Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: vEpgSia9VnE9AELLYo6HktthChZmTvpPAF9BUfHb0BU=
Subject key identifier: C8:61:08:A0:CC:85:FD:4C:00:2D:AE:E0:5F:BC:49:07:31:69:BC:BE
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 01958C294B2E213BBE67C8396280DCED1DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 10BA
Signing time: Wed 12 Mar 2025 21:01:11 +0000
Manifest this update: Wed 12 Mar 2025 21:01:11 +0000
Manifest next update: Thu 13 Mar 2025 21:01:11 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: 4BPfzzfJPUHkRoCSV6XTfL67VVtRm1NbkDmWQxtPieQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:4b:2e:21:3b:be:67:c8:39:62:80:dc:ed:1d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Mar 12 21:01:11 2025 GMT
Not After : Mar 13 21:01:11 2025 GMT
Subject: CN=c86108a0cc85fd4c002daee05fbc49073169bcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:5b:3e:81:b0:a5:c4:e8:c3:18:0d:2f:b9:
61:e7:73:24:61:66:03:f4:83:bd:21:65:f2:7c:cf:
79:d8:63:25:ee:3c:64:3a:57:c2:2a:f0:98:47:ce:
d7:51:89:d6:92:67:94:48:b8:47:23:b7:e4:08:25:
2e:d0:83:5a:82:a3:fb:98:c9:0f:2e:a0:b1:e6:e4:
1d:e2:87:59:46:fb:32:3a:66:6d:bc:18:c5:87:0f:
91:fb:20:d5:ee:b6:c8:f5:68:b6:9b:c8:68:64:e1:
df:d8:64:1b:85:e2:99:36:bd:f5:c7:79:d6:db:59:
63:e0:bd:a8:b9:73:f5:ea:60:bb:d0:45:fc:ad:8b:
e2:09:42:77:d7:1e:19:a3:1a:01:2e:b7:85:8f:cc:
69:97:43:59:21:b0:5a:8a:c1:34:26:fd:85:df:61:
f4:53:99:3c:b5:8a:32:3f:83:3d:db:e9:ef:ae:0b:
6a:62:1c:01:76:03:96:21:ec:e7:7f:f8:4d:d0:68:
22:c5:aa:7b:47:1d:6d:0d:33:70:22:a0:ba:61:ca:
b9:18:4e:b9:f0:9b:c8:51:45:ee:b4:85:3f:b9:22:
bd:e0:66:c5:c0:90:cd:71:d3:a5:8a:3b:28:6a:b2:
31:71:c3:23:39:bc:38:18:6c:6e:f0:ea:4e:ad:6c:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:08:A0:CC:85:FD:4C:00:2D:AE:E0:5F:BC:49:07:31:69:BC:BE
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:8e:35:1f:f0:eb:ea:76:72:4f:56:51:3d:4e:7e:71:63:
a9:70:38:85:02:82:de:d7:1b:d9:47:10:2c:c8:fa:48:7c:22:
aa:9d:c2:6a:79:c9:da:74:66:3d:70:5d:f1:b5:38:f7:b7:40:
28:12:0d:70:98:d3:b7:ee:22:3b:91:63:70:4f:47:a4:fd:8e:
f5:f0:3d:3a:60:3f:96:70:8d:6d:a4:f3:e0:4d:91:fa:c1:a4:
cb:97:49:d6:cc:15:9e:5d:3b:b9:66:68:79:35:5a:17:88:f4:
47:66:f8:70:29:d3:1c:fd:66:07:ee:dc:b6:ed:99:aa:df:e0:
c6:42:49:ee:b1:de:79:2e:d9:ea:2c:ae:86:c2:bf:b4:56:a8:
d6:14:b8:56:db:0d:ba:ec:2c:bc:ad:2e:2f:9e:5b:58:3a:43:
93:50:a4:12:91:06:94:1d:a7:62:ad:71:54:84:a8:7c:c8:ee:
80:d1:22:09:41:5a:69:08:d1:04:87:e9:73:18:35:1e:4e:89:
c9:b5:67:6b:28:34:04:58:86:65:30:48:2f:f4:61:93:9e:6e:
f5:05:19:dd:60:fa:82:34:f1:64:7d:f4:49:84:1f:30:de:57:
96:9f:b7:1d:ee:b8:4c:7c:c8:05:9e:c9:6b:fa:2c:59:dd:7f:
68:74:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:17 2025 by rpki-client