Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: IiYWFt+X7Nsqtvd39mRtdWMaRvCztjgU+oKxiOOeqYw=
Subject key identifier: 8C:AF:A9:27:B8:FA:55:49:93:F5:C7:DD:87:35:B4:1E:D5:AD:73:1B
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 0196507EF128E10082E97C7A72615598E917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 08CE
Signing time: Sun 20 Apr 2025 00:00:18 +0000
Manifest this update: Sun 20 Apr 2025 00:00:18 +0000
Manifest next update: Mon 21 Apr 2025 00:00:18 +0000
Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: bSpbcpTzFfrl08ri/ADtCRdta0aLplQLZQsHrP7b/qs=)
2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:f1:28:e1:00:82:e9:7c:7a:72:61:55:98:e9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Apr 20 00:00:18 2025 GMT
Not After : Apr 21 00:00:18 2025 GMT
Subject: CN=8cafa927b8fa554993f5c7dd8735b41ed5ad731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:e6:31:fa:79:bb:95:71:14:ee:0b:3a:47:
24:e9:23:db:6a:1f:32:45:34:9f:cf:dc:d3:51:d5:
77:05:64:3f:a3:e3:72:45:cf:60:9c:34:9e:86:54:
fc:fe:fb:cb:05:bb:26:e6:2b:71:01:59:68:a6:1a:
86:79:dc:15:d9:3c:cf:22:c9:6d:9d:39:05:6f:b3:
14:6b:b2:ac:ca:fe:0a:54:d4:8d:ad:7b:d3:d5:e5:
63:4d:a9:22:82:48:31:92:8e:1c:0c:9d:17:b3:0a:
d5:bd:87:c7:c9:f2:25:84:bc:93:b7:53:fe:a4:21:
d9:a9:a7:bf:0b:12:58:3d:36:0d:22:3a:92:71:e6:
3d:26:2b:b4:cf:30:ed:f0:58:3e:1b:4c:9b:38:02:
43:a4:fe:f0:e2:29:10:c0:e0:af:c0:f4:6f:9b:20:
48:66:e3:ab:f8:6e:ca:e1:44:2e:2f:f6:c1:c5:83:
b4:a4:11:22:17:29:77:d1:f3:8d:dd:82:b0:34:33:
bc:ad:40:e2:10:2b:78:f4:ec:c5:9a:e8:fa:9c:20:
39:ac:5c:2a:82:01:fc:79:a4:f6:76:6f:01:18:82:
f3:8d:51:88:fc:db:18:c8:c5:c0:3c:81:d0:7e:f9:
63:74:08:a0:f1:46:ff:d5:9d:f9:44:b9:56:99:17:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:A9:27:B8:FA:55:49:93:F5:C7:DD:87:35:B4:1E:D5:AD:73:1B
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:67:a3:39:0a:c3:06:99:59:df:b6:fe:86:72:90:28:56:43:
ac:5b:38:8c:4e:d6:a0:dc:ff:b6:02:d9:96:97:44:90:43:88:
17:60:67:9e:2e:85:86:ab:f1:4b:f7:5e:70:be:b2:74:38:ca:
bd:67:fa:b9:54:90:a4:d2:27:f4:18:ef:b4:dd:dc:e5:b4:56:
41:25:b1:bb:29:c2:8e:d0:4a:d3:28:67:bc:de:8f:d8:7f:32:
28:0a:a7:a9:97:72:97:19:a2:16:1c:b0:7c:b7:e9:57:b1:1b:
f3:2e:eb:cf:8b:fe:b3:43:48:60:a6:b5:75:26:b1:8b:52:02:
04:ec:6e:65:13:1a:62:11:6f:50:76:3e:da:43:7b:de:a4:af:
a6:16:ee:c2:1e:87:97:d8:30:9a:c6:78:40:d3:5e:3c:dc:34:
40:4a:50:8e:1b:e9:e2:ea:8b:ca:09:fd:74:57:8c:36:e2:f7:
c1:63:ed:d5:11:28:9c:11:77:de:e3:c7:8e:49:0d:b2:d9:b0:
5f:f9:7e:71:77:cb:49:8f:3d:32:a6:ff:f7:43:7a:f7:5d:e0:
cf:55:95:f1:2a:34:7a:96:d6:48:aa:cc:7b:4b:41:72:cd:23:
23:fb:d5:a1:d3:5b:f9:6b:41:9b:c1:08:43:38:f6:c7:dc:05:
43:b4:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:37 2025 by rpki-client