Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: Z3SOhTz4KW+3XHg/fEgkV2l5QBCP5RnNF2mXdfkxTBw=
Subject key identifier: 7F:EE:28:92:CD:54:1B:94:60:5A:4B:EE:74:AB:23:91:E5:23:D4:19
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019652000B104049F35B3D0AD06426FF091B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 14B5
Signing time: Sun 20 Apr 2025 07:00:56 +0000
Manifest this update: Sun 20 Apr 2025 07:00:56 +0000
Manifest next update: Mon 21 Apr 2025 07:00:56 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: Ogjl1IwxcY0INT0hoc3V-UZ1sHo.roa (hash: w0QqL1VQBTrf30Omc7SiLZ4gKL+da0byGUFGvs9DV9w=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: oVvr2FkWb93CU9aG5zKWolXJaddjc4P/040G9eU7Wqw=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:0b:10:40:49:f3:5b:3d:0a:d0:64:26:ff:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Apr 20 07:00:56 2025 GMT
Not After : Apr 21 07:00:56 2025 GMT
Subject: CN=7fee2892cd541b94605a4bee74ab2391e523d419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:27:d8:1f:6b:dc:a9:34:7f:33:ea:f2:99:
e0:7e:c9:ce:2f:cb:8e:ab:6f:74:a4:b0:5e:83:d7:
91:c1:ef:d0:25:06:ca:d7:2c:fd:84:a8:88:1f:44:
74:a5:e2:75:f8:00:39:33:0e:d4:fc:9e:7d:90:0b:
eb:cc:50:57:34:c4:55:00:0c:c7:c9:dd:71:16:c0:
db:75:f4:d2:0b:1f:0e:64:66:9a:35:2f:61:27:5c:
3e:a6:7b:b1:63:4b:bc:b8:4b:39:bc:49:63:7e:58:
de:8e:b4:f5:48:88:28:db:76:fd:c8:42:94:0d:4a:
23:7a:40:ae:07:71:39:ed:7e:04:c4:f1:a0:35:4d:
4d:56:61:0b:b4:6d:cf:0d:19:d2:c0:16:d1:a5:a8:
4c:fe:e6:b8:ac:cf:e7:7a:ca:a1:ed:a7:bf:4a:d5:
bf:fa:c2:1a:4f:a1:2b:0b:e2:02:92:f6:84:72:53:
22:ee:ed:69:aa:7f:89:2a:7c:80:2f:a3:6a:d7:03:
5c:e2:92:7f:f6:a7:8c:9a:26:f3:98:6d:1b:8f:b6:
93:44:c7:80:53:5f:44:de:18:1a:41:41:7c:a4:a8:
ff:fa:28:ed:7f:b9:4b:0b:eb:4f:c7:b7:7c:1a:8d:
36:78:18:35:ee:3a:14:4c:18:ae:b6:cd:83:e2:38:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:28:92:CD:54:1B:94:60:5A:4B:EE:74:AB:23:91:E5:23:D4:19
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c4:40:cd:83:19:94:0e:54:89:c1:f9:c5:b3:f6:b0:ba:f7:
3f:50:21:c2:48:d7:b5:15:8b:2e:5a:ee:92:78:b6:2d:16:df:
09:c3:17:40:ff:d6:52:7b:ad:de:8a:1d:84:68:7e:fd:bd:b2:
e9:7a:6d:62:47:d2:fa:59:cf:3c:de:fc:60:ec:b0:f1:29:99:
62:c4:28:62:c8:fb:5e:51:45:8e:e6:36:f5:d6:9d:28:8e:7b:
e2:23:4e:1b:59:54:66:a3:26:15:1b:54:88:ae:de:0b:2e:f1:
37:e3:72:05:60:38:01:33:bf:5f:b0:14:5b:5f:55:32:94:07:
22:87:5e:79:c7:1f:e8:d3:3a:26:b6:c6:32:86:fd:20:0a:69:
e8:33:8e:e0:f1:7a:c9:a7:a9:e6:2e:84:1f:db:f0:56:ca:d4:
c5:a0:0d:5b:e0:1d:cb:f2:3b:83:75:a2:ee:e0:ca:04:4d:b1:
a0:92:d6:69:0d:27:d1:54:63:cc:ee:01:fe:32:28:d9:41:3f:
80:8c:0d:b2:84:89:86:fc:b7:63:f3:f6:34:f8:a9:3b:42:65:
7f:2f:0b:14:53:d2:36:a8:53:a8:90:fe:9e:64:72:10:14:06:
e5:53:8e:d9:1b:bc:61:96:c3:00:9a:bb:b1:11:44:59:4d:71:
b0:8a:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:29 2025 by rpki-client