Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: PqgGZARcD9KSOM4wv8HngqDttQ2Cf5kFz1tEeEJ/ZX4=
Subject key identifier: 68:52:39:ED:45:16:9A:EB:C5:60:4E:1F:75:D2:88:7C:13:5E:A1:C5
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019655A5ABE1757895D3446A4447E0B235F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 119C
Signing time: Mon 21 Apr 2025 00:00:42 +0000
Manifest this update: Mon 21 Apr 2025 00:00:42 +0000
Manifest next update: Tue 22 Apr 2025 00:00:42 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: HRLMyft81W54Kl6cXE+0lF1efPCZjPS3Ip9VELgRl4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:ab:e1:75:78:95:d3:44:6a:44:47:e0:b2:35:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Apr 21 00:00:42 2025 GMT
Not After : Apr 22 00:00:42 2025 GMT
Subject: CN=685239ed45169aebc5604e1f75d2887c135ea1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:cf:f9:97:d8:55:6f:21:03:61:14:42:6d:
20:fb:75:b9:a9:9d:21:b8:55:d7:ee:79:f7:c1:6e:
a3:64:85:dc:10:98:b1:fd:aa:47:4a:3d:d0:21:ba:
74:ca:51:d1:0b:d1:b0:dc:e3:c2:d1:2f:b7:5f:69:
96:1a:33:8d:58:5b:0b:4a:e3:55:14:81:17:a0:78:
9f:9a:43:c8:d0:5e:22:c8:44:7c:3d:79:c9:2c:01:
78:27:38:6b:6e:14:c6:72:cf:97:b9:22:1f:95:50:
f8:62:ab:d9:bd:22:6d:8e:7e:c5:94:91:96:b5:f1:
27:6e:b3:40:57:34:83:c8:b3:29:c2:57:39:cb:5b:
2c:83:46:3e:3e:7c:fa:73:74:46:e4:a9:4a:fe:bc:
b9:2f:a8:71:a5:fa:44:18:9d:07:00:ec:04:d2:63:
3b:5f:bc:d3:aa:7d:c3:25:08:9c:80:96:45:fd:4d:
bf:c6:6f:99:c1:11:6f:e9:b3:e6:ca:92:51:09:4c:
e1:89:0d:d2:db:78:d9:d9:5b:70:e7:f6:e7:c7:ab:
92:58:99:45:77:27:da:41:0d:c9:36:25:94:c0:29:
86:89:d6:a9:98:a3:93:ca:a8:24:2a:2e:47:4d:33:
91:f1:1a:91:cf:40:b0:e9:47:98:0b:1e:a1:83:4f:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:39:ED:45:16:9A:EB:C5:60:4E:1F:75:D2:88:7C:13:5E:A1:C5
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c0:1d:84:68:84:20:2c:c1:25:f9:4d:fd:3a:e4:18:7c:77:
92:75:f9:0a:2b:75:a0:46:8e:90:55:e0:d4:e5:46:3b:fe:ec:
b8:55:08:07:32:b5:84:1f:27:58:ba:6f:b5:39:07:9e:d5:bf:
a3:21:05:c3:24:94:b8:a3:2b:90:6e:94:e0:e4:3e:c8:e4:70:
70:a6:b4:02:17:26:99:62:2d:8d:f6:88:c3:cd:9f:93:03:4b:
0c:a8:04:35:91:99:b2:a9:f1:7d:17:98:2a:d4:3b:c9:c1:e0:
b3:d4:85:7b:89:a2:3f:ea:19:e1:c5:33:2b:c3:b1:cb:95:48:
c8:55:c5:71:f0:41:4e:df:37:aa:8a:3e:fc:1a:d8:57:f4:78:
0a:86:cf:a8:cf:c6:5b:9f:94:b0:bb:bf:33:27:be:3f:2a:bb:
df:53:71:e4:04:16:e3:51:26:09:ea:ed:83:89:38:b8:15:98:
71:8d:46:f9:82:07:a5:25:ea:bf:25:fd:79:9e:67:70:be:5c:
bb:57:de:a2:bd:e1:e1:1b:6a:0c:d1:f3:73:64:58:5d:9f:13:
da:4a:2d:61:9f:85:77:9d:ca:73:eb:89:5a:4e:fe:5b:e7:a5:
05:a7:fe:d4:c2:ab:63:a8:7d:61:f9:47:01:3e:43:51:9e:b9:
42:41:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:37:19 2025 by rpki-client