Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: QVwrOw771FPv9VMO/09IUZ5BSk/tzESUruuzPnkYSgU=
Subject key identifier: B5:6D:C1:45:BB:A1:DD:A5:7B:FF:E0:F7:16:70:97:00:86:1D:79:86
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019673792401EB6A4FDD5B22142AE3B99550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 0EA8
Signing time: Sat 26 Apr 2025 19:00:40 +0000
Manifest this update: Sat 26 Apr 2025 19:00:40 +0000
Manifest next update: Sun 27 Apr 2025 19:00:40 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: 9dpvW3AE1XBaiZlpXqM3hrWOrxsbfQYkUZ2kU+odzG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:24:01:eb:6a:4f:dd:5b:22:14:2a:e3:b9:95:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Apr 26 19:00:40 2025 GMT
Not After : Apr 27 19:00:40 2025 GMT
Subject: CN=b56dc145bba1dda57bffe0f716709700861d7986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:30:bf:39:be:37:cf:78:ea:91:3e:95:2c:
f8:bf:b2:c2:2e:19:ef:81:83:43:a9:04:33:8f:b1:
ae:c1:dd:b2:d9:01:0a:b8:e7:3a:57:f4:a2:ee:95:
e9:f8:18:fd:fb:25:b4:bf:5a:22:86:c3:87:df:9e:
44:4c:9b:3d:a6:ea:06:f9:d1:82:9d:e0:3f:5d:66:
03:8d:34:f2:45:ee:af:16:57:9c:3a:f6:8a:1f:28:
f3:09:84:dd:75:dd:63:c6:ad:f1:48:db:26:3f:a4:
d5:ac:35:c9:48:f5:7e:63:d5:37:ac:52:45:4d:48:
4c:a5:18:64:3f:29:bc:22:10:da:5f:8f:c5:2f:a4:
5d:ba:39:9e:1b:d3:62:a0:c4:76:6c:05:8e:68:ff:
7e:03:b9:0b:aa:fd:1f:10:c2:32:c6:38:5c:a4:1b:
12:34:3b:82:79:1f:27:d1:c7:71:b5:9f:a9:01:c3:
f1:c8:c1:0a:66:a9:f7:e1:47:ba:fd:09:a8:50:da:
7c:cc:0b:10:91:b3:53:76:72:e9:21:6a:ec:d2:80:
76:c2:ef:24:87:04:fd:7a:89:d0:7e:5f:f8:3f:20:
6d:81:c4:75:99:6f:09:e3:6e:d0:fb:70:0e:91:e6:
8b:66:8d:e6:be:80:80:8b:be:6d:14:e0:72:51:01:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:C1:45:BB:A1:DD:A5:7B:FF:E0:F7:16:70:97:00:86:1D:79:86
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:a5:89:5c:7b:00:60:db:51:82:3e:74:1f:f9:dc:c5:40:
5b:e9:b8:f3:fa:3e:f2:fe:23:e5:b8:63:32:1a:6d:bc:8f:b1:
53:4a:91:7b:10:d4:77:3e:29:75:32:64:e9:9a:1b:3e:fc:ae:
71:75:85:04:b8:09:52:2e:0a:7d:77:71:02:c2:5f:a0:21:0a:
bf:b1:92:e3:f6:11:25:be:54:1c:ce:17:72:df:24:c0:48:b2:
67:d0:30:f6:a6:59:5e:c2:ed:40:78:3f:04:55:68:49:dc:7d:
cc:c6:26:5c:85:b5:72:64:93:98:69:c5:bf:c5:a7:ec:ca:97:
30:73:f9:c7:7e:56:e5:91:c8:ef:81:3e:b0:d3:87:c6:47:0f:
ce:2a:c1:fa:9f:f5:1b:0d:e6:9a:a3:e9:90:67:00:82:5d:16:
65:a1:94:b6:b8:38:c8:a5:69:ea:14:ef:cf:4f:ea:32:8b:06:
b4:a2:a4:bc:c9:aa:bc:d9:68:78:e6:92:70:33:29:08:02:13:
6d:34:26:d6:1a:d2:6c:4c:1e:4c:a8:db:ce:27:fe:d2:1b:99:
a9:09:bd:ca:66:27:44:fa:c6:dc:a5:a2:32:49:f6:5d:85:13:
bb:35:5e:e8:c8:6f:79:4e:e7:a5:89:b5:c4:17:2d:24:ba:99:
2f:e8:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:03:42 2025 by rpki-client