Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: uSei+phWU++I3GrqQKsw/3XUd+jRmRYwuuNXK67hfRw=
Subject key identifier: BD:8E:1B:63:0B:27:F9:D6:74:8D:9F:35:35:10:19:B6:19:DD:11:B9
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 01967C454773523CEB00266A1249DE328701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 10D3
Signing time: Mon 28 Apr 2025 12:00:37 +0000
Manifest this update: Mon 28 Apr 2025 12:00:37 +0000
Manifest next update: Tue 29 Apr 2025 12:00:37 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: jCZ3HF1vWDvGdpmbq0yHW16WHASxZ2yg3oYku1qlf28=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:47:73:52:3c:eb:00:26:6a:12:49:de:32:87:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Apr 28 12:00:37 2025 GMT
Not After : Apr 29 12:00:37 2025 GMT
Subject: CN=bd8e1b630b27f9d6748d9f35351019b619dd11b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:0f:46:bd:a8:0e:1a:f8:17:43:ac:0a:f7:
ff:cb:9b:eb:71:f0:21:d4:55:4e:86:a5:f3:12:75:
bf:d2:da:50:21:a2:cc:ee:93:3d:7d:67:c0:25:9f:
12:9a:17:c5:84:45:ca:49:d6:df:88:67:55:d8:3c:
41:db:31:85:8b:7e:6f:f2:e4:c1:18:d7:c7:33:1a:
88:0b:d2:2d:9d:8e:ff:25:78:c4:5a:b8:d3:92:b5:
3a:57:a5:84:f7:db:3c:6a:76:6e:b3:26:99:a1:14:
bf:d0:43:5a:49:21:19:29:eb:9e:b1:4e:56:11:70:
bb:72:fc:2c:1f:f8:50:ba:a4:5e:3f:e6:62:88:3a:
4a:3f:a3:af:4a:3a:08:68:f4:12:ea:21:37:42:2d:
c7:03:a6:a3:48:79:91:55:9a:cd:72:c0:ed:d4:83:
df:66:ea:0e:d2:97:31:50:45:f5:a0:d7:96:a8:5b:
d7:35:2d:24:a7:8d:e8:f8:58:7c:7a:cb:3c:30:b1:
1a:29:32:7c:26:3b:fe:16:27:60:43:4c:7f:3f:bc:
97:5c:61:a7:1e:0a:49:4e:60:cf:48:47:bc:98:d4:
85:66:f0:d3:76:80:50:b6:21:bc:25:22:57:e7:e8:
4c:73:9f:a7:0f:b1:ca:68:d1:26:e1:d6:9c:0e:79:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:1B:63:0B:27:F9:D6:74:8D:9F:35:35:10:19:B6:19:DD:11:B9
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:56:5b:f4:b6:6d:66:b1:dd:55:bf:15:8e:8d:f5:07:6b:c1:
7a:65:bd:d2:ee:4a:77:98:1c:96:45:d1:ef:2b:46:bc:07:e2:
7b:fd:0b:6c:9e:5a:0c:f0:95:a7:c6:eb:9e:fd:c6:7b:6a:f4:
a0:25:09:ca:27:71:6c:f7:5c:0b:3f:c2:21:79:0c:56:99:fe:
eb:ea:fb:cb:00:54:32:c5:b4:cb:00:b1:3d:eb:7e:dd:96:dc:
92:3e:8e:ad:b9:97:65:0d:d3:ab:ca:a6:2b:fa:e7:68:62:46:
d1:c4:6b:7e:df:30:65:a9:9f:c5:26:3a:0a:0e:a0:8d:cf:c8:
40:81:66:65:33:5c:f5:ae:8b:0d:2f:ac:e4:32:21:62:2b:e5:
d4:b2:96:cf:6f:7f:11:18:b0:12:77:a6:f4:e1:66:35:9c:0e:
6e:c4:e7:68:ae:63:4b:65:23:6a:fb:2d:62:59:a8:3b:cb:48:
ca:18:22:5c:b7:f7:f0:70:02:55:fd:61:8d:68:73:f1:ba:91:
dc:79:22:e5:d5:36:de:a5:85:a1:fa:71:4b:30:d7:40:ee:bd:
52:3a:38:83:47:04:f7:53:d0:1f:d4:ff:4d:bf:3a:38:ea:cb:
14:49:3b:cf:6e:68:ee:e7:49:a4:42:3f:7c:ae:d1:5a:c8:53:
8a:38:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:03 2025 by rpki-client