Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: VUDbRl4s1pauyQj5YqKjQnBO6MhgSF161ffH3lC4qt0=
Subject key identifier: DF:8D:FD:76:09:38:7D:BB:2A:EB:65:E6:5D:A6:3F:BF:CB:6E:FA:01
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019673E68FE993D2AEEEDE525F57278FEB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0937
Signing time: Sat 26 Apr 2025 21:00:12 +0000
Manifest this update: Sat 26 Apr 2025 21:00:12 +0000
Manifest next update: Sun 27 Apr 2025 21:00:12 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: y60XaDHF77cGuM12HhY3l43LtN/+2vRlRpe5Wv0tDnc=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:8f:e9:93:d2:ae:ee:de:52:5f:57:27:8f:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Apr 26 21:00:12 2025 GMT
Not After : Apr 27 21:00:12 2025 GMT
Subject: CN=df8dfd7609387dbb2aeb65e65da63fbfcb6efa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:cb:b6:ea:1f:27:7d:d2:ec:83:8f:9b:f4:
55:7c:cc:d9:23:20:cf:ab:4c:5c:ee:b7:19:a6:65:
dc:7c:93:ee:ec:57:89:08:e7:27:8e:8d:4b:6f:f1:
19:c0:bc:80:7f:53:96:ee:a2:eb:b4:b2:6c:13:d4:
77:ca:f6:fb:46:70:0d:cf:8f:bd:bf:60:e3:0b:4f:
39:84:d3:0a:bb:58:5d:b7:30:40:11:7a:20:32:87:
e5:b7:af:65:dd:ca:38:fb:08:8f:d8:5e:9e:3a:75:
97:9c:07:5c:54:70:ef:ec:42:ec:8e:53:d5:80:90:
e3:e4:c1:07:6f:5f:3a:b7:0d:76:2a:74:88:a5:d6:
5a:db:0e:20:40:31:ee:c7:1e:ab:c8:6c:04:24:62:
28:0c:ca:a8:0b:24:4a:bb:14:65:34:0a:b8:86:ec:
83:e8:85:04:0e:bd:94:04:7a:ef:f8:d4:ca:14:00:
96:c8:ae:a8:7f:b9:a3:14:b7:34:4b:05:b1:be:64:
ba:a5:30:ef:8d:6a:16:8a:b9:de:1e:da:f7:cd:2d:
14:da:b3:96:f4:3c:1e:eb:b9:51:22:99:d7:db:3c:
84:a5:b5:c9:3a:15:0f:3b:e5:81:93:86:4a:26:91:
12:e2:e4:ee:83:40:06:c1:0b:3f:7c:cd:19:d3:9c:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8D:FD:76:09:38:7D:BB:2A:EB:65:E6:5D:A6:3F:BF:CB:6E:FA:01
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:78:51:9f:73:17:a1:7f:7e:21:7f:fb:80:50:7f:2b:6d:53:
ff:22:82:cb:f4:18:25:e0:0e:c5:e5:a3:76:05:31:49:4a:cd:
f7:77:e1:a4:5c:86:d2:6b:1a:32:f7:37:cf:aa:18:a0:b8:39:
48:75:96:73:c5:e1:00:a4:4c:e9:2a:54:02:53:30:38:ba:86:
12:3a:05:08:ac:ec:23:89:cd:eb:29:aa:d5:f2:cb:48:e3:1a:
e5:80:91:63:89:e4:5d:5b:a9:48:6f:5d:bb:a2:0f:01:65:3e:
24:4a:13:59:20:f6:a1:e0:a6:78:ee:19:ae:5e:59:a9:0b:b7:
6f:9b:8a:c7:f5:1b:7e:c4:b8:a6:1f:60:1b:e7:79:64:38:3f:
1d:29:7a:3f:43:23:64:07:f8:45:67:6b:2b:9e:0c:b3:e4:1b:
a5:b0:b7:33:ae:56:13:f8:09:1f:24:b3:ac:3f:f2:91:de:50:
b4:7e:bf:b8:e7:7d:b1:82:cb:08:34:80:cd:56:47:41:b7:aa:
18:21:a3:ea:c3:85:4e:4a:a3:89:67:bd:b4:aa:ae:c5:d3:e8:
5d:4f:3c:7a:40:a3:90:ce:4f:ee:a3:93:fe:e2:d1:c5:89:38:
bb:2c:24:ee:4c:4a:32:14:2f:cf:9a:ee:f7:91:3e:40:67:62:
49:b3:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:24:47 2025 by rpki-client