Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: cMZwWtounEwmMw/fvs9FAV7FmBrdGDh5fC++22grS44=
Subject key identifier: DD:0B:9E:1C:3F:CB:60:F9:F6:B0:DB:DB:BE:F8:BF:1C:4C:13:A9:EA
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01976282B679DDD416654D4696D436737F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 0E8A
Signing time: Thu 12 Jun 2025 05:00:22 +0000
Manifest this update: Thu 12 Jun 2025 05:00:22 +0000
Manifest next update: Fri 13 Jun 2025 05:00:22 +0000
Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: GvbeIsebMrr1TR5w/nMSEMb5Vbcd5c9cE/GH2znYqYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:b6:79:dd:d4:16:65:4d:46:96:d4:36:73:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Jun 12 05:00:22 2025 GMT
Not After : Jun 13 05:00:22 2025 GMT
Subject: CN=dd0b9e1c3fcb60f9f6b0dbdbbef8bf1c4c13a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:47:b8:b8:33:50:3e:10:fd:35:98:7d:4d:
5e:b7:ab:d0:f4:9a:6e:f4:e8:4b:3b:28:e3:9b:50:
b9:42:d5:b6:a7:d2:97:3e:03:ae:e0:fb:3b:2d:ef:
9b:ac:b3:25:f3:0c:c4:c4:a4:18:23:f5:86:f4:ed:
fa:f6:7f:3a:9f:d3:c6:4d:d6:13:d2:0a:2e:0b:b6:
7d:75:e9:6b:0d:50:30:e5:43:b1:56:ec:f9:22:c3:
6d:24:96:e8:99:f4:bc:64:0b:c9:ed:98:92:07:71:
e2:a2:46:13:94:3b:54:90:09:6b:d0:22:ff:f0:02:
14:f4:a2:89:f8:c4:ae:48:5b:fe:cb:e8:ec:a2:6c:
e7:b7:87:47:9c:ce:4b:30:4c:30:32:23:fb:27:d9:
52:86:70:bf:1d:7d:13:67:f9:33:3c:7f:24:d1:15:
8a:36:47:68:01:3c:86:9f:1d:1e:4c:af:c1:02:bb:
2c:93:9d:3b:05:3f:5e:8a:d5:56:4a:74:2c:dc:14:
c6:d6:68:c9:48:1c:15:0b:3a:03:c3:69:ce:a6:b7:
65:9d:2f:90:47:ca:ff:4d:7c:4d:9d:e7:a2:b1:7f:
f3:c3:97:57:30:42:b3:52:aa:a0:c1:b9:5f:6b:a8:
57:21:3c:96:99:56:c9:28:1d:16:bd:14:44:13:87:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:9E:1C:3F:CB:60:F9:F6:B0:DB:DB:BE:F8:BF:1C:4C:13:A9:EA
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:71:2a:9a:31:fa:6e:f9:c7:d6:b6:30:0f:b0:3e:cc:a5:ca:
af:d6:b4:b0:39:07:74:5e:fe:aa:a7:e5:9e:91:4c:31:38:32:
99:c3:fa:4d:00:63:62:e5:d7:6c:b2:c7:64:f3:eb:ed:fb:55:
70:27:e4:25:43:47:7a:8d:a4:57:58:7b:46:4d:76:f6:d6:dd:
12:76:73:b1:9d:1c:17:e6:c3:ad:18:23:2f:7d:b3:f8:04:94:
85:1c:77:9f:5a:3d:85:97:4f:e0:c9:12:4d:2b:1c:5c:c9:36:
1d:5b:1d:a6:a7:15:29:83:3e:17:3b:95:2f:0e:03:d7:d6:0a:
8b:84:0f:bf:8c:d5:e1:d7:52:25:db:0f:e0:82:6b:9c:3e:4e:
5b:87:2b:f6:19:cd:fc:0d:90:9f:a7:0f:81:89:b8:23:8a:b1:
46:0a:cc:3a:2a:1c:98:10:0c:19:20:b0:aa:d3:4d:53:f6:d5:
cb:7b:03:d6:7b:49:48:b3:4c:b5:09:b1:14:10:e3:02:b9:eb:
84:b2:9d:28:49:fc:53:1e:d5:01:ef:31:a2:25:d5:09:de:7c:
74:af:22:0d:1d:08:15:cc:7c:54:3f:c5:6d:91:0e:0b:8b:54:
73:df:95:8a:b3:ba:b2:f8:a8:c6:31:8f:47:4e:88:c4:58:51:
d3:d6:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:18:50 2025 by rpki-client