Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: w8/4ob9q+ocH2GPnO1tApy0ACf/IA/aI8LAwi+vLKOs=
Subject key identifier: B8:DB:1A:2E:99:78:DE:64:33:64:F1:47:AA:2E:09:CF:4A:E7:07:27
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 0196789F14C6A3CAE8D2C0F699F288898B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 0F5E
Signing time: Sun 27 Apr 2025 19:00:13 +0000
Manifest this update: Sun 27 Apr 2025 19:00:13 +0000
Manifest next update: Mon 28 Apr 2025 19:00:13 +0000
Files and hashes: 1: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: zZoNuu6XSod2ebvJZrCApmvwnqRqs7HpOSz6Ku91fUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:14:c6:a3:ca:e8:d2:c0:f6:99:f2:88:89:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Apr 27 19:00:13 2025 GMT
Not After : Apr 28 19:00:13 2025 GMT
Subject: CN=b8db1a2e9978de643364f147aa2e09cf4ae70727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:0f:69:f2:99:3f:d4:b4:03:0e:b2:bf:44:
9c:3f:05:e0:c9:e0:08:67:42:21:da:22:4b:0c:75:
62:28:78:26:ce:3a:81:98:3d:54:08:d1:fa:ae:aa:
40:0b:3d:67:d8:13:44:e3:67:94:9c:4f:3c:c6:e5:
ee:ff:1d:d5:60:08:67:36:bc:78:c5:6e:20:68:1c:
12:12:0b:97:01:48:a1:23:6f:31:41:b6:94:f5:ca:
bb:32:1b:52:03:cb:df:69:6b:8e:22:9d:ac:71:28:
39:ec:a4:a3:52:3f:72:b7:d9:44:d2:50:f2:92:db:
21:ba:51:92:a7:7a:b9:f4:cc:89:9f:2d:72:cd:8f:
df:60:ad:82:c9:72:54:52:d5:75:32:3c:76:e4:7e:
b2:17:42:51:24:64:ed:20:42:aa:1d:80:79:90:29:
43:66:ff:9e:7b:41:66:30:9f:4a:b4:25:de:7e:98:
a9:2f:a5:bf:51:63:dc:5e:6c:0b:82:a7:5c:ce:5e:
99:98:18:40:85:03:e0:e0:bb:27:18:59:c5:1a:0c:
18:5f:95:e3:ca:92:94:84:0a:e2:6e:ea:a1:d9:df:
24:10:f0:a7:d4:3e:3a:f2:09:8d:20:b9:74:cb:5b:
15:e5:d1:a7:31:1d:16:fe:40:5b:26:5f:5d:a6:c7:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:1A:2E:99:78:DE:64:33:64:F1:47:AA:2E:09:CF:4A:E7:07:27
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b9:79:6f:7e:a3:8f:bc:d8:be:a7:4a:96:31:cc:68:ef:b6:
b8:a1:45:7c:f9:6e:4f:19:59:84:b7:c8:20:b3:3d:20:ef:86:
d3:11:2b:f5:bf:c4:33:87:8e:a3:95:f0:12:c0:18:03:74:08:
5c:e1:8f:4c:fd:d9:e7:20:3b:98:8b:ae:f6:65:d5:e5:fd:45:
c3:28:1a:6a:a5:63:7b:c6:3f:2b:7d:82:03:50:d7:40:de:3b:
da:78:5f:51:be:b9:3c:64:2f:25:f7:00:10:7e:39:44:43:cb:
c6:03:4b:2f:42:2c:f2:9f:4a:23:1e:15:8b:c0:cd:72:ac:a5:
30:05:18:8d:10:b5:4e:4b:1f:14:58:6c:91:db:f6:ab:d2:93:
38:d1:63:1e:69:0e:ec:77:fc:95:0c:83:17:5e:9c:5e:05:ef:
61:7d:a6:0e:a1:e8:03:9e:cb:8a:7e:f7:39:bf:90:8a:c5:8f:
7e:80:85:de:90:36:be:1f:1b:f2:d7:9d:16:c9:02:6a:56:57:
d0:39:40:be:45:c2:30:88:43:b6:a6:f4:e9:d5:a2:b3:99:61:
1c:dd:54:3d:8d:40:c8:af:24:c1:6d:d9:b9:93:30:12:f3:45:
c2:86:3e:26:03:16:65:1f:6e:20:09:2f:a6:75:b7:86:86:5e:
dc:e3:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:59 2025 by rpki-client