Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: Hw2zYN5NUP9Jm5uXOx2u5oHRuyJ4Ti+V2ePBtMoLv+o=
Subject key identifier: F0:B0:AC:F9:22:86:7E:06:70:06:34:77:10:BB:8B:34:A1:73:DD:58
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 01967FEB3C4BD50FC2CE2949338D64E5318D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1035
Signing time: Tue 29 Apr 2025 05:00:44 +0000
Manifest this update: Tue 29 Apr 2025 05:00:44 +0000
Manifest next update: Wed 30 Apr 2025 05:00:44 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: qhJSmn8o0BzgrydZwL5I9IXPX3MqXPK2Q51qK57yUcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:3c:4b:d5:0f:c2:ce:29:49:33:8d:64:e5:31:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Apr 29 05:00:44 2025 GMT
Not After : Apr 30 05:00:44 2025 GMT
Subject: CN=f0b0acf922867e067006347710bb8b34a173dd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:2e:d6:6c:3e:05:90:a9:1c:72:33:c9:f9:
7f:be:fc:a2:3b:03:e9:06:e7:5b:e2:05:25:77:0e:
0d:90:5d:19:a0:24:97:9a:1f:88:1a:e9:f3:49:bf:
dd:96:d5:86:7a:a2:51:f0:cf:4d:d3:a8:b1:41:4c:
7a:08:b1:f9:c1:69:98:d4:2b:a4:12:f6:68:ff:88:
85:ad:6a:d2:ce:9f:91:b1:10:ab:17:a2:1c:99:bc:
68:8f:23:98:0d:3d:95:4b:33:ff:0f:63:09:0c:4f:
39:f9:f0:e2:1a:71:fe:53:4e:78:a8:bd:89:d0:e5:
29:9b:79:2b:3e:e4:fb:60:de:da:a4:46:83:54:44:
39:a2:88:39:31:c7:fb:91:68:4f:8e:1a:fc:f8:2a:
3d:cd:e7:7a:cc:b9:47:66:f3:26:16:49:87:1e:6b:
14:8b:a1:0b:a5:62:fe:c9:65:c7:8f:13:9e:cf:da:
0e:04:0a:1c:60:c8:53:00:50:c4:de:d5:7d:57:f4:
95:fa:74:c2:a2:bd:66:43:9c:1b:eb:bf:b8:f0:e6:
3a:00:a7:23:f2:41:58:a2:aa:55:3a:bd:fd:86:66:
36:58:48:90:06:d7:f4:9e:01:c8:a9:f7:e8:97:f7:
9f:76:76:cc:ec:f0:59:91:7e:97:c4:ba:27:8c:12:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:AC:F9:22:86:7E:06:70:06:34:77:10:BB:8B:34:A1:73:DD:58
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ab:3b:3d:ff:72:6f:39:84:86:d6:bf:4e:45:55:3d:a9:a8:
c9:f0:84:d1:93:b2:8e:79:96:9a:9f:9d:f2:de:64:9b:14:54:
f9:ee:21:b3:8f:81:65:75:23:cb:88:b7:e9:04:37:59:35:99:
b5:63:95:e1:60:ad:c5:a6:a1:72:4f:bb:7f:35:bd:e9:b1:40:
f1:b7:eb:82:a1:d6:79:17:e8:ef:60:34:8d:72:19:65:93:7b:
ae:6e:6f:82:07:5a:33:a6:f4:23:6a:2e:6b:97:b0:92:8e:7a:
17:65:90:0d:9d:a2:f9:43:b3:9b:70:cc:30:d1:3c:c1:71:c0:
73:06:ac:a1:d4:86:2e:78:88:ce:30:14:8f:85:e5:e9:04:b0:
8d:f5:f6:c7:b5:87:ab:93:e7:d9:96:41:5d:e1:5a:e4:e9:9b:
22:e6:83:ee:73:df:d2:73:14:58:c2:ef:b9:5d:d4:76:a6:47:
ce:55:c6:d7:02:b6:85:ba:91:d7:2f:96:f3:12:08:bc:3d:a4:
ce:98:ca:bf:01:42:23:33:9f:7b:49:de:da:ed:a1:91:f3:4b:
13:f5:e1:9d:11:2d:19:7e:fc:43:5b:b3:88:a3:68:10:64:87:
63:e2:f2:9a:50:de:3e:dc:71:2e:cd:6a:67:9d:9f:b8:64:d9:
10:bf:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:35:26 2025 by rpki-client