Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: J6W+G9Gjs9XWgmyyaLzj8UyMWmR0t3oF8TgiLKYhNCc=
Subject key identifier: F9:09:46:9C:D8:19:35:EC:F8:28:FD:BF:07:2E:1D:14:40:F4:1D:7E
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 0196914C6CBFA6F87C91220B4E38DA281A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 14:00:26 +0000
Manifest this update: Fri 02 May 2025 14:00:26 +0000
Manifest next update: Sat 03 May 2025 14:00:26 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: PeTEo7WDf391/uUruSCOKN6i+dX7UTVZGCwc5zsgF/s=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:6c:bf:a6:f8:7c:91:22:0b:4e:38:da:28:1a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: May 2 14:00:26 2025 GMT
Not After : May 3 14:00:26 2025 GMT
Subject: CN=f909469cd81935ecf828fdbf072e1d1440f41d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:17:b1:c2:b2:69:0d:77:ca:c1:25:5f:13:
ae:92:85:0c:4c:2c:59:53:3f:d9:a6:b0:02:57:64:
c3:59:6e:22:f4:db:e7:df:8c:a4:41:89:4a:28:0b:
12:91:69:7c:f4:6e:b7:0e:06:5e:93:db:a7:0d:a8:
44:da:05:06:7d:d9:eb:fc:8a:7b:87:07:8c:bf:0a:
27:85:79:dd:f2:ee:42:b8:8d:77:d2:ea:6e:81:4f:
78:fa:22:34:9f:70:ce:02:52:aa:95:b6:37:a9:18:
f9:81:0a:28:62:2d:a0:bd:fc:58:a8:cd:27:88:80:
41:7e:cd:eb:24:72:95:36:67:ee:09:a5:db:f1:88:
ea:3f:0a:74:7b:27:aa:8d:14:a9:5c:50:69:ab:aa:
c9:79:68:ca:62:dd:6d:83:15:4e:8f:f3:4c:ce:e5:
23:fe:75:b0:77:32:6a:be:a9:75:7d:d7:85:38:e4:
c1:ae:ea:17:53:45:ee:aa:41:c8:d3:78:f6:5a:ed:
89:7e:99:d8:22:db:1b:a8:07:ec:a6:03:6c:06:49:
1f:47:fc:89:dc:85:7f:aa:71:44:51:7b:3b:be:58:
55:0b:00:4c:77:08:2b:e4:25:68:81:46:3e:78:5c:
3b:10:96:f4:4b:41:ce:eb:46:72:1e:b3:7f:36:2b:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:46:9C:D8:19:35:EC:F8:28:FD:BF:07:2E:1D:14:40:F4:1D:7E
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:84:c9:dc:63:0c:2e:ed:5d:2f:ad:bf:8a:ac:22:eb:08:9c:
8d:fc:4d:07:9e:15:55:13:8a:d5:0b:9d:7f:f9:8b:49:09:87:
ed:6a:67:07:83:9b:5f:05:f6:ec:39:9f:25:1e:4f:f2:16:dc:
80:38:c6:d3:14:5d:5a:91:4c:db:cf:9f:b7:12:59:06:33:63:
ca:98:1a:be:8b:16:b2:e3:a3:f6:23:f3:37:33:a6:a8:bf:35:
75:d6:4c:b1:53:d7:1c:31:06:ee:85:a4:7f:3d:77:23:b7:11:
78:14:37:a1:bb:98:39:49:df:6d:a5:31:04:26:db:3c:e0:11:
f9:f2:10:f0:77:f5:12:1e:d5:24:c6:d7:85:07:d9:f7:bb:26:
48:cc:c6:bd:8c:cc:bd:40:34:bd:ad:26:9d:cb:34:6d:41:b6:
88:42:76:4a:71:12:57:4c:87:f1:23:fb:91:44:f4:c4:10:24:
07:87:ea:24:cf:b3:92:eb:d9:54:6a:23:9d:e2:b3:1e:d5:b8:
a7:14:b5:4b:d5:3a:23:1b:d2:df:ef:4b:e0:45:63:bf:f3:13:
08:27:2b:db:32:f9:1c:12:92:80:5c:10:4d:31:e5:43:db:84:
aa:92:ed:4c:38:e6:54:66:f0:55:f1:96:b9:09:2c:73:37:9f:
27:f7:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:50:11 2025 by rpki-client