Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
File: g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json)
Hash identifier: lnGfmaaDjsKWochEAUUedhy7WQUDTp8urCMswC44slU=
Subject key identifier: D4:67:7E:1A:99:3B:40:14:E3:36:E8:69:7B:CA:F6:64:9C:6C:F8:FC
Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
Certificate issuer: /CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Certificate serial: 01967DC5A64EB474456934CFDAAE128119B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
Manifest number: 047C
Signing time: Mon 28 Apr 2025 19:00:27 +0000
Manifest this update: Mon 28 Apr 2025 19:00:27 +0000
Manifest next update: Tue 29 Apr 2025 19:00:27 +0000
Files and hashes: 1: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: L3rKRS9sjRgdoE+Jyb9+I6nUDMddg0jIo2TF2alU9sw=)
2: i_7sQOqEUBCfUKXhCQozAQCgyio.roa (hash: xzt+AxE4W+DPtsBUDajL0GS1rN6Mde5JKYoD1qrRxjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:a6:4e:b4:74:45:69:34:cf:da:ae:12:81:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Validity
Not Before: Apr 28 19:00:27 2025 GMT
Not After : Apr 29 19:00:27 2025 GMT
Subject: CN=d4677e1a993b4014e336e8697bcaf6649c6cf8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:90:4d:c3:50:2d:35:99:b0:27:f2:b6:1f:
b2:af:e2:a0:c0:fc:09:d7:1d:12:32:c3:04:5e:c1:
84:14:73:78:66:b0:65:63:78:97:fa:a0:ec:82:a7:
ff:8d:1e:bb:0a:5b:a2:aa:57:52:e4:01:55:f7:2b:
7f:5b:94:d5:91:90:a3:97:dd:f4:99:29:d2:e8:77:
dc:07:26:4c:a8:6a:2f:63:a0:2e:81:2b:68:f4:34:
a9:77:13:78:6e:e7:b5:1a:5c:62:29:8a:74:0e:ec:
0a:22:5c:ec:6e:43:ac:bc:cd:cd:89:f3:ad:a7:d1:
7e:ba:0f:b4:c2:b5:8d:1b:4e:d5:98:af:d1:ed:2f:
30:ab:ac:ce:37:09:db:31:d0:63:4e:a4:61:70:46:
a3:22:74:4f:69:1e:e3:b7:d8:51:04:86:cd:6c:3d:
5e:9c:86:6a:88:c5:54:55:b7:85:59:8a:73:5d:2b:
61:c1:08:9d:56:67:74:cf:21:b6:32:d2:66:27:4f:
0d:18:c3:bd:ec:97:ab:f4:2b:78:da:42:72:0a:96:
6f:00:2d:35:ad:3c:da:3e:13:5b:18:3e:8d:17:91:
c0:cb:09:3f:1e:aa:7e:cb:2a:e9:ba:53:24:f1:70:
1c:05:c5:18:e3:f3:ca:c2:97:83:25:6d:80:7c:11:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:7E:1A:99:3B:40:14:E3:36:E8:69:7B:CA:F6:64:9C:6C:F8:FC
X509v3 Authority Key Identifier:
keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:98:72:ef:24:1f:8a:19:27:65:11:31:5c:36:c3:76:b7:
b7:98:8e:23:5e:6b:f5:03:f6:36:7e:40:e8:bf:b0:78:49:e9:
d0:84:c5:43:ef:f2:d8:99:37:c3:4a:b6:bc:c9:57:7c:13:ab:
6c:0b:8a:12:d2:4b:30:6f:41:1c:c7:93:15:13:dc:de:4d:52:
cc:59:54:8e:a5:58:4c:f3:43:14:47:a3:d9:e9:fb:2f:fc:46:
b2:94:7c:6c:86:54:fa:19:87:a9:db:7c:a5:0d:27:22:b2:3e:
1f:5e:7f:be:91:29:36:94:cd:46:82:ba:aa:85:f8:15:ae:f0:
24:bb:23:77:bc:61:50:e6:82:83:2d:02:ce:2c:17:e6:cf:86:
a7:e2:85:b1:90:14:a5:29:98:5f:ef:0e:18:d1:08:fa:b6:c3:
0f:e2:18:23:e5:4e:42:76:90:04:f9:2c:16:8f:eb:0c:7c:42:
c5:8c:c1:47:e2:12:c8:71:87:92:06:3e:a6:aa:ca:38:ea:b0:
13:59:62:f7:d6:c1:59:87:bd:0b:0c:3f:4d:e0:4c:fd:f7:1d:
73:d8:34:4f:2e:50:e4:75:35:2e:ce:d6:1a:c8:8d:b4:d4:56:
cb:6e:1d:fb:5f:25:59:61:90:8f:2f:ed:28:13:1a:f0:e5:62:
d1:f7:b9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:09:40 2025 by rpki-client