Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: He0GiGulPoCGzJOHc1TEy91luFc/ojyLKS66uSgjZG8=
Subject key identifier: BE:CE:1C:58:96:1A:54:22:F0:FC:08:9E:EE:12:B5:0E:3A:C8:AB:EE
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01964669C099D805C5B89DFBD2B866303066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1241
Signing time: Fri 18 Apr 2025 01:00:57 +0000
Manifest this update: Fri 18 Apr 2025 01:00:57 +0000
Manifest next update: Sat 19 Apr 2025 01:00:57 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 3CAj5N24HsHi/QatP+jbp1zOLb3bR4EhcSDnCGjYlvQ=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:c0:99:d8:05:c5:b8:9d:fb:d2:b8:66:30:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Apr 18 01:00:57 2025 GMT
Not After : Apr 19 01:00:57 2025 GMT
Subject: CN=bece1c58961a5422f0fc089eee12b50e3ac8abee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:08:43:f5:6a:a8:fe:5d:ff:e7:f0:7c:b2:
9c:f4:e2:5e:69:90:a6:c4:ac:24:4a:07:13:ef:22:
39:98:3f:71:2a:5a:39:ad:40:75:00:02:37:b9:ac:
db:17:26:a5:eb:10:b5:83:5c:69:99:d4:dd:79:4b:
df:a4:e4:66:63:7b:b4:b1:3c:e3:6f:d2:96:78:5e:
ef:f4:77:92:0a:7c:d3:23:9e:cc:6b:91:31:36:d9:
52:b0:5a:d5:f9:45:ac:46:c1:fc:07:a2:65:b8:1a:
9e:53:79:98:bc:15:83:74:76:7c:f9:0a:81:d3:7d:
cb:c8:4f:1e:1a:49:72:dc:59:c4:49:30:c7:ff:57:
97:17:d4:54:4e:b2:d5:a4:64:90:c6:11:d9:2f:d6:
47:df:fa:bb:c8:a3:6a:da:12:f4:ef:98:5f:d4:0a:
ff:bd:48:12:db:44:42:0a:f2:c8:82:aa:cf:ca:1f:
fa:39:39:e3:59:00:b9:89:20:0e:63:c1:a1:bc:54:
58:a9:5f:62:32:20:76:6f:d5:41:4b:7f:65:1d:02:
17:7b:8a:b4:62:a3:ff:a7:25:ac:25:14:2a:ad:88:
a4:5d:39:39:95:26:e6:1c:15:7d:f4:09:b9:96:7a:
c9:64:75:32:4c:59:6e:5d:41:f9:79:a6:d5:c6:35:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:1C:58:96:1A:54:22:F0:FC:08:9E:EE:12:B5:0E:3A:C8:AB:EE
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:91:50:15:43:f9:d2:f0:98:ed:55:db:31:90:31:2f:07:
cf:80:11:98:35:f3:cb:a4:e9:e1:0d:9a:4c:d3:30:12:9a:9d:
e8:d2:68:b9:dd:37:da:da:bb:83:da:c1:11:f0:51:e6:24:a2:
6c:e7:fa:0a:a8:d2:e6:8a:32:ec:3e:11:aa:ea:ad:35:e1:aa:
25:79:9e:30:78:4b:0b:cb:cc:19:59:39:a4:be:66:53:8d:9e:
46:1a:ff:af:c2:73:4d:62:b8:e1:89:da:24:d5:0f:e4:03:42:
35:21:81:f0:b1:a4:e3:46:02:a7:db:8f:1c:65:d6:b4:be:7c:
1b:10:31:94:c1:83:63:11:01:41:d0:13:e6:c0:8c:a2:ed:fd:
b0:c2:e6:1c:5d:b2:bf:bd:f2:b3:c3:44:47:f6:96:94:b0:99:
b0:e3:35:b5:a5:06:2f:50:43:92:ec:dd:7b:83:8f:de:f3:4d:
2c:c0:46:45:1b:d5:d2:bd:c2:4b:be:52:9e:bb:f2:09:90:02:
9a:c7:a8:38:33:82:cf:93:19:21:33:b8:bc:d5:1e:21:1f:a6:
42:4e:50:4b:22:28:84:49:d4:6b:27:41:0f:f8:15:49:c4:90:
b3:5e:61:8a:30:58:a6:fe:cd:d1:1a:17:00:bb:87:9e:02:76:
c2:29:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:23:17 2025 by rpki-client