Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: 93A9zkTLXS9R9HgY899XTDsNSmqijx2MgpK7cMhObUM=
Subject key identifier: 32:4E:38:87:0E:16:BF:78:9F:DE:D8:65:5C:A0:83:70:C1:7D:34:A8
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 01964C35210A4375F3A68BEC588732399D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 0478
Signing time: Sat 19 Apr 2025 04:01:12 +0000
Manifest this update: Sat 19 Apr 2025 04:01:12 +0000
Manifest next update: Sun 20 Apr 2025 04:01:12 +0000
Files and hashes: 1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: hAaHybe4Gfq9xrHBsxnAW/wUY5CqNxkhyXi5kSXz2+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:21:0a:43:75:f3:a6:8b:ec:58:87:32:39:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Apr 19 04:01:12 2025 GMT
Not After : Apr 20 04:01:12 2025 GMT
Subject: CN=324e38870e16bf789fded8655ca08370c17d34a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:3f:43:b8:91:ba:55:6f:fe:cb:c7:99:c4:
8a:b4:14:ca:c0:f1:0c:ed:f0:eb:91:e6:56:3a:5c:
4b:d6:a3:f2:4f:6f:db:71:c0:a1:c2:3c:8b:5c:06:
54:5d:40:ca:41:0b:3e:9c:2d:df:d6:49:95:15:16:
07:e3:a0:ba:51:1c:4c:c5:5d:85:1c:c4:d6:97:70:
e1:c6:ef:fc:a7:b6:84:cf:48:26:f3:5a:e3:5e:11:
04:01:b6:7a:71:f9:fe:12:ed:a0:46:df:fd:73:b5:
7f:9d:40:dc:3c:10:69:c2:09:54:19:b6:31:15:a6:
5a:27:ce:00:2d:47:6c:e8:6f:8c:e6:ae:17:f8:99:
21:44:9f:b5:71:3b:70:65:58:a0:3a:9e:c2:bc:4b:
a0:e0:c0:94:d8:86:d4:8c:42:02:93:9a:9b:6e:26:
2f:72:94:ad:dc:88:d4:77:97:66:65:77:18:0a:4e:
eb:ba:70:14:69:71:9f:cd:57:28:0e:34:b8:a7:ff:
7c:8d:ef:e9:cf:ec:8f:da:43:f0:bd:2d:48:80:1f:
0d:92:8b:3e:0f:52:9f:93:40:75:7b:c7:d5:8d:ed:
22:9f:9f:a0:2c:d3:4d:64:83:42:81:74:9a:37:af:
fb:34:73:72:fe:05:10:75:1b:b3:b0:ff:2d:60:e3:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:38:87:0E:16:BF:78:9F:DE:D8:65:5C:A0:83:70:C1:7D:34:A8
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:9c:0e:73:f3:35:22:9f:53:6b:6b:51:85:13:7c:e7:67:
a7:ca:e1:bc:00:0b:20:8c:0d:d6:71:d2:ee:10:2c:51:27:76:
23:2c:bb:b3:10:8d:7a:58:d5:2f:e1:fe:d5:50:73:f6:ed:5a:
a3:ca:23:c2:0a:d5:82:1e:37:54:73:b3:c5:a2:e7:b3:60:5b:
53:e6:fd:31:31:af:10:48:25:c7:3a:34:b7:1d:08:ab:44:44:
5a:3c:e3:b7:cd:03:c6:be:30:1a:33:7a:75:ab:19:b2:86:d1:
85:15:57:1b:27:c2:9d:01:c6:52:02:0a:7a:89:34:07:d1:b5:
e0:10:66:ae:c6:1f:c4:d1:c7:de:34:f8:19:09:bb:5c:a5:46:
18:34:b6:01:ce:3e:5b:7d:80:e3:6e:ab:08:fa:7b:b5:8e:0c:
85:3a:be:84:47:32:66:df:92:e7:08:e4:e9:af:bf:22:ac:88:
ae:bd:95:97:c5:b5:85:3e:33:df:9b:00:ed:4d:b4:55:f2:4f:
d2:2f:63:30:a9:99:96:0e:45:98:b9:c1:c7:cc:25:94:e7:61:
bc:46:2a:c0:ac:57:13:eb:c3:97:92:a4:7e:9a:92:b0:83:e3:
3f:45:be:41:4d:f4:93:29:d0:6c:ea:cd:68:f5:83:d4:25:ad:
26:39:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:27 2025 by rpki-client