Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: P/2doJeIbntbR3kMXRGSzq9IOoinveVVwuW6pF9l/EM=
Subject key identifier: C4:50:B0:83:7C:EB:1D:A3:F7:92:74:72:FB:A4:01:D3:B4:CA:B0:F1
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 019675308D2FC0B2DE96254C190F181FFF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0BF6
Signing time: Sun 27 Apr 2025 03:00:37 +0000
Manifest this update: Sun 27 Apr 2025 03:00:37 +0000
Manifest next update: Mon 28 Apr 2025 03:00:37 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: f9mD6xiJj+OjLNBvD/87bUy4p0qASpki3Mi0VSIg8uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:8d:2f:c0:b2:de:96:25:4c:19:0f:18:1f:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Apr 27 03:00:37 2025 GMT
Not After : Apr 28 03:00:37 2025 GMT
Subject: CN=c450b0837ceb1da3f7927472fba401d3b4cab0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:db:8c:37:98:97:2c:ba:5b:70:72:35:bb:
d9:16:36:1d:4f:d7:f4:00:f1:a7:00:c1:b6:90:ef:
be:18:9d:7f:93:aa:53:71:6b:c6:a0:f9:ef:a5:b0:
92:8a:f2:56:bc:06:65:a3:53:17:9e:46:e8:dd:e4:
91:13:58:f3:d8:94:fa:34:7d:0a:21:6a:9e:b9:67:
8c:4d:ec:28:89:3e:ed:ac:08:e8:8d:5a:ea:c8:89:
e2:0f:67:39:bd:16:9c:11:cd:2a:61:55:43:b4:13:
6e:e4:bf:ed:e5:e6:61:81:fd:06:0b:dd:2f:f6:b2:
09:87:89:4c:81:1c:7a:1a:f4:d8:8c:80:bd:9d:e2:
56:5a:18:36:62:9e:17:4e:3b:90:15:6a:57:c5:a0:
88:34:4d:90:40:ac:d6:4d:07:36:70:b7:7d:be:4b:
eb:a6:b6:d4:5f:6c:6f:86:68:6d:28:bf:76:8b:19:
f1:87:82:22:ce:72:e2:c7:42:ef:7c:d7:b3:fe:fd:
0a:aa:62:94:71:34:a4:f3:da:31:b2:2d:27:28:89:
2e:0e:7f:d0:02:9e:8c:c3:e3:48:fd:4e:20:57:e0:
f9:25:45:c3:fe:58:98:67:6f:dc:6f:14:ed:43:39:
7a:6d:8b:c4:9a:f1:33:6f:75:3e:c4:34:86:7d:17:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:B0:83:7C:EB:1D:A3:F7:92:74:72:FB:A4:01:D3:B4:CA:B0:F1
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:74:bc:8e:ab:4e:24:0c:2b:d2:aa:cd:a6:d9:f8:b5:28:
c8:20:f9:7e:51:e4:97:dd:b8:31:b9:fb:6c:f4:f3:91:ed:7a:
cb:70:eb:ea:48:56:1e:ef:0b:49:60:fc:ba:98:b6:46:ea:5e:
11:c0:89:be:bf:85:28:00:28:d6:4b:fa:33:10:87:dc:a4:8a:
17:15:49:e7:b6:25:fc:ef:be:72:00:e6:75:12:6c:cd:56:46:
88:d0:93:c0:c8:f0:32:52:c6:c4:24:a6:fe:cd:70:fa:d9:c6:
e4:58:cf:93:53:97:6b:ab:85:7c:fd:2e:7f:75:93:16:24:ae:
aa:91:5d:95:bc:c7:76:7b:4d:cd:3a:9b:f4:e3:b0:1e:5d:9e:
ac:66:5b:4a:09:f4:dc:e5:5c:95:40:3a:08:41:9c:64:ab:29:
1e:c4:20:32:88:2d:f4:8c:2e:d7:43:29:bb:5b:cb:27:d1:6a:
d3:1f:62:19:2a:d4:01:2f:03:c2:aa:c3:00:29:95:7d:3b:c5:
dd:0c:da:fc:45:f1:e0:57:ea:40:cb:3f:f7:e5:0a:99:b8:41:
8d:a0:7c:04:70:da:7d:3b:86:be:4c:2b:59:88:19:42:81:9c:
02:a5:c5:49:01:35:60:e8:4e:94:87:70:9b:19:22:d5:c7:81:
9c:e1:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:28 2025 by rpki-client