:27:fb:17:74:32:09:1f:e8:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Mar 12 19:01:32 2025 GMT
Not After : Mar 13 19:01:32 2025 GMT
Subject: CN=126eba303fa8050f3340bb816dc81eb0af333339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:aa:ee:fd:cf:43:67:48:42:37:fa:1f:20:
54:64:f2:9a:72:43:45:fc:77:4e:55:a9:5a:d3:a0:
2c:15:18:5a:03:8c:48:ee:f3:00:af:5c:a4:13:45:
4f:e7:80:ee:9c:1f:85:62:d8:fc:8f:3d:53:09:1e:
62:0c:3c:d3:ce:ce:4f:b0:e8:ec:5a:53:fa:0d:97:
84:e9:bb:a1:98:0d:82:17:65:64:93:4f:6a:92:72:
85:66:1b:6b:cd:2f:8b:c7:bf:37:77:d3:d6:4a:26:
4b:b7:0c:05:90:22:f2:24:f4:c9:79:c4:59:56:e9:
f5:3a:30:e3:fc:4d:63:87:c6:64:4c:96:be:76:10:
1d:ff:65:25:db:76:12:a6:27:e1:5a:16:d5:b7:97:
87:b2:33:67:0b:49:f9:23:e0:08:c2:3c:8a:fb:a9:
62:55:ca:51:8a:c8:c7:4f:91:8b:32:4a:e6:2f:93:
d0:45:3a:af:72:fd:dc:bf:e5:9b:c1:7c:b0:14:ce:
0a:2b:36:93:0d:24:15:4e:92:d4:d9:bc:9c:a8:84:
92:37:b7:c9:c9:14:da:a3:5f:45:74:e2:e1:ab:fe:
a4:65:db:fd:76:b4:73:81:61:92:3b:85:6e:f4:cb:
38:4e:dc:22:2a:f3:54:94:6c:5a:fd:18:00:45:b3:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:BA:30:3F:A8:05:0F:33:40:BB:81:6D:C8:1E:B0:AF:33:33:39
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a3:21:2f:c1:fc:5a:ae:7f:be:4a:2e:55:b2:09:1d:20:01:
60:a4:fc:06:0e:16:71:bf:4c:99:a9:37:fd:4c:35:98:35:30:
c2:a5:5a:58:8f:d7:ba:1b:45:4a:64:a5:13:9e:9e:7d:b4:52:
a3:72:43:e1:ef:5a:6e:c1:20:5f:87:f6:05:f2:e9:98:2e:e3:
d8:7b:3e:3b:12:6b:20:e6:a2:22:00:76:90:56:dd:09:ff:de:
7f:3f:f3:b2:53:d4:d6:5a:b0:6f:89:f3:a0:49:01:d6:3d:05:
c7:f5:c4:87:bb:05:9c:b1:0d:1b:1a:b3:85:e2:4f:c7:0a:36:
87:b3:96:2a:ed:ce:a6:85:11:a5:71:db:33:b3:11:a7:59:00:
8b:8e:2e:27:9e:3a:cb:41:6b:56:64:af:bc:3a:82:31:f3:bc:
80:ec:46:ae:a2:32:75:9d:b5:1b:4d:08:75:33:3f:47:8d:a1:
f3:e2:aa:36:f3:51:ec:7f:3b:4d:b0:3c:8b:92:03:61:60:70:
e4:51:5f:00:58:19:a3:fd:82:cb:95:07:b0:01:fa:61:69:cb:
db:6f:9b:d8:8e:ee:f7:ba:f0:21:25:57:69:fe:5b:c5:27:8a:
16:d9:bb:01:49:34:2f:aa:2d:4d:b0:f0:ec:bb:07:81:63:41:
4a:c5:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:07 2025 by rpki-client