Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: yz6ufIOP6L/Td3S/+EQ2OcAxGqThurK/CRtuwUk6GOw=
Subject key identifier: 3E:BC:D6:76:F3:71:64:8E:FD:59:B9:9C:CD:FD:58:A4:F6:B4:39:4C
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 0196729DBAF511F3228CD50811BC550A3A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 121B
Signing time: Sat 26 Apr 2025 15:01:01 +0000
Manifest this update: Sat 26 Apr 2025 15:01:01 +0000
Manifest next update: Sun 27 Apr 2025 15:01:01 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: IqMY8rMnKeW4g1ydtIkFeJVmxz840RhdUTBv3BKbDB4=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:ba:f5:11:f3:22:8c:d5:08:11:bc:55:0a:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Apr 26 15:01:01 2025 GMT
Not After : Apr 27 15:01:01 2025 GMT
Subject: CN=3ebcd676f371648efd59b99ccdfd58a4f6b4394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:87:d3:d8:8c:22:e3:b8:0f:cb:d9:f2:3e:
6c:1b:00:46:95:8f:1d:4a:6b:28:84:cf:44:4d:79:
3b:cd:05:d9:ba:d9:1b:22:6f:a1:ba:98:78:7d:8d:
58:14:f1:86:49:bd:8a:25:b6:b5:92:50:19:af:75:
07:4d:fb:e7:26:53:5b:56:7c:b4:63:66:09:09:a5:
28:08:98:ec:b6:7d:08:7f:47:37:35:34:03:5c:59:
be:76:9b:c5:53:0d:9f:62:21:8b:27:6f:2f:18:6d:
55:87:04:14:73:7c:5b:5a:2f:4c:f5:65:2e:4f:6a:
c4:9a:d0:97:90:b3:f9:92:bc:dd:4e:98:ec:ad:4f:
56:12:68:3b:e4:f3:f1:93:11:0b:24:17:4b:87:4c:
94:35:1a:af:d6:99:85:45:80:5e:69:23:1f:3c:61:
ad:df:c6:ed:56:c4:8f:0b:d6:93:53:97:f6:6e:e7:
b2:89:f4:94:96:a4:05:0d:8d:73:59:50:f9:45:f9:
47:2b:21:06:3b:9b:d2:72:28:7c:17:76:e2:e0:36:
7a:c3:89:5b:f6:b9:89:7a:da:8c:b2:51:43:c1:d8:
b4:14:aa:fd:69:3a:07:55:15:04:41:9e:58:a2:32:
3c:73:38:44:66:20:f1:ac:b3:0e:b2:ec:e1:f7:8b:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:D6:76:F3:71:64:8E:FD:59:B9:9C:CD:FD:58:A4:F6:B4:39:4C
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:07:50:80:8b:3f:30:c0:31:5e:42:de:fb:a6:43:f9:1d:d3:
c8:62:19:9e:27:9e:f4:66:f7:ff:d4:98:01:1f:03:6e:ad:c4:
d2:5a:7f:02:7a:2b:3e:49:be:dc:e3:70:44:83:d5:5a:b1:16:
67:d0:b7:07:ea:4d:46:ac:83:27:ba:30:cd:b8:03:13:56:41:
54:bf:37:bb:7f:8c:31:4d:f9:60:63:cb:01:47:00:11:ac:57:
05:79:e6:f3:db:54:cf:e2:89:9a:26:27:05:68:65:4d:02:1c:
87:6f:08:e6:c7:e8:9f:e8:ad:ba:8d:00:44:e7:a5:c2:93:04:
ba:fe:fa:1a:0b:75:4c:89:00:85:f7:08:5d:5b:a8:f4:7a:e3:
5f:a0:18:52:d7:c3:6f:8f:78:c4:54:62:e1:29:05:9c:fa:bc:
3a:e5:02:13:15:e9:ac:62:71:46:6e:3c:2d:92:47:bc:7a:c5:
30:ff:aa:49:25:c7:71:d5:6e:bd:38:9f:af:3a:16:6a:24:cb:
c4:7d:73:cb:67:76:fd:cb:eb:b0:a9:dd:b7:98:de:8e:7f:1d:
80:ee:e2:85:f1:88:4b:44:0f:45:e5:53:c5:bb:14:b3:bb:5b:
56:43:64:fb:78:61:55:58:2a:a6:fe:bc:c0:55:e8:6c:d8:3a:
1b:df:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:44:06 2025 by rpki-client