Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: Pl/IeTmzLFZVTu4/xZmRdI1N6x2prqORVgC4NBg9Ldk=
Subject key identifier: 01:0D:77:A8:0F:F8:31:D1:75:A0:5B:43:D8:9C:A8:2A:D9:22:69:E5
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 01958B84B87A462799E32A7C13DD065BDEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1499
Signing time: Wed 12 Mar 2025 18:01:25 +0000
Manifest this update: Wed 12 Mar 2025 18:01:25 +0000
Manifest next update: Thu 13 Mar 2025 18:01:25 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: MNRpi3YGnnCzRFTVRhsc4P1c8Tzplro14KKY5zYhCbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:b8:7a:46:27:99:e3:2a:7c:13:dd:06:5b:de:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Mar 12 18:01:25 2025 GMT
Not After : Mar 13 18:01:25 2025 GMT
Subject: CN=010d77a80ff831d175a05b43d89ca82ad92269e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:ff:49:4d:7a:ad:08:9d:d1:4a:b4:94:b2:
35:b8:07:b3:18:71:1e:9f:22:7d:f5:b0:94:03:40:
d3:d5:08:d2:4c:e7:c6:df:fb:3a:db:00:cd:34:f6:
8c:14:50:5b:71:2b:0b:f3:c4:58:28:ef:0c:bd:5c:
49:25:de:e5:85:d1:47:5c:37:5f:4b:40:b3:ac:34:
22:ea:5e:a2:86:1b:80:74:44:e9:ad:67:48:c2:d6:
46:1a:1d:b3:13:ab:b9:1d:21:ab:8a:e6:fe:64:b2:
41:44:4e:cd:7a:c8:b5:f4:c6:3c:82:30:23:8a:c1:
9c:9f:96:d5:ab:74:3b:13:e2:3e:79:ff:a5:54:fa:
21:01:b7:d6:d2:ca:73:a0:29:45:a3:8f:3d:8e:06:
12:ba:25:97:b7:cc:ed:8f:8b:37:ba:39:6d:ed:c4:
c5:ee:dd:97:ae:73:e9:9c:8d:21:65:5e:fa:16:b0:
49:01:86:34:3e:1e:5d:a0:0a:78:39:36:64:5c:23:
56:5d:ba:6a:ee:80:de:b7:db:26:96:df:a5:82:2b:
db:47:07:5a:7c:60:c9:c1:9e:ee:12:f8:e1:26:8c:
7a:99:31:ae:9a:25:e6:d8:a0:55:ca:53:60:62:3b:
3e:b6:4d:20:85:cc:e4:69:0e:a5:ae:72:6c:ed:99:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:77:A8:0F:F8:31:D1:75:A0:5B:43:D8:9C:A8:2A:D9:22:69:E5
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:4d:4f:a4:8b:e8:c4:00:06:9f:cd:e5:63:05:98:21:3d:
d8:7e:63:8b:f1:41:a4:52:2a:46:19:8f:d7:bd:67:5a:35:60:
1d:ce:4e:a1:73:ff:ea:8e:15:6d:cd:a1:d7:4d:5c:41:77:18:
78:b3:b3:7d:d8:b6:6f:6d:88:c6:57:27:16:7d:eb:04:99:6e:
54:70:73:c5:97:43:bf:47:15:76:7e:de:83:ed:8b:59:a1:31:
6e:d3:df:74:6b:66:6d:f2:61:84:95:8a:1f:92:cb:b0:5f:93:
5b:10:e7:c0:d9:49:c6:ab:bc:07:23:0a:4c:f8:12:3f:0d:26:
40:62:93:b9:e4:5a:6c:da:65:46:b3:33:ba:e4:9c:fe:00:d4:
aa:41:b7:85:cb:d3:55:43:82:ac:a3:fc:da:be:e9:1d:d2:ef:
84:d9:35:c0:cf:a0:16:ef:38:b5:a0:ab:5e:f4:a3:32:f5:9e:
81:79:0f:a3:75:f1:c7:bf:24:db:76:bf:63:4d:65:95:0a:24:
b6:28:8c:88:05:82:dd:0c:36:9c:8f:6b:8b:4b:8a:79:70:cd:
8f:73:b1:0e:d2:b9:da:77:74:02:03:09:e8:36:74:49:e3:29:
15:e3:97:d1:59:5c:16:48:94:4e:ac:bd:7b:9e:85:99:ef:f2:
80:78:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:58 2025 by rpki-client