Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: bPA5IfX2q87aLy0rxGLWNi0FVAZsJxJAvCB+WV9WAvk=
Subject key identifier: 8D:0E:42:E3:12:AF:F5:89:02:FF:80:0C:88:03:4B:98:23:C4:D7:AB
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019644445AF2B41A4629145EDEBCBAE6CB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0BE8
Signing time: Thu 17 Apr 2025 15:00:52 +0000
Manifest this update: Thu 17 Apr 2025 15:00:52 +0000
Manifest next update: Fri 18 Apr 2025 15:00:52 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: p20OBLraoTMkxG2ysiFXO61pjcDG8yPMoi0RfA3z2fE=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:5a:f2:b4:1a:46:29:14:5e:de:bc:ba:e6:cb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Apr 17 15:00:52 2025 GMT
Not After : Apr 18 15:00:52 2025 GMT
Subject: CN=8d0e42e312aff58902ff800c88034b9823c4d7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:ac:99:e8:22:89:db:67:ab:e0:29:5d:61:
53:09:00:9e:bb:4a:fc:e3:b1:67:44:32:74:75:8e:
6e:48:e1:60:3a:92:e9:1c:a5:84:12:6a:77:3d:fe:
ed:8c:38:1c:d5:3b:08:3e:dc:0e:31:85:ac:62:db:
90:06:16:0d:c8:1a:22:71:fb:0a:c9:f1:bc:db:9d:
81:26:0d:1e:15:d1:c8:13:2c:45:9d:75:3b:2a:a9:
97:d4:9f:a0:a6:83:f9:48:01:6b:49:ea:b9:d5:61:
89:03:4a:0a:2c:d2:ff:9a:8e:64:99:af:70:71:a5:
b1:13:60:ac:ce:08:f2:48:16:67:6e:10:95:b4:28:
d6:0e:5b:b0:68:e3:3c:da:54:bb:18:2f:99:36:c6:
c4:99:74:5b:9e:f4:54:86:ed:a5:ca:c0:cb:15:50:
cd:7f:95:97:91:df:6d:ec:99:d8:89:a7:9f:cd:7f:
30:d2:b3:75:cc:cf:5f:7b:60:81:c7:53:be:4c:b1:
6c:cc:22:be:97:59:e5:c6:f2:91:67:b5:cc:d4:74:
71:cf:14:be:a7:cd:9a:51:c6:fb:7f:48:73:da:71:
b0:8a:aa:80:49:7b:5b:58:25:1d:bb:66:7c:70:e4:
46:bc:88:c0:04:8a:e6:05:b3:9f:d1:de:91:d0:8d:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:42:E3:12:AF:F5:89:02:FF:80:0C:88:03:4B:98:23:C4:D7:AB
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:7f:28:cc:c7:ba:35:c9:4c:d2:d8:5f:7a:7a:c3:f0:7a:
47:dc:3c:ad:8c:07:ae:fe:ed:81:09:1c:10:5d:2d:56:90:e6:
58:47:5a:b4:bc:1e:1a:5a:c0:4d:d8:2e:af:73:fe:16:57:e6:
dd:bd:c8:7e:07:0b:1e:37:bf:d5:55:2a:77:99:b3:3b:95:2a:
cb:39:d8:9a:64:6b:78:31:8b:00:94:f8:45:30:29:ea:fd:b2:
f6:5e:a9:2a:ab:14:c1:91:0a:5b:f0:76:64:9d:da:73:65:f0:
35:dd:51:cf:07:b8:00:82:de:4b:20:7d:bd:00:ed:60:b8:91:
67:d6:aa:e1:96:b1:42:65:a1:24:8e:a0:e1:fb:6d:91:5c:f8:
b9:ec:2f:b5:31:f6:8f:3d:53:66:b1:66:95:63:06:45:d3:6b:
1d:9d:4b:0b:86:ae:ee:cd:56:70:0b:0f:fd:b9:1c:d1:89:ad:
b7:5f:fd:3d:8a:bd:c7:20:8e:a7:5d:70:03:fd:84:72:a1:2a:
a2:de:55:90:0d:e9:14:25:18:d2:e1:d9:26:ca:7b:ed:82:22:
11:6a:ad:98:2b:c5:18:5d:9b:7d:dd:29:8f:5a:42:c7:e5:cb:
5f:05:90:2b:c1:97:98:a6:bf:f5:b6:05:bf:48:0a:11:ff:49:
6d:6c:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:26 2025 by rpki-client