Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: I2bF+dFNSeT4eUEjzZbK3gpRQCgUdjmS+HL+CKe6X0E=
Subject key identifier: 4E:A2:B5:B9:84:41:8F:16:0E:A5:B5:32:BD:4D:D5:BD:6F:69:99:EC
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 01962A1716A614563D55818C6BF0EC344E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 0EDF
Signing time: Sat 12 Apr 2025 13:01:18 +0000
Manifest this update: Sat 12 Apr 2025 13:01:18 +0000
Manifest next update: Sun 13 Apr 2025 13:01:18 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: ebc86On031Y2vyRTm/OFV6itf8wQtDEHvkMfJWT2ux8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:16:a6:14:56:3d:55:81:8c:6b:f0:ec:34:4e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Apr 12 13:01:18 2025 GMT
Not After : Apr 13 13:01:18 2025 GMT
Subject: CN=4ea2b5b984418f160ea5b532bd4dd5bd6f6999ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:e0:41:9f:bc:ed:33:d8:7a:ff:ef:44:64:
fe:32:b9:81:82:e3:c2:a4:24:92:bc:98:1c:36:cc:
b9:4b:d8:ef:cf:af:aa:9e:01:e0:90:d3:dd:2b:ce:
44:57:c1:38:ce:5b:8d:2e:08:a1:dd:82:7d:6e:4c:
15:17:12:a6:f0:13:bc:ea:1b:dc:74:e9:38:14:23:
d6:67:53:10:ae:45:b1:56:a1:d8:15:b9:9a:a2:23:
d3:4c:e3:5d:33:44:9b:a1:bb:2c:9b:fb:71:58:fe:
30:3f:a7:ff:b0:79:9e:fa:f5:1d:cf:ec:fc:0b:9e:
9a:aa:19:79:f5:0c:ec:92:7e:c1:64:81:dc:9e:bb:
f5:e8:20:67:7b:c4:b2:4d:85:96:73:ed:07:a8:23:
87:53:10:e4:d6:ce:f2:2b:35:9f:ca:03:0e:36:fb:
96:b3:45:69:48:e2:61:11:b8:b1:6a:be:67:f8:2f:
ed:f7:e1:71:b8:18:c8:a3:8d:00:29:0f:6b:d8:70:
c7:d9:d5:06:33:c0:c9:ba:c5:45:bf:cb:a2:52:3a:
e2:c0:73:2a:f8:b7:93:90:b4:f3:27:14:64:c3:3f:
20:e0:ae:a7:84:d7:76:82:9c:9d:54:7c:42:dd:3f:
e4:c9:1e:c9:1f:df:18:09:c1:b1:47:d9:60:39:95:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:B5:B9:84:41:8F:16:0E:A5:B5:32:BD:4D:D5:BD:6F:69:99:EC
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1d:9c:4c:ce:5f:a1:bf:c0:73:bf:34:bd:a0:6f:07:70:93:
cd:aa:4b:24:f5:b2:f6:66:fe:42:66:f0:3b:54:aa:4b:a9:0f:
08:4b:2a:a9:95:fa:a9:7b:78:f1:69:47:b9:4e:cb:47:b7:be:
3a:f3:d4:6e:91:e2:32:d0:96:9d:3a:93:ab:fb:6e:e3:d5:74:
de:04:9c:ca:6c:45:61:de:ce:35:1f:c0:e4:77:56:f4:fa:37:
72:8c:51:52:99:e3:a8:b3:15:4b:f3:8d:ec:2d:15:c8:0a:43:
6b:f7:c2:71:dd:ab:25:f0:df:4d:57:35:03:6b:14:19:ad:04:
00:4e:60:b7:71:03:66:39:c8:86:6c:ed:8e:9f:ec:ea:91:8e:
db:e3:32:dd:e5:b2:60:0a:69:e1:b0:1f:ed:50:8d:13:2d:54:
9c:02:e0:1d:46:12:88:84:17:a2:02:a0:7d:6a:4d:96:65:e8:
a4:38:71:01:39:f4:47:77:f3:92:b7:71:55:04:92:1a:15:40:
75:cc:3f:69:d8:00:59:88:24:f1:bb:62:e7:a5:1d:5b:36:72:
b7:af:f7:cd:39:b0:e6:71:89:40:cf:9a:1c:eb:50:45:c8:38:
df:91:80:d4:28:cc:0b:c8:37:f0:53:1a:5f:66:4a:b3:58:de:
ed:b8:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:54:19 2025 by rpki-client