Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: potXvcGJUmCD0H40dglcL8XgfriNlhyIRMJN9ZMGa1Y=
Subject key identifier: A2:F8:3E:A4:DA:AD:9E:74:C8:44:E8:D7:C2:BA:71:03:69:83:BC:BB
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019658DD38792BAD0B0C97B60B00032DC202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 107B
Signing time: Mon 21 Apr 2025 15:00:14 +0000
Manifest this update: Mon 21 Apr 2025 15:00:14 +0000
Manifest next update: Tue 22 Apr 2025 15:00:14 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: tx1T1ZOyVZPzYFZfFQBRRqob8RzsJ2IOIlRKnsX2SDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:38:79:2b:ad:0b:0c:97:b6:0b:00:03:2d:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Apr 21 15:00:14 2025 GMT
Not After : Apr 22 15:00:14 2025 GMT
Subject: CN=a2f83ea4daad9e74c844e8d7c2ba71036983bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:86:d7:4c:b5:c4:e8:17:16:e9:ce:5c:1e:
d3:a9:9a:79:1b:ad:1f:0b:4b:2f:d0:66:d8:9a:77:
dc:01:fb:ad:56:74:3f:3b:3e:75:c9:28:50:bb:2c:
19:42:70:94:5b:9c:8d:0a:dc:58:a8:01:20:ca:4e:
d4:12:8b:d4:45:30:2b:c1:7c:f2:49:0c:6d:75:64:
53:4a:ec:13:bc:10:0a:ad:c8:c9:e8:53:c0:37:4f:
d6:fa:98:80:d7:e3:c6:cc:31:a6:a6:9f:64:38:a4:
9b:0e:28:e3:03:03:76:4d:0b:e2:d0:7d:56:f8:02:
28:97:d1:55:88:fa:d0:06:f9:8e:50:1d:f9:87:53:
ac:a4:eb:0f:f2:a2:b8:a4:5b:13:a1:0f:27:15:72:
b6:84:94:d2:d3:39:61:61:78:61:7a:ce:12:3c:68:
fb:d7:5a:d8:24:d3:dc:70:12:d4:45:60:22:40:99:
6b:8c:09:93:87:79:39:fd:86:21:29:9f:68:bc:59:
6a:4f:4a:9e:75:01:34:77:6f:07:62:9a:6e:4d:79:
27:87:68:d2:11:0d:82:57:04:e6:34:d4:f9:41:b5:
53:c0:ae:64:2f:c5:9b:0b:cd:55:47:82:cb:c4:7e:
ec:2b:1f:88:45:fd:e3:9f:83:dd:c2:aa:98:d5:40:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:3E:A4:DA:AD:9E:74:C8:44:E8:D7:C2:BA:71:03:69:83:BC:BB
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:b3:b1:0f:cc:5f:e8:cc:8b:77:cf:17:4d:9b:8c:20:57:
b4:e5:9f:c9:f8:b5:44:d9:1e:33:3c:c6:d0:05:93:b6:da:82:
52:ed:21:9f:d3:10:b5:8f:13:97:13:7d:85:85:cd:14:37:4b:
c3:d0:cc:5f:a6:84:d7:b4:ac:a1:ea:c6:f9:8d:23:3f:fb:fc:
27:69:3b:b9:6c:b0:d7:20:8f:52:db:fa:4c:79:54:f5:e8:61:
60:c9:db:1e:41:54:05:c8:4c:62:5f:1c:54:2e:0d:08:f5:c0:
96:a7:3a:2a:bd:23:d8:69:e3:b9:0a:2c:32:d1:f2:06:b1:26:
13:e6:df:9a:71:2d:e8:9c:b9:6e:c1:b2:6f:27:47:d2:51:02:
7c:5e:89:a3:8c:f1:6b:f5:91:1e:ff:c7:58:21:53:06:7c:e3:
d9:e9:88:9a:44:88:85:de:a6:02:ea:6d:a3:0e:5e:12:6f:dd:
6a:e0:61:95:44:f2:4f:4a:9c:6d:37:6a:36:03:8b:07:3d:ce:
99:8a:55:19:2c:b8:c1:ae:6e:4c:d9:81:a7:bc:7f:57:52:08:
ca:94:d2:10:6e:b2:23:20:dc:2c:93:cd:de:60:c9:13:9f:3d:
68:6f:ad:1c:a3:7c:8d:80:88:0c:4b:aa:1b:e5:29:19:f8:4d:
18:91:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:50 2025 by rpki-client