Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
File: gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json)
Hash identifier: MCDxsKEHBPftkKVQ+oizgCkO5uVrE5NvsHg9u6xa7lE=
Subject key identifier: 17:35:52:D0:D3:0A:2A:36:3F:4F:FF:03:20:D2:0B:7A:8D:58:EF:0D
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Certificate issuer: /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial: 019683C7EAD6C1EF5F60024520A4431428D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
Manifest number: 0755
Signing time: Tue 29 Apr 2025 23:00:39 +0000
Manifest this update: Tue 29 Apr 2025 23:00:39 +0000
Manifest next update: Wed 30 Apr 2025 23:00:39 +0000
Files and hashes: 1: E-w5M4eQP91wEOXM7w1SR0QOmxg.roa (hash: +jFSsPpUEMM2UeClDBFj9F6a9KDL4VbEDLgdyScKqB4=)
2: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: +vmOQgJp4xmb5YMODV2JSTSjfe4Tht1etCD9gGAXffw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:ea:d6:c1:ef:5f:60:02:45:20:a4:43:14:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
Validity
Not Before: Apr 29 23:00:39 2025 GMT
Not After : Apr 30 23:00:39 2025 GMT
Subject: CN=173552d0d30a2a363f4fff0320d20b7a8d58ef0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:14:2f:a1:78:2a:42:e1:3b:ae:e1:56:39:
30:8f:95:4a:85:2c:4b:4c:1a:13:dd:35:80:c5:53:
03:2d:bd:f8:65:d1:1d:62:38:f0:a1:73:18:7d:28:
2c:de:2e:83:74:75:6c:02:90:06:d1:9d:e2:f8:26:
44:a7:8b:52:d2:20:8a:a1:a8:d6:57:72:d0:09:3c:
5f:3c:ff:a9:57:be:74:e7:d3:6f:93:0e:8a:af:79:
ba:a7:6e:ed:7c:e2:17:1f:fe:ec:e0:16:8a:ea:87:
b6:19:63:b3:d5:ce:fe:57:74:cd:a5:a6:0b:67:27:
65:b3:fc:53:f2:ea:5a:1e:5c:0d:0e:c8:a6:9b:95:
d4:cd:7a:6e:53:34:ac:8a:c6:b1:0a:45:a6:92:df:
7b:09:29:9b:b6:ba:74:e8:e0:b1:da:3f:84:c5:b7:
fc:a7:4f:c3:5e:ad:b6:a9:e5:02:ac:8b:3c:9a:4c:
c4:4b:5e:3a:02:bc:e2:49:23:c8:c6:3a:8e:95:99:
54:f1:bb:5b:fd:61:b7:fa:63:2f:c5:10:f1:1b:51:
17:81:23:96:14:d1:7b:f7:70:dd:32:e3:81:75:72:
56:16:3b:b1:3f:a7:c3:b8:12:0b:66:0d:8e:a1:77:
29:cd:17:09:d7:b4:eb:c8:d8:fe:77:49:7f:1e:fc:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:52:D0:D3:0A:2A:36:3F:4F:FF:03:20:D2:0B:7A:8D:58:EF:0D
X509v3 Authority Key Identifier:
keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7b:a6:a1:18:3a:7a:91:a1:4f:82:67:7b:31:c8:f8:a7:28:
65:b7:90:e0:76:27:06:3f:61:2f:0e:e2:0f:fc:03:29:f9:8f:
8b:d4:e8:3e:b0:30:8e:63:28:5e:02:76:e8:78:40:f4:ae:87:
0b:b9:48:25:28:66:1c:b3:ca:8c:79:6e:8c:91:08:ae:95:43:
66:26:29:17:fa:9a:cc:8e:d5:ec:6e:cb:f7:fb:f5:ef:e2:4b:
c4:ae:dd:20:d1:a6:c4:34:01:bc:ec:6d:13:94:cb:9d:3f:08:
0c:66:d0:d7:65:c0:8f:7e:d7:9d:19:f7:06:95:9f:3c:0a:ab:
e2:9a:a3:fa:f9:2a:56:dd:d0:bf:37:16:99:80:29:08:18:2f:
be:6a:d3:1d:8c:81:0a:68:e9:1a:31:db:f2:48:03:f1:65:f8:
e9:27:6b:33:2e:a1:c3:0f:e8:01:f9:cf:06:01:98:62:68:db:
32:0e:d7:0b:33:2b:f2:d1:26:13:a4:de:bb:16:5f:85:82:de:
5e:ac:1a:85:bb:c9:7d:6d:f6:d3:bf:ec:f9:8e:84:69:8f:92:
98:b1:34:7a:d9:d1:a3:44:e4:52:01:69:a9:7b:bf:83:98:96:
48:14:40:7e:c4:6b:72:5a:2b:28:40:61:36:59:b4:68:ea:7b:
1e:e9:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:12:20 2025 by rpki-client