Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: CvewsW4Ctc9PMzyBGeBqH/+g7OCRIobTtFXpGQnYqfM=
Subject key identifier: CA:72:22:2C:6B:8B:19:F9:F9:B9:5C:39:0C:08:A6:67:B2:00:11:17
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 01968849BA144F1601226F2F0C94F6C5E9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 20:00:55 +0000
Manifest this update: Wed 30 Apr 2025 20:00:55 +0000
Manifest next update: Thu 01 May 2025 20:00:55 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: y0EpAAImEn8ZTk22yQtsjBudROVItuXEtk+Mm8FFe0g=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:ba:14:4f:16:01:22:6f:2f:0c:94:f6:c5:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Apr 30 20:00:55 2025 GMT
Not After : May 1 20:00:55 2025 GMT
Subject: CN=ca72222c6b8b19f9f9b95c390c08a667b2001117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:e0:40:61:4c:0e:5c:b3:74:7e:8e:5b:31:
0b:dd:d5:7d:1e:c7:7b:07:60:f5:aa:fe:8f:2a:38:
e4:b5:6f:88:2a:2a:29:63:80:f3:22:d5:88:19:9c:
45:86:75:0b:9d:65:75:bc:a7:10:9a:c6:d1:f2:ef:
16:13:12:99:f4:96:46:dd:e5:95:52:80:31:80:e6:
bf:38:7d:7c:07:d5:51:91:57:2c:a7:87:c3:74:f5:
14:23:82:af:fd:68:c3:aa:18:82:39:21:f7:d8:ba:
93:92:3b:08:55:e2:f0:ce:5e:b8:c0:68:79:eb:f4:
34:5e:96:09:76:89:52:bc:d2:ad:90:75:b7:8b:03:
86:2a:a4:8f:5d:50:60:9b:5b:9d:d0:7c:02:89:29:
f0:84:c3:bb:6f:c3:cf:17:a1:4e:6c:eb:40:e2:fb:
c8:00:6d:71:42:f7:20:a8:10:4b:fb:60:81:b3:c3:
59:90:8d:71:ea:05:17:26:3c:a6:f9:de:8d:73:2c:
ab:35:6a:a2:f5:20:f4:c3:0d:70:9e:53:46:03:38:
37:56:ff:b4:73:f4:54:78:e8:f8:27:67:db:1c:11:
87:29:da:29:2a:c2:f2:3e:dd:9b:a2:cc:fc:af:54:
bc:25:3b:57:7e:03:a2:c5:d9:48:da:f3:9a:e0:a2:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:22:2C:6B:8B:19:F9:F9:B9:5C:39:0C:08:A6:67:B2:00:11:17
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:95:70:9d:09:cd:70:f4:3c:70:2c:34:8a:f5:47:18:f3:88:
56:ba:2b:b1:0c:12:ec:80:c9:27:14:67:7a:a6:49:9a:80:d7:
27:16:d7:a3:f0:3c:81:6e:ec:f4:cf:20:03:5d:42:ba:06:b3:
a9:24:01:17:fb:75:88:96:6d:06:6e:7f:43:32:19:f8:df:70:
bf:24:fe:dc:79:2d:25:14:63:24:39:3c:aa:c0:c1:d8:07:a7:
6a:24:45:4d:57:c8:d0:44:fb:a9:e7:c7:d6:45:f5:50:41:ab:
43:27:c9:d9:d6:67:9c:41:8a:50:4b:0b:bb:cd:88:83:28:9b:
79:de:71:73:28:6c:38:9d:64:07:eb:ef:8f:61:10:5f:f3:6d:
16:d6:c2:90:9e:21:14:08:e3:42:26:ce:ae:e5:ff:b0:50:eb:
eb:62:78:bd:f0:0a:f4:69:26:f1:d9:8f:50:b0:ce:f9:a0:39:
8f:f7:66:8e:4e:5d:70:92:b0:68:09:f4:19:66:4a:65:d7:4d:
5f:1a:fc:93:26:53:af:a4:f7:2d:45:e3:7f:5d:b8:c7:b3:43:
b7:e5:ae:15:41:32:d3:6f:9d:49:85:ec:aa:3a:6b:53:00:bf:
75:4b:74:42:5d:07:10:72:dc:d6:8d:b3:2f:19:a0:ce:74:07:
34:3e:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:21:11 2025 by rpki-client