Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: qUFxy/P5rm8GKKMy1f/BhOOKfeLeehOVsEQ+ZkCi4Jo=
Subject key identifier: 05:A1:8A:12:41:6A:72:F7:8B:B1:0D:00:9A:06:AC:46:E1:C1:6F:9F
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 0196078B19F383FADA36CE6A688A8AD8C023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 03D3
Signing time: Sat 05 Apr 2025 20:01:18 +0000
Manifest this update: Sat 05 Apr 2025 20:01:18 +0000
Manifest next update: Sun 06 Apr 2025 20:01:18 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: xBxQlk7MHCGh+6RwT44pq/20k5HPaeVFzNtuVWOQnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:8b:19:f3:83:fa:da:36:ce:6a:68:8a:8a:d8:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Apr 5 20:01:18 2025 GMT
Not After : Apr 6 20:01:18 2025 GMT
Subject: CN=05a18a12416a72f78bb10d009a06ac46e1c16f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:f0:f9:2a:b2:b4:35:9e:7e:a3:5c:da:d7:
64:11:18:5e:13:72:3d:0d:4b:52:fc:d4:45:c2:19:
ab:9b:f0:e8:f0:96:d8:6a:9c:2a:8a:d8:1a:bf:58:
55:65:01:31:8b:eb:30:77:52:af:a3:6c:a3:4b:38:
51:fc:b4:02:c8:e7:1d:34:02:14:a3:86:61:f4:9a:
f6:5b:52:55:10:e8:cc:8f:ad:04:ce:e7:49:4d:8f:
da:93:4d:d5:85:10:bf:28:13:92:45:34:e0:04:65:
b1:06:36:b5:1c:b7:42:d0:0e:98:bd:3b:a1:9c:e5:
55:6e:6f:2d:af:60:35:cd:4c:cd:5b:06:91:57:e1:
b7:59:6d:6e:fd:f8:c6:55:4c:32:85:7a:92:48:04:
f1:9b:99:54:4a:f0:b6:91:31:f2:4e:b5:fe:ad:ad:
a3:2b:9a:bd:fe:8a:53:50:42:0d:c9:68:ed:6b:7b:
79:f5:5b:f1:3a:bc:1f:4c:62:4f:1f:15:f7:34:8b:
34:f5:99:db:a8:80:36:53:7f:ef:8a:b2:68:86:09:
44:d3:9e:75:ac:38:8a:17:de:24:0b:d8:aa:6b:5d:
1f:ee:58:b3:3e:e5:fe:14:ce:85:5e:93:64:a1:b8:
92:32:05:55:95:a6:03:16:b9:d0:e5:69:5c:56:f2:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:8A:12:41:6A:72:F7:8B:B1:0D:00:9A:06:AC:46:E1:C1:6F:9F
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:0f:5e:84:31:18:a5:b5:a9:2c:6a:26:f3:61:e9:79:e0:
29:96:1a:e7:6e:a9:93:15:56:86:c9:8c:31:df:fe:0e:39:4f:
ac:aa:6d:b8:68:44:9a:9a:0e:49:51:b1:69:ff:50:9a:94:0b:
48:a5:ab:07:f3:ca:05:a7:2f:65:a2:55:46:bb:cb:2e:40:fd:
64:12:53:3d:07:99:b3:ed:2d:c5:d1:c8:7c:dc:dc:06:b0:bd:
2d:ca:ce:49:ee:08:cf:19:68:b7:57:10:57:c4:9c:87:c9:e8:
c3:b6:c4:24:73:2c:20:2d:17:dc:b7:79:9a:28:08:d2:37:73:
4e:6d:ef:51:06:01:50:05:21:40:cf:ee:46:6b:1f:8c:cc:59:
9d:a2:6f:3b:5e:de:df:99:51:76:0d:48:25:6f:af:6e:65:7c:
6e:29:4b:04:5c:d2:3e:cd:a8:b7:ed:67:6f:5e:9f:ff:25:4e:
8a:29:61:43:8b:6c:11:9c:46:04:f8:4f:f3:14:0e:01:91:f2:
58:c5:a9:5d:58:61:17:53:f0:1d:92:06:7f:d9:71:7e:ed:89:
fd:00:40:ef:80:4a:77:3c:1e:91:1c:cc:64:da:74:b3:72:d7:
49:99:46:41:45:0f:ca:8a:c9:ce:a4:bf:42:a0:f9:91:42:7c:
4d:75:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:29 2025 by rpki-client