Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: TNrXlsTvl4TAM5wcfVO+skeU0GQQtOl63kWOalpTtj4=
Subject key identifier: FB:38:E6:EA:77:C0:52:BF:20:0F:FE:24:C0:73:A0:2C:6C:FF:57:A4
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 01964DB521BDE11D579681A0F92E16E3B4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 11BA
Signing time: Sat 19 Apr 2025 11:00:38 +0000
Manifest this update: Sat 19 Apr 2025 11:00:38 +0000
Manifest next update: Sun 20 Apr 2025 11:00:38 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: /yUQXSjxHwnZcnI+pMbCSBL7n0A1i9HmYaf422P/pfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:21:bd:e1:1d:57:96:81:a0:f9:2e:16:e3:b4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Apr 19 11:00:38 2025 GMT
Not After : Apr 20 11:00:38 2025 GMT
Subject: CN=fb38e6ea77c052bf200ffe24c073a02c6cff57a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:6b:60:fa:f3:b4:57:6a:9a:5e:d2:0f:db:
24:a5:ba:77:10:33:aa:b7:79:7f:59:7c:9f:35:16:
81:79:8d:14:dc:06:43:0e:96:73:cc:98:ee:2e:ac:
93:ed:b2:73:0a:3e:51:09:c9:21:1d:4e:dc:6a:76:
f2:df:c4:f9:76:2a:19:60:3a:23:7f:0f:e5:46:12:
c7:9e:26:c5:b5:b6:23:8b:77:5f:b0:6e:77:26:22:
48:d2:10:bc:20:0d:06:ee:bb:85:12:3e:13:bc:5b:
4a:a4:2f:e0:4d:0f:28:3d:1a:48:e4:90:9c:6c:fd:
b9:ef:a6:2a:0a:d9:3d:9b:3c:fe:30:f1:03:33:73:
4f:d3:29:d9:50:df:fe:1c:af:ab:fb:ff:a9:b5:e8:
60:2f:46:96:f8:49:0b:7f:29:4b:79:4b:57:4d:a6:
e7:fe:92:bd:fc:12:ab:db:c2:ac:e4:b7:99:20:bd:
02:aa:8d:28:37:85:48:ed:42:48:e0:05:88:f8:51:
35:ca:69:ac:5d:a3:d3:83:0f:e6:29:79:77:11:e8:
5a:c9:67:bd:0b:0c:fe:02:70:5a:fb:d6:bc:c9:9b:
df:ab:c6:46:f7:2b:76:2d:ee:04:56:2b:e7:82:27:
c4:c3:c4:6e:70:68:e6:e1:c0:e0:26:6a:20:e0:26:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:E6:EA:77:C0:52:BF:20:0F:FE:24:C0:73:A0:2C:6C:FF:57:A4
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4d:22:8f:9e:a0:69:98:7f:1c:07:92:ef:69:a1:ed:43:67:
63:23:43:5f:8f:2e:a5:98:80:16:59:7d:b3:4b:af:6d:51:30:
a0:e1:2a:a0:e5:ef:14:60:b9:cd:f4:e9:5a:4e:e9:74:22:28:
d3:da:48:52:ef:1c:05:6a:28:f0:73:d7:4f:8b:af:2f:70:c9:
00:db:62:fd:ac:53:4a:a4:8a:b1:5b:94:97:05:92:80:51:b5:
db:16:dc:f3:1e:0c:d7:57:28:0d:ce:d7:43:77:bb:40:31:4e:
4d:b0:64:11:f5:7d:f5:a2:9d:28:6d:b4:05:e9:31:42:bd:aa:
81:8a:6d:ed:50:1f:05:24:e3:85:5a:fb:04:b7:e0:db:29:33:
64:1a:65:ca:f9:59:58:0b:70:22:b3:b5:66:e7:90:10:2d:2c:
30:f7:32:fd:ff:b9:88:d8:1f:5e:7b:1c:da:37:8c:f6:ac:8a:
fa:68:f2:2d:74:c8:91:57:73:4b:b8:e2:ee:81:ca:d2:16:a9:
de:b0:a6:d4:8f:05:c6:89:81:04:5a:f3:c0:51:52:dc:15:f6:
22:ea:81:65:62:59:e7:fd:d8:c6:1d:83:9d:3e:d7:90:b4:d5:
42:0f:a5:68:24:58:44:1b:f9:18:4e:3b:08:63:5c:28:65:a0:
cd:cf:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:12 2025 by rpki-client