Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: BzpTR7ueTnBDppKev8kEydUAn1F4NhoMt/RRelVCehA=
Subject key identifier: 46:EC:13:4E:47:6C:05:08:40:77:43:68:54:B5:E3:79:3E:B7:33:7C
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 0196545C238C1CC136F237378EE03368F52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 18:00:46 +0000
Manifest this update: Sun 20 Apr 2025 18:00:46 +0000
Manifest next update: Mon 21 Apr 2025 18:00:46 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: JAdcHBmSeXwcyfm29j2+kal68iMZxcInCNFHTOpj0D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:23:8c:1c:c1:36:f2:37:37:8e:e0:33:68:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Apr 20 18:00:46 2025 GMT
Not After : Apr 21 18:00:46 2025 GMT
Subject: CN=46ec134e476c05084077436854b5e3793eb7337c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:4a:4a:61:ae:f3:bf:c8:a2:df:af:b1:06:
f1:57:8f:da:8e:57:84:25:45:21:23:69:af:a6:df:
58:8a:4c:db:ff:0e:c7:71:26:cf:65:89:93:40:11:
a7:34:7a:f5:ff:99:72:03:51:37:58:b3:7c:ca:8a:
84:75:9a:b4:34:2f:96:f8:93:0f:29:cd:a0:47:f2:
54:6a:c1:27:68:89:ef:18:30:6c:43:9e:d0:ba:70:
e1:88:f3:cf:e1:1a:8a:7c:0d:3a:b7:14:cd:51:73:
ee:0c:95:04:3b:bc:f4:e8:28:4f:c3:d4:5c:1a:07:
54:26:b0:4a:8f:1e:80:92:cd:57:08:e6:2b:ed:a6:
e6:51:2c:99:10:13:7a:a2:be:f9:e7:ac:cd:87:05:
c4:98:a4:ba:18:45:25:b3:de:f5:4c:40:b8:c1:81:
89:ca:2e:20:41:59:de:8c:76:1f:31:9f:e6:29:69:
7e:1f:f6:e0:20:aa:fb:f7:9f:73:3c:dc:93:39:08:
54:0c:b1:83:9a:04:df:73:b5:c5:4e:c0:a7:44:27:
db:43:75:f8:d1:f3:8f:db:92:0a:7a:0c:00:01:a4:
42:cb:f7:89:87:1c:5d:0e:50:ac:ba:50:c0:20:03:
0f:d8:8d:65:0b:fc:86:a9:fe:a2:e3:63:af:0e:a5:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:13:4E:47:6C:05:08:40:77:43:68:54:B5:E3:79:3E:B7:33:7C
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:43:cb:09:f2:a7:04:63:b9:35:3b:c6:82:41:c5:81:4d:
ce:78:36:83:7c:1b:53:0b:90:57:26:dd:b5:61:5c:44:5a:2a:
ae:d1:9a:12:c9:a9:a7:99:89:46:4f:0b:ec:2e:da:57:67:76:
d3:c9:23:26:b7:26:7d:e8:ef:c6:f9:dc:6a:79:6d:6d:38:98:
4d:f8:0d:a4:e4:0a:68:08:de:fb:19:41:c7:1a:94:9f:f4:6c:
77:0f:fe:f7:aa:7e:02:f0:fd:47:8a:4a:da:e4:21:fe:63:e7:
43:a9:3c:13:70:68:24:74:81:cd:b4:2a:41:ba:b1:88:be:67:
2c:8b:82:be:47:03:f4:d9:6f:86:5c:79:84:66:15:07:5a:06:
ca:b9:2b:63:80:d5:a3:d5:e2:ff:7a:c3:03:57:cd:2f:01:52:
0e:f3:0a:1c:9f:69:6b:55:51:0b:f6:ac:cf:66:79:75:a9:16:
46:91:25:85:79:d3:68:e8:19:41:03:a2:fa:7c:e1:e8:55:d6:
75:9a:30:b2:11:20:79:35:f0:1a:80:38:73:8c:49:85:88:70:
9a:07:26:f8:71:39:d5:b8:ce:f8:9f:79:0a:9d:91:ad:19:35:
ad:6f:27:bd:79:29:d2:40:33:4e:cf:65:87:8f:32:7d:7b:fe:
23:99:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:28 2025 by rpki-client