Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: tRkoMjgirlntfsmXNGX7QGLjb27PVQrrKFa9I8vW0Fc=
Subject key identifier: DC:3E:7C:AB:69:4E:69:A4:03:CD:FB:C9:BF:92:75:76:89:21:8D:5E
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019674548AF5BE6C5646A6ADA87E291139E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 023D
Signing time: Sat 26 Apr 2025 23:00:19 +0000
Manifest this update: Sat 26 Apr 2025 23:00:19 +0000
Manifest next update: Sun 27 Apr 2025 23:00:19 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: bvjdjR5dh8ltcDCcx/EUdyzUsSRab0JUecm7IAFThUs=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:8a:f5:be:6c:56:46:a6:ad:a8:7e:29:11:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Apr 26 23:00:19 2025 GMT
Not After : Apr 27 23:00:19 2025 GMT
Subject: CN=dc3e7cab694e69a403cdfbc9bf92757689218d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:37:6c:9f:30:65:80:12:73:66:62:08:83:
a6:29:60:de:54:c4:86:3a:06:4a:96:79:d5:8a:dc:
22:6b:b7:4a:7a:61:d5:3d:e9:d7:8f:93:ab:d4:be:
b9:78:ec:7d:f7:7d:d3:2f:5e:97:a6:50:49:83:b6:
28:a0:dc:48:86:47:b2:51:25:ef:50:d0:d3:a7:54:
41:08:ee:a8:5a:5c:f1:4d:84:71:26:c6:5f:52:92:
0a:dd:e7:57:62:a9:bc:1d:de:a4:c2:68:3c:b4:9f:
12:25:fb:35:45:37:2b:b1:2d:fc:1b:9a:50:7e:c3:
da:e4:01:8f:ed:54:a3:22:12:c1:3b:d5:eb:f6:df:
28:f2:de:28:44:b4:8f:db:a7:1d:e3:c8:65:88:50:
90:7f:04:ac:c1:51:c5:9c:84:cf:58:29:36:35:ad:
28:95:09:29:1f:fe:58:3c:34:63:8c:dc:60:77:8c:
fa:5e:9d:41:7f:29:95:bf:82:08:45:0a:e7:6a:bc:
85:aa:df:28:44:16:73:e5:4c:c9:c7:2f:38:d3:cc:
7f:db:d0:9e:80:29:7d:60:62:8a:66:11:1d:35:38:
0f:8c:52:8b:8f:84:02:09:5b:5a:6b:be:19:b4:9e:
7a:cc:32:7c:7e:fc:d0:82:e0:72:62:ac:80:1e:6b:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:7C:AB:69:4E:69:A4:03:CD:FB:C9:BF:92:75:76:89:21:8D:5E
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ad:8f:ef:23:85:41:75:79:92:e9:ba:ca:b4:db:22:80:0f:
4d:fd:ca:b0:d2:32:4e:80:a4:b2:9f:3a:39:fd:a6:01:a8:6c:
f2:86:b6:60:ed:de:2d:22:9f:aa:77:0b:c7:2e:77:4c:82:d1:
a1:13:0e:9a:10:6d:85:be:77:0d:d3:0d:33:85:22:7e:ba:cd:
7d:9d:52:27:96:c8:c5:06:fc:be:3e:3e:13:3b:21:7c:07:d5:
bf:f8:f3:ce:5e:98:97:59:73:cc:b6:d2:24:8d:d2:fe:db:7a:
d6:50:b2:bd:8c:31:f1:68:92:a5:15:35:ea:6b:c9:9c:99:53:
74:5e:6c:b6:4f:b1:84:8b:00:32:35:95:f2:75:9d:df:cb:16:
d4:b8:ad:c9:3f:e2:9e:db:ef:75:78:02:69:94:c2:19:1a:0d:
16:7d:e3:76:22:40:be:1f:0d:59:6a:03:b7:f4:4b:13:10:0b:
33:db:bc:3e:22:e6:f1:e9:ad:74:2f:8c:61:27:89:23:a5:55:
f0:16:d5:e2:f3:f9:59:50:44:a2:c4:a2:63:2f:a0:77:65:5d:
6f:c1:97:dc:5e:f7:79:c5:a3:cd:9b:46:e7:66:60:1e:7d:e3:
74:2a:c0:c1:d1:a4:8e:d5:f3:bf:24:88:83:1c:21:c5:e0:23:
75:bd:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:54 2025 by rpki-client