Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: W1KDROrg7/8d7Yr7v/sHSTHLYopiU4RnwulIQIPlEuA=
Subject key identifier: AE:4A:6A:E2:F0:10:83:39:0D:4D:74:B2:A2:AB:68:B4:A9:91:54:51
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 01964F6D33D3DD168B4FB3298C8F6F906AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 04E7
Signing time: Sat 19 Apr 2025 19:01:18 +0000
Manifest this update: Sat 19 Apr 2025 19:01:18 +0000
Manifest next update: Sun 20 Apr 2025 19:01:18 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: 5tZRa92E7k0yTst0RH3ShkbDR/v0pY7bwsJnj1MfZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:33:d3:dd:16:8b:4f:b3:29:8c:8f:6f:90:6a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Apr 19 19:01:18 2025 GMT
Not After : Apr 20 19:01:18 2025 GMT
Subject: CN=ae4a6ae2f01083390d4d74b2a2ab68b4a9915451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:bf:ab:1d:5b:77:33:59:7a:4e:24:70:48:
f3:e0:e3:e4:8c:a2:f9:86:19:b8:6a:55:dd:8e:3b:
f9:e0:ca:cd:d5:4f:38:67:f1:d0:89:23:c9:cc:57:
4f:5a:4c:c0:f0:85:c3:34:62:02:dd:e9:41:ad:36:
45:80:d3:35:9c:c3:21:be:a1:e0:80:9e:04:fd:37:
04:f7:dc:73:17:91:51:cc:e3:73:2d:0a:81:5f:0e:
96:dd:02:f3:6a:b6:79:b6:8e:24:23:64:98:cd:4d:
be:49:bc:db:fa:0a:74:e1:bf:29:ce:41:c0:8c:bd:
3f:97:3f:b3:5b:00:48:42:f0:3d:31:b9:86:f9:2e:
73:9a:d4:77:82:d1:e2:bf:ef:ae:f6:48:bb:89:5b:
b0:26:99:91:d5:ab:35:66:70:94:2e:16:19:07:06:
4c:8f:51:96:c6:5e:39:aa:1e:13:bb:19:76:61:5c:
ca:23:11:cc:2a:c7:b3:fb:04:e1:e7:c2:d2:e0:c0:
47:2f:d2:28:a7:68:0c:a5:44:87:78:e5:28:bc:41:
f3:c7:cc:29:e2:cb:42:81:95:ea:13:16:78:ff:5f:
10:ae:b6:41:56:40:7c:32:2e:a8:8a:31:05:fd:db:
b9:e7:e8:61:11:93:3e:73:16:bf:71:91:67:fa:6e:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4A:6A:E2:F0:10:83:39:0D:4D:74:B2:A2:AB:68:B4:A9:91:54:51
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c7:e7:38:e5:de:90:96:70:fc:4f:ca:ec:18:5b:c5:23:2c:
7d:e3:e4:41:41:1f:58:48:48:63:50:37:75:f6:b5:48:cb:5a:
0b:4b:4f:d2:2f:27:c3:a1:c3:87:b4:3d:1f:72:ef:43:0b:9b:
5d:92:40:fa:6d:f3:7b:ee:18:0c:cc:08:4a:e4:b2:f2:27:62:
13:c2:80:38:ab:83:49:18:6c:33:ca:7b:8e:f5:ef:e5:54:b2:
8b:8a:e7:00:87:56:ed:88:4e:77:a8:8d:03:98:96:67:a6:2d:
b0:60:b3:18:d1:c4:9b:54:62:34:89:7b:3b:5d:08:4a:f6:c9:
47:bc:1a:70:b4:d2:2a:7d:64:25:4d:03:5f:a3:2e:62:5f:d7:
78:27:eb:ae:8e:6e:5b:5c:79:f5:80:6f:34:43:6f:0e:ea:0e:
97:1b:5f:8a:06:42:6c:44:61:cd:68:91:6a:49:cf:93:58:7b:
78:3b:c5:76:91:59:62:da:9b:73:5b:c8:35:08:ac:ab:c1:64:
1f:6a:32:34:ba:26:41:61:bf:68:8d:04:5a:e3:4b:fc:00:af:
25:07:ff:00:89:18:38:b6:be:f3:00:bc:1d:3a:ec:34:09:8e:
c3:6c:07:7c:6c:62:de:c0:5f:3f:d4:f3:af:a3:d2:c5:66:d6:
37:b9:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:43 2025 by rpki-client