Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: fIRa4JRjGm7Ffi3EpS7uiE3S23xdNLEnSF5u1CIt2E0=
Subject key identifier: 96:A1:B0:74:0D:09:14:D3:98:50:93:38:D8:7A:E6:95:3E:41:BF:D2
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01974D0DE2F8D9747FC5AAB38AD70F4A7498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 12C9
Signing time: Sun 08 Jun 2025 01:00:45 +0000
Manifest this update: Sun 08 Jun 2025 01:00:45 +0000
Manifest next update: Mon 09 Jun 2025 01:00:45 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: ntwlmwgm0FIKkUup87G5E038J6CbRxO651OEEtegGPw=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:e2:f8:d9:74:7f:c5:aa:b3:8a:d7:0f:4a:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Jun 8 01:00:45 2025 GMT
Not After : Jun 9 01:00:45 2025 GMT
Subject: CN=96a1b0740d0914d398509338d87ae6953e41bfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:9d:bf:7b:7b:ec:9a:31:75:cf:bf:08:2f:
39:23:31:3d:a0:03:88:86:b5:24:27:4f:5e:9c:82:
ff:5e:af:4f:2b:e9:7d:39:c7:a1:ba:e0:1f:02:3b:
80:fe:88:c5:73:91:eb:03:17:9a:57:f9:83:c5:1c:
89:d5:8a:df:9b:3d:c7:27:88:79:7f:2b:0a:af:d4:
6c:76:47:3f:da:3e:f8:9a:0e:d2:26:e7:42:f6:23:
8b:19:6f:5f:79:70:ac:ec:67:11:8c:2c:95:03:ca:
da:8d:e4:18:05:b1:90:db:f0:f1:83:fd:35:0a:e8:
d3:97:e8:66:f9:3b:9e:11:43:48:40:ee:f6:b6:c9:
ab:25:11:6d:68:77:d9:31:b6:36:8d:a8:03:18:13:
3f:91:f6:3c:94:09:ee:90:7d:93:54:97:f0:b6:08:
32:18:6a:34:e1:66:cb:dc:cd:e1:93:3a:a8:3f:0c:
68:1b:24:79:23:5b:89:c9:cb:47:56:e7:a6:fe:43:
ca:8a:57:51:23:80:1b:58:81:b8:4a:64:7a:bb:14:
51:e1:d7:97:73:6f:6e:cb:2a:c6:63:44:36:9f:d3:
87:e0:20:ab:c1:7a:5b:f1:2b:a8:72:59:0c:64:70:
04:05:29:66:e5:d5:55:7f:d1:e3:99:e9:e0:e5:da:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:B0:74:0D:09:14:D3:98:50:93:38:D8:7A:E6:95:3E:41:BF:D2
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:4c:6e:49:81:6d:c6:ab:5e:86:62:36:d3:a1:c0:41:97:
b8:ae:99:db:2e:48:9e:a0:f5:5e:6a:bd:7e:82:8a:12:90:ac:
79:fa:c5:2c:5b:6c:89:16:50:87:c4:72:4e:f9:9a:fe:9a:67:
89:a0:85:34:28:8e:2f:c6:80:fa:41:f9:49:f6:fa:c6:e4:7c:
9e:bc:4a:7d:2b:66:08:23:6e:19:09:13:bc:dd:0c:e3:03:2e:
fb:e9:11:38:d0:ea:1a:c1:c8:13:7f:19:50:83:d8:42:6d:07:
07:30:7e:c9:0a:c8:7e:5a:88:d4:36:9b:ef:94:b5:e5:fb:10:
f2:f1:02:34:66:84:58:d3:e8:fd:1f:eb:3c:bb:a7:66:43:61:
58:b0:cf:24:fc:e4:eb:e5:63:e1:e9:40:ef:e1:73:93:04:4e:
f7:bc:65:bf:39:69:a2:80:35:b5:3b:92:ba:e8:20:98:ec:be:
3e:d5:77:60:02:9b:95:84:b9:9f:2a:a3:12:a4:7a:8c:88:31:
bd:27:4d:fc:0b:20:bb:08:86:92:86:b1:a0:07:aa:27:25:a0:
4b:98:c2:a9:77:6d:06:56:f7:8d:7d:61:e4:f8:ea:63:38:80:
12:ca:97:d1:1c:9a:90:40:17:ca:3d:6e:d3:f3:64:da:ad:c9:
74:c6:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:10:31 2025 by rpki-client