Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: Q5ZA6/JjdDItqm/ZxHu09GtRG3Glwm0dsjSjJuUvcFo=
Subject key identifier: FB:1E:87:9E:32:09:97:0A:19:49:6B:7B:D5:E3:93:2A:22:34:E3:AE
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 01974DB292021ACBB0F05E43C1A2580D4BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 0F76
Signing time: Sun 08 Jun 2025 04:00:37 +0000
Manifest this update: Sun 08 Jun 2025 04:00:37 +0000
Manifest next update: Mon 09 Jun 2025 04:00:37 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: KBTUNVW7/EID890JKB/qvbT6JyhgGw/5UNnTXFO2AB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:92:02:1a:cb:b0:f0:5e:43:c1:a2:58:0d:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Jun 8 04:00:37 2025 GMT
Not After : Jun 9 04:00:37 2025 GMT
Subject: CN=fb1e879e3209970a19496b7bd5e3932a2234e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:81:31:48:4a:8d:3e:2a:a3:a6:6f:89:96:
a6:77:85:3b:cd:e0:21:c9:be:08:4f:01:12:96:c2:
51:86:56:12:52:bf:f0:c8:b9:97:67:92:30:db:2e:
e0:93:77:e5:8e:d1:99:11:98:59:2a:d5:55:2d:0e:
a4:8b:a3:c3:5f:25:4e:fc:f1:4f:2e:5d:88:b4:9f:
66:25:dd:19:af:1b:b8:7e:8d:96:7c:d4:2b:36:90:
d9:f2:98:74:d0:a1:a5:59:6b:31:50:74:6e:f5:d6:
c0:f2:7c:43:c6:67:bc:39:e2:ea:82:45:ad:a8:9a:
dd:05:3d:e7:af:dd:7a:ab:47:5f:ab:f8:83:4f:dc:
4f:c6:02:e0:12:82:bb:ee:77:6f:c8:54:0d:1c:0e:
ba:78:3a:97:33:a7:ab:c0:e0:bc:b2:3b:32:a1:60:
6c:80:f3:73:9b:f0:fa:d2:91:0b:72:3d:05:de:c4:
78:1e:14:fa:49:d5:36:32:f6:6c:0d:77:cb:10:7b:
02:83:5e:ac:44:97:64:4c:e2:e6:45:3a:75:e4:26:
2b:1e:94:18:d0:3f:d9:15:9f:27:95:64:c7:ab:0d:
58:95:0e:dc:2c:bc:f5:8a:93:e6:8d:f0:f3:1e:a1:
2d:99:0a:1e:60:bf:37:6c:fe:a2:77:52:99:d9:8d:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1E:87:9E:32:09:97:0A:19:49:6B:7B:D5:E3:93:2A:22:34:E3:AE
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:8f:11:be:d9:03:a8:fc:28:f9:44:0b:78:0f:05:fa:f0:
40:02:d8:02:f5:9b:64:3c:83:61:dd:84:a1:f9:15:8e:8e:bb:
9a:14:44:cc:4f:f6:e5:56:b0:2e:a6:f3:d5:5b:00:58:72:a8:
38:5d:98:9b:46:58:d2:09:6c:cd:f2:7b:46:e6:f7:30:4e:50:
30:cf:cc:91:28:c5:50:27:cd:45:a1:82:ac:6e:49:92:c1:54:
dc:dd:0e:32:08:97:58:68:1a:dc:c5:84:56:e9:20:b9:eb:bb:
d8:45:03:c3:cb:f2:66:17:91:b1:1b:29:05:90:a5:29:ba:5d:
1f:2d:0b:1b:d2:5f:a5:86:0c:ec:5b:9b:7d:9e:99:a9:65:1c:
4d:42:e0:95:7d:63:5c:74:87:c9:37:f7:fa:04:fe:5b:05:fc:
32:ab:87:4a:0d:c3:49:08:3e:8c:6f:94:67:2c:63:ef:5b:94:
29:b0:50:ed:9c:64:7e:b8:55:e8:61:f3:79:0e:42:90:a9:a2:
11:ae:37:61:6e:ab:91:90:1b:3c:62:e7:fa:1b:b0:b4:71:e4:
a3:43:0e:d2:8b:9c:26:6d:2e:96:45:d6:5d:a1:e3:84:3a:37:
dc:15:56:66:72:37:fa:78:b6:43:a8:d9:78:f9:e8:d1:5c:c2:
3a:cd:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:17 2025 by rpki-client