Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: CXfO702gr+P4zgMXl6rhW4dAJ2W3HvwFDVsnNYyfFrU=
Subject key identifier: 85:21:B7:E8:60:30:00:3A:8B:AE:F4:EF:E8:53:44:DD:51:77:92:46
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019680C6F2D67CB0FE88AFB316ED72987FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 09AB
Signing time: Tue 29 Apr 2025 09:00:44 +0000
Manifest this update: Tue 29 Apr 2025 09:00:44 +0000
Manifest next update: Wed 30 Apr 2025 09:00:44 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: JHJPEJI+zb9W5vhc7vZ+gbemH0+w0X352mL0tBrnxqc=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:f2:d6:7c:b0:fe:88:af:b3:16:ed:72:98:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Apr 29 09:00:44 2025 GMT
Not After : Apr 30 09:00:44 2025 GMT
Subject: CN=8521b7e86030003a8baef4efe85344dd51779246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:b1:07:ef:e1:75:ff:41:da:bd:f8:7d:21:
46:20:f4:0d:ae:0b:d6:4c:fb:ec:05:36:88:df:77:
30:ee:71:d4:20:17:11:0c:f0:55:df:47:f8:78:af:
51:7b:3b:8a:db:f9:b5:b2:20:5a:be:93:ba:f2:cd:
b7:4a:aa:0b:be:6d:fb:01:4b:7b:ef:4e:b2:aa:f2:
b5:79:ad:a4:73:96:8a:70:f2:fb:2e:2a:21:de:dc:
0c:3d:79:b8:8b:ef:f3:94:fc:3a:ad:8e:c5:8e:d6:
62:7b:9c:17:0e:24:60:a5:19:47:8f:69:c1:2b:7d:
50:3b:10:2f:e5:52:29:d6:67:f9:c4:8b:34:19:a6:
b0:ca:e3:53:68:58:bb:ae:f0:d5:7c:b6:86:48:79:
b5:52:25:c1:09:7b:70:95:ae:eb:4f:7b:76:14:0a:
ca:4e:b1:7c:c6:aa:fa:81:46:78:35:6e:32:67:fd:
52:6d:7f:f2:22:98:6d:f5:af:0c:4d:cd:f0:b9:14:
cd:31:f2:cb:3f:5e:ff:72:6e:d3:0a:5f:73:02:18:
df:a4:6a:d1:ae:84:05:0e:c0:d1:44:0a:f8:58:8e:
36:92:9b:cf:7b:f8:9d:5c:ff:01:44:b9:a9:2e:34:
b2:c4:08:fd:ec:39:65:08:3b:63:9e:a5:99:53:7b:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:B7:E8:60:30:00:3A:8B:AE:F4:EF:E8:53:44:DD:51:77:92:46
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:53:0f:8f:9d:75:d7:c9:b6:64:34:83:10:9f:8d:8f:57:
cf:5b:a9:e3:a5:ce:2e:63:97:68:19:9e:ae:11:05:7c:fc:64:
12:b1:22:30:f1:4d:d2:c0:a4:1e:30:2f:da:38:77:61:64:0f:
43:08:e7:1a:e6:54:88:a4:5c:24:8c:b8:98:10:f4:c1:0f:ad:
08:5e:ba:36:ca:84:da:13:4e:29:43:59:a1:89:15:21:15:13:
10:04:c2:3c:ed:91:01:f8:38:9d:d8:20:36:86:b6:1f:bb:8c:
a8:b2:fa:c8:37:60:8d:2b:83:4b:a3:71:3b:31:40:8f:7f:b7:
49:6b:51:2a:a2:b0:9e:5d:f9:3d:63:8e:e3:20:d3:b8:72:e0:
21:40:29:d7:fe:64:69:2e:07:52:78:cc:76:8b:6d:5a:d3:ae:
f3:90:aa:1d:fb:41:49:d5:ec:0d:14:ea:6a:7a:ce:36:6e:69:
c3:d1:8e:a2:44:0b:5c:9d:32:a0:f2:84:66:5a:3e:f9:61:49:
54:31:e9:34:c8:34:e7:fd:54:6e:64:61:28:31:31:3d:18:2b:
dd:20:f5:3b:cb:19:6e:f5:09:84:06:b0:3b:94:2b:c9:75:ba:
92:5e:9a:12:62:c9:c9:a7:6f:72:10:e9:64:37:1d:e1:be:fd:
17:86:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:16 2025 by rpki-client