Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: rlBw7D75DRBi/1kT/FVxoF/X96a92faAYm050SHydyc=
Subject key identifier: CA:75:05:78:57:EC:02:4A:29:23:CB:CF:6A:D6:88:83:A7:1B:9C:30
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 01964EFE6625D5B37C33B84EADC39B98ED44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 040B
Signing time: Sat 19 Apr 2025 17:00:17 +0000
Manifest this update: Sat 19 Apr 2025 17:00:17 +0000
Manifest next update: Sun 20 Apr 2025 17:00:17 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: FQNsr+Xn2K2qo9h6VtyjgxbgqWwiisIOdfTZQHLneuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:66:25:d5:b3:7c:33:b8:4e:ad:c3:9b:98:ed:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Apr 19 17:00:17 2025 GMT
Not After : Apr 20 17:00:17 2025 GMT
Subject: CN=ca75057857ec024a2923cbcf6ad68883a71b9c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:df:ad:96:58:b6:b9:34:ee:86:5a:49:e1:
13:fd:5a:c2:e6:0b:18:07:98:36:ec:7b:cd:1f:0d:
f8:57:56:10:54:bf:96:e0:9f:e2:c2:27:fd:38:3c:
f8:9f:ee:df:4d:a6:02:d3:43:ba:31:af:aa:c5:0e:
ba:45:02:5b:f0:b7:a6:0b:92:06:01:9a:fd:8c:9f:
e8:c9:31:d9:bc:a9:43:55:da:a9:0f:be:5a:00:c5:
5d:f9:b4:1b:dd:57:b1:60:63:d8:8a:3d:16:52:c1:
78:8d:ef:7c:84:69:3a:ae:ea:59:ac:71:1a:11:28:
0d:7d:f7:f8:0f:58:7b:59:d0:36:ea:88:ec:92:7a:
8b:df:5e:f0:d2:b3:00:64:88:8b:95:43:33:72:38:
27:06:e9:e2:98:c4:d0:c9:f0:8a:06:47:a0:a1:71:
bb:1d:7d:e2:9e:a3:ba:05:3c:03:f1:89:42:a2:e8:
27:be:74:ea:78:85:8e:cc:ad:41:02:8e:c3:c1:2d:
e7:9b:f8:2e:c8:1e:85:2a:a7:aa:0a:4f:f7:44:88:
66:47:f3:5f:03:1c:14:41:6e:7d:a4:b1:ed:2d:e2:
ec:5d:9d:80:47:64:48:d9:2a:7c:de:81:9e:51:22:
90:40:98:48:3c:16:ab:4e:0a:92:c2:09:e6:4b:c6:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:05:78:57:EC:02:4A:29:23:CB:CF:6A:D6:88:83:A7:1B:9C:30
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c6:aa:26:36:b0:fb:2e:b8:e1:ea:9e:f8:b8:bd:05:b3:62:
5c:9b:93:03:76:78:f7:ec:bd:c6:bd:37:5f:99:32:cb:55:49:
b6:86:a3:c8:f9:11:be:80:a3:3b:b2:f5:77:f0:7d:fe:3f:46:
d7:6c:c6:53:16:92:2e:aa:f8:5b:78:b9:2e:e5:39:9e:07:42:
99:72:bc:21:c0:0f:ad:1d:09:5b:7f:90:a3:57:cb:7d:65:2a:
07:54:6a:33:9a:68:f7:72:52:7a:4a:6b:8f:85:14:78:4a:26:
2f:f1:5b:df:e0:a2:3a:df:20:c7:10:42:c8:aa:60:56:e0:0e:
27:95:f1:0f:71:4d:71:f6:45:ca:db:2e:a6:db:b0:9b:d8:57:
55:2a:1d:63:d5:87:ea:91:0a:e9:4d:a7:40:d8:71:5a:60:b4:
86:e2:7b:9b:3c:c2:ff:14:0e:e5:20:e5:b4:40:a6:d1:b2:64:
14:52:4d:3f:c8:9f:e5:31:6f:38:0d:4d:45:5f:63:3f:d8:57:
d4:d7:70:f2:de:9a:ae:6e:9d:e9:95:ff:c1:cf:27:35:65:92:
ea:b2:60:f8:70:dc:e5:3a:30:87:ae:4a:cd:0c:c1:97:41:cd:
b2:84:2d:f0:b1:9f:76:aa:78:9c:53:b4:51:cd:d6:62:f8:52:
ee:3e:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:43 2025 by rpki-client