Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: 7slRprurGjSSL70MWhlRNJwI+i+390sqsLw6mPat7hc=
Subject key identifier: CE:D9:52:3F:FF:A2:D8:B3:6E:C2:29:9C:FD:4D:19:B0:58:43:CB:1D
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 01967A8D9FC2348936A2D36EA9982568747A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 0873
Signing time: Mon 28 Apr 2025 04:00:23 +0000
Manifest this update: Mon 28 Apr 2025 04:00:23 +0000
Manifest next update: Tue 29 Apr 2025 04:00:23 +0000
Files and hashes: 1: Z7h5qadGJoQ6FUOneZqqbZNwHng.roa (hash: l8WEv/DVA3/x8QQSyaVc6ay+0r3lEE5lR9pYa08V1FE=)
2: fninY7dk4NBx5RTL5R_Wezr9T0s.roa (hash: SwOpz8NdRi+4j0eDktQnp/qAQ8UOrHFKwcilSnSB5hM=)
3: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: j6insUjIpAvpVgW5Z0UxB80CxPKvi0dXahXGwSqzj0s=)
4: ktAAidM8yuGSNSk_nWhJUqA9KEs.roa (hash: PukwcAGvFtblvafh80ccf3hyXxWAP6VQ8wyQlvDsA6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:9f:c2:34:89:36:a2:d3:6e:a9:98:25:68:74:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Apr 28 04:00:23 2025 GMT
Not After : Apr 29 04:00:23 2025 GMT
Subject: CN=ced9523fffa2d8b36ec2299cfd4d19b05843cb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:87:09:55:e1:8a:e2:e5:df:4e:57:1d:27:
b1:50:84:36:68:9f:b0:cc:d6:b6:6a:0d:95:96:aa:
8b:e3:14:d2:23:40:99:6f:62:63:47:48:51:e8:4f:
c7:60:ca:3d:dd:61:62:2e:63:24:53:b1:e7:e9:ee:
31:2f:16:fc:32:04:08:de:6e:5c:e8:9c:22:67:09:
ec:ac:9c:db:12:1f:fa:0b:56:be:45:35:d5:53:c4:
1b:6a:6f:da:09:6d:a6:fb:2d:a1:ca:45:82:3f:d1:
0c:93:42:03:d8:bc:45:3b:19:d3:62:ea:b0:44:a9:
8d:c8:72:41:67:c9:ab:c8:c9:d2:b9:66:7c:d8:21:
5a:5f:d5:20:bc:38:58:5f:43:a5:c9:c5:7a:25:ee:
3b:c2:35:82:59:ba:3a:81:2f:fb:fb:3c:8c:1a:2f:
bb:6c:6f:0b:8c:d0:3e:7b:52:ab:98:c7:5a:67:32:
d4:40:69:f3:b9:23:de:53:4a:46:76:75:ec:2b:df:
c9:0c:e8:6d:28:1f:fb:20:07:3d:6c:68:7d:b0:23:
81:f6:d3:9b:d8:a9:59:68:3b:47:1c:0e:43:2c:27:
fc:37:8d:d5:32:13:2b:9a:51:42:32:1f:e4:01:22:
12:f5:6d:b3:fc:58:2e:63:2b:16:e3:2b:f1:b2:35:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D9:52:3F:FF:A2:D8:B3:6E:C2:29:9C:FD:4D:19:B0:58:43:CB:1D
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:77:70:11:e1:33:9f:ca:69:14:4e:53:a1:06:27:2a:1d:7e:
4b:93:5d:0b:0d:3a:f8:bf:4b:b1:d0:90:82:17:dd:74:3e:be:
1a:2d:3c:8d:6d:28:bf:a2:9a:f1:69:ff:64:6a:17:40:df:9e:
5c:cc:9c:2f:e4:46:7f:36:54:6b:05:eb:92:45:01:a9:5a:22:
0a:9f:9f:10:c8:b8:c4:7e:3b:00:fd:d8:d4:83:67:a8:68:64:
ab:7c:80:ec:da:64:4c:01:e0:77:2d:85:62:3e:99:cf:00:ea:
16:30:7e:24:f2:00:31:94:5f:3a:2e:da:a8:f0:d8:62:f1:89:
b2:24:8d:0f:cf:05:c4:6e:8f:13:3c:53:70:38:16:16:ef:c0:
b2:32:b0:65:33:75:a7:c9:f6:46:1f:b1:f1:bf:f1:5a:6e:87:
2d:c7:25:85:aa:6e:f5:d5:ed:0f:f4:71:a9:3d:ed:db:ab:4c:
a5:80:d8:f3:51:14:0a:0f:8a:16:8d:5d:b8:83:c7:ca:34:4e:
93:65:38:19:ff:62:e5:87:26:63:9a:db:9d:1d:a7:b5:bf:9f:
7b:3d:19:e7:5e:b6:71:f5:2e:75:19:44:c1:c2:79:0f:3a:5f:
5c:11:41:71:74:e4:92:c6:ad:38:a9:ca:cf:46:47:d1:27:45:
88:7f:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:33:35 2025 by rpki-client