Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: 6/yrNqA/XwD8e8YSddRlzkhqNumBbY10kxXntGw4QEQ=
Subject key identifier: 34:FB:AE:7D:41:29:DF:A2:C6:AA:0E:E3:89:FB:5D:C0:77:7C:52:C9
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 01964DB4C44EB93AD883DE58FC57FFD33629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0655
Signing time: Sat 19 Apr 2025 11:00:14 +0000
Manifest this update: Sat 19 Apr 2025 11:00:14 +0000
Manifest next update: Sun 20 Apr 2025 11:00:14 +0000
Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=)
2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: m/gXXKTBwzLFMFLDTGmKeb+PNdGLTIIWPB1/c67IYhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:c4:4e:b9:3a:d8:83:de:58:fc:57:ff:d3:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Apr 19 11:00:14 2025 GMT
Not After : Apr 20 11:00:14 2025 GMT
Subject: CN=34fbae7d4129dfa2c6aa0ee389fb5dc0777c52c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:16:fa:7f:7f:fd:68:ab:84:2c:2b:d4:01:
d3:03:1e:ff:be:1f:3f:e5:eb:f5:16:63:86:fb:c0:
d3:21:f9:64:04:c7:f4:bf:7b:73:e9:45:ca:11:be:
80:fc:f2:09:34:6a:95:0b:47:f3:52:05:69:78:fa:
03:17:bf:35:5e:4e:46:b5:15:e2:23:a3:6f:76:d4:
16:13:4e:7d:12:1f:4c:9b:b5:9f:ce:fc:70:f8:00:
24:88:ef:35:ad:48:86:cd:11:9d:04:98:2a:4d:07:
f9:cb:59:52:e0:1a:88:75:c2:d0:7f:a3:30:70:c9:
36:84:bf:77:7c:48:e1:2a:57:2d:e0:62:76:d3:cd:
5e:25:01:56:68:02:0a:e6:17:bf:59:cd:c1:9e:92:
6b:a7:af:44:90:18:fc:32:3e:b3:7c:2d:a9:eb:b6:
e5:0b:e8:89:ff:d0:8f:4b:d6:f0:a1:8f:af:52:4e:
96:63:bf:3a:87:57:e5:43:07:d1:5a:e4:03:38:dc:
94:40:27:26:89:88:83:c9:65:83:77:8a:e0:ce:9a:
bc:37:90:f0:19:11:4f:68:fe:64:43:3e:32:cd:49:
c2:c2:56:a4:27:64:5d:4c:1a:d2:f6:98:fd:eb:85:
c3:c3:24:ba:43:45:1f:7c:02:ff:8a:dc:6b:8f:98:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FB:AE:7D:41:29:DF:A2:C6:AA:0E:E3:89:FB:5D:C0:77:7C:52:C9
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:f1:07:d1:4b:88:72:61:5f:ad:50:5f:e1:3b:5b:37:51:
18:a3:28:c0:fe:b8:b9:b1:48:aa:92:b2:9a:e6:92:a4:2f:f1:
f1:34:07:c9:13:12:9b:01:f5:2d:52:a3:e7:0e:cd:5f:c4:17:
d1:fb:b3:44:13:7c:77:fe:92:73:1e:7c:f7:21:36:d9:e8:aa:
ee:6d:21:aa:57:83:65:90:d4:ea:d8:8a:59:3c:6a:eb:d9:de:
a7:70:ff:3b:c0:d8:32:e7:56:de:cc:39:66:d9:0c:d7:be:ea:
0d:8d:52:f5:b7:45:4c:3b:fc:01:47:26:31:4e:e6:26:72:80:
27:fc:d0:3e:df:a6:ec:d2:f5:a7:51:03:93:d7:f5:7c:49:ee:
3d:49:c2:0f:3a:89:3e:5f:1a:89:ad:67:35:c8:94:a5:a0:36:
1a:92:63:2d:22:79:e7:ed:05:d3:37:b2:5c:22:66:86:ff:fb:
dd:c6:b6:cc:69:4e:14:3e:90:c3:b9:df:1e:55:9f:89:c8:d0:
7c:ba:5a:a5:17:ff:31:72:8b:37:73:4f:fb:00:e5:b7:31:08:
6d:f0:39:69:2e:d8:df:00:d4:a3:91:54:bb:0b:1c:76:62:a0:
78:98:be:37:c1:d2:51:2a:97:48:1b:33:0a:43:25:9a:d7:92:
ef:01:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:45:31 2025 by rpki-client