Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier: xDtfJA/AviltgAS1/PEMS/8TtExfylWg7hh34K/1p/Q=
Subject key identifier: 71:D9:29:DA:58:80:61:BB:0B:7A:BF:59:CC:A3:9C:87:34:83:FD:85
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 01964A7CFFA3C851777F2738732C473ECF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number: 0E71
Signing time: Fri 18 Apr 2025 20:00:27 +0000
Manifest this update: Fri 18 Apr 2025 20:00:27 +0000
Manifest next update: Sat 19 Apr 2025 20:00:27 +0000
Files and hashes: 1: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (hash: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=)
2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: o4xamCPdN6Avg1M8AWp3FwoA83ce162GKNRWQcvdFAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:ff:a3:c8:51:77:7f:27:38:73:2c:47:3e:cf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Apr 18 20:00:27 2025 GMT
Not After : Apr 19 20:00:27 2025 GMT
Subject: CN=71d929da588061bb0b7abf59cca39c873483fd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:1d:7f:96:5e:3f:a2:e7:b1:ed:f4:77:a9:
f2:13:95:09:77:18:84:cb:9e:2b:95:bf:93:d7:39:
60:56:43:b9:06:6d:c2:23:69:1e:94:0e:d7:be:e9:
d0:f1:7a:6f:90:5f:1d:d9:41:1b:ed:c7:5a:50:7e:
22:ec:f8:a9:c0:0d:05:10:cb:c9:60:5d:4a:70:59:
3c:44:8f:88:b9:ce:1a:bc:30:f2:69:1c:11:57:42:
0e:4b:4c:d5:7b:90:a0:49:f0:dd:0a:ef:e0:52:eb:
fd:5f:0c:99:16:7a:05:4b:1c:2a:3d:f2:70:dd:f5:
91:21:1f:3a:f0:9c:9b:d9:22:e8:0f:84:bb:1c:f3:
56:1e:c5:78:ce:10:a4:bc:41:df:72:0f:72:8c:b5:
f1:e7:ea:38:2c:ee:b0:05:cd:9b:9d:8f:46:0a:4d:
95:da:da:f8:45:c9:14:19:a7:f7:96:40:1d:a3:63:
86:e4:2e:db:3c:d3:92:cd:4b:67:6c:1a:c4:7a:86:
92:b8:de:d2:af:ab:d5:ef:6e:b7:32:31:a1:6b:51:
f9:b9:94:77:e4:9f:81:b2:85:7b:89:f2:36:c1:50:
f1:74:06:77:b7:91:f2:86:57:e3:c3:5a:bc:16:14:
72:4b:d2:fa:2e:1b:16:20:f7:42:48:91:e5:c3:5a:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:29:DA:58:80:61:BB:0B:7A:BF:59:CC:A3:9C:87:34:83:FD:85
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:06:1e:87:90:c9:59:ee:09:eb:d6:54:c0:84:f8:ab:5b:b7:
7b:cb:f9:2f:c4:1e:c0:82:c7:d5:23:46:51:20:04:a1:dd:be:
ab:52:04:0d:91:c1:ab:31:59:e1:a3:a7:c6:0e:d0:af:54:e0:
83:f0:aa:b5:76:71:0e:65:b7:9f:65:d1:d4:f8:49:96:cc:02:
aa:7d:06:5a:91:22:b0:3f:06:4a:2e:f4:3e:dc:c8:93:af:9c:
64:d1:2b:11:d8:a3:2f:5c:89:53:4d:b0:7e:b7:df:e4:4e:53:
99:a1:02:e2:86:da:73:c1:b2:9e:2c:c2:f8:7c:d8:ba:f9:e2:
74:7e:21:1b:3f:8d:b8:c6:05:a6:d2:36:56:5f:14:4c:9b:2d:
32:9a:04:60:84:19:0c:26:a3:fd:52:7c:05:86:e1:d3:0a:e6:
80:24:09:5c:74:d6:b9:af:7e:05:08:0c:46:41:ab:8c:22:90:
9a:55:9d:99:18:af:6c:b6:59:e4:0e:a6:3d:fd:cc:cf:0a:bd:
20:19:04:91:08:2d:1d:45:40:91:d5:90:b3:8c:52:8c:b7:e5:
b5:30:b8:07:d3:3a:31:8b:72:ac:45:f4:ea:36:5b:95:49:75:
0d:ab:47:bc:c1:20:a0:87:a5:70:57:3e:3a:a8:53:a1:0d:9f:
9a:1b:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:55 2025 by rpki-client