Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: cP39GsBcA09SwCnDEWZvLE1xJPuXN23Z8CNWmkb0/ZI=
Subject key identifier: 3B:E8:C2:B0:6A:F8:5E:ED:B2:EC:97:A5:10:F3:52:94:05:C5:30:40
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0196865AB5B122E2EAEC10010197D1334D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1547
Signing time: Wed 30 Apr 2025 11:00:13 +0000
Manifest this update: Wed 30 Apr 2025 11:00:13 +0000
Manifest next update: Thu 01 May 2025 11:00:13 +0000
Files and hashes: 1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: PBb8ot36U7pXUg9s/c/1HlEue7AWvcOTNIcKo9QWgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:b5:b1:22:e2:ea:ec:10:01:01:97:d1:33:4d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Apr 30 11:00:13 2025 GMT
Not After : May 1 11:00:13 2025 GMT
Subject: CN=3be8c2b06af85eedb2ec97a510f3529405c53040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:f2:5f:60:a4:a3:9a:2f:3a:68:c3:2c:bf:
1c:65:99:12:d3:e6:cb:72:09:85:ba:59:2a:9e:20:
e0:6c:8b:a6:85:9c:13:13:a8:14:a7:b4:fb:d2:9c:
e5:82:71:54:96:18:ac:70:06:4f:ed:c9:b2:e4:1f:
81:14:98:a8:b5:a1:89:44:3c:19:59:77:33:10:4d:
2e:2d:a0:b5:52:dc:19:70:b5:1a:46:2d:34:d5:c3:
e2:f7:4b:56:ee:ef:d2:0a:0a:40:a7:40:18:42:db:
58:e8:07:31:46:f1:57:bb:2b:2c:a7:f1:24:83:77:
0d:f1:aa:a5:00:44:e2:41:ab:8d:bf:ad:ca:4d:ed:
17:c1:60:4c:5d:de:ae:9f:76:0f:31:0c:29:de:2e:
70:0b:e9:a2:e3:e3:7d:5e:ca:e5:3d:d9:db:c3:8f:
a5:20:29:7c:fd:d3:88:d6:6f:c2:93:39:4b:f8:c8:
5b:e3:ff:16:1d:a2:77:95:cf:7e:a2:c3:72:b8:7b:
54:2a:f3:20:81:cf:72:3b:69:d2:38:8e:58:8e:7a:
54:ea:ae:c5:e7:0e:51:36:e0:1f:17:c5:a7:05:6b:
c6:d8:8c:d4:6a:bf:f7:f3:22:6d:ce:2c:85:3d:dd:
9d:8a:94:be:ac:64:05:da:54:6f:4f:14:53:fe:49:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:C2:B0:6A:F8:5E:ED:B2:EC:97:A5:10:F3:52:94:05:C5:30:40
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a9:d8:97:b2:4b:7f:c1:d5:70:77:ea:8b:0f:a5:b9:97:08:
82:52:61:f5:32:dc:e2:20:bd:ca:d0:95:c4:f5:48:5d:d8:ce:
c7:d4:f9:da:a3:f4:51:fb:ed:54:e9:cf:16:92:c8:10:14:60:
58:52:4b:11:36:cd:fb:97:91:b0:4a:8d:0f:49:83:fa:1f:b2:
db:72:7c:3f:7f:1f:02:6c:3c:d4:5e:f8:a3:92:a9:aa:be:90:
93:ce:23:4b:f8:41:de:92:99:c5:5a:39:90:60:b1:aa:d5:c1:
d3:c3:3e:8e:40:2e:86:83:ce:60:24:17:ce:39:01:81:60:86:
cf:00:bf:0d:73:c5:e9:3c:e5:c4:a8:dd:50:7d:73:d7:bb:90:
03:23:8f:a2:af:d5:77:21:c2:fe:ed:16:e7:6e:a1:21:d9:47:
07:e2:10:1e:38:46:74:ca:63:5c:41:07:cc:d2:d6:1a:90:48:
01:be:4b:6f:c7:24:da:03:d9:38:34:95:5c:e9:5c:cc:4b:9e:
43:53:c5:39:d7:75:fd:47:da:99:1b:2d:d4:1c:49:98:57:ab:
e3:7f:10:3d:77:f0:02:9a:8c:bd:8e:51:0e:d6:93:4b:dc:fe:
c5:b4:17:be:ad:e5:2c:f1:61:cf:fd:21:8c:71:1c:8e:bc:1e:
5c:e0:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:51:51 2025 by rpki-client