Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: 3tmbI+mknYvocd47vJee6MAISYWezIhlfhAJDKexZtE=
Subject key identifier: C7:70:CE:C4:3E:C1:AD:6F:7D:F5:8D:14:B1:21:50:2F:8C:96:FB:35
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 01968247AF87FF9471250992629F24D3D5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 07B3
Signing time: Tue 29 Apr 2025 16:00:58 +0000
Manifest this update: Tue 29 Apr 2025 16:00:58 +0000
Manifest next update: Wed 30 Apr 2025 16:00:58 +0000
Files and hashes: 1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: ksY7WcbROlHAtleek5nG/PDDv/+L+ta40NmZsMvrby4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:af:87:ff:94:71:25:09:92:62:9f:24:d3:d5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Apr 29 16:00:58 2025 GMT
Not After : Apr 30 16:00:58 2025 GMT
Subject: CN=c770cec43ec1ad6f7df58d14b121502f8c96fb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:a8:f9:7f:e0:c3:c4:4a:02:70:76:81:83:
f3:c8:63:ec:58:39:e5:29:ac:5f:45:85:4b:be:57:
e2:ee:85:63:78:fb:b1:5e:a7:fe:ec:e1:8a:b9:56:
b2:87:27:8b:ab:b3:29:fa:ed:32:6a:ff:e2:eb:38:
e4:ed:90:f2:dd:7c:15:0c:6a:78:84:16:52:af:ff:
44:49:8d:23:34:2a:b0:bb:2f:9a:e8:95:a5:18:5c:
9e:14:53:aa:64:d3:c9:dd:22:f9:fa:76:47:fe:0a:
01:69:83:16:e0:10:13:2d:1d:f9:ba:ed:c0:44:7c:
11:85:fb:09:7b:a8:d7:ef:d6:44:3f:91:52:85:f0:
56:53:a1:d3:72:0f:98:7b:a3:d9:19:7c:d5:40:fa:
56:0e:7a:2a:91:0c:9c:c6:55:36:d6:6a:44:e3:dc:
5d:5b:41:56:8c:ac:f6:46:35:15:46:c6:6c:f5:0c:
1d:21:83:a6:bb:18:52:9f:85:0d:ca:f5:ba:1d:8c:
19:f5:b3:e4:fd:62:8c:94:4a:72:64:fa:e0:c4:68:
e0:d0:53:f0:bb:fc:d8:cc:1a:f7:db:86:c4:11:55:
ff:27:ee:e4:d7:0a:f5:81:48:ce:fc:0a:dd:c1:5f:
91:14:5f:15:64:bc:d9:51:7a:f3:35:c2:68:a9:2f:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:CE:C4:3E:C1:AD:6F:7D:F5:8D:14:B1:21:50:2F:8C:96:FB:35
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:b9:65:60:c7:1f:39:73:53:7d:fb:76:b9:13:29:f0:9f:
08:c7:18:0a:2a:3c:06:02:c4:f0:de:5b:80:7d:76:77:d6:92:
1a:cf:6a:6f:f4:d6:34:57:8a:6a:17:50:fa:fe:64:8d:95:56:
8b:7d:39:87:c7:b5:20:c4:d7:ba:d9:08:33:15:9a:71:44:ac:
46:88:11:60:f4:89:ba:33:f3:58:43:77:4b:67:f3:4f:86:fe:
71:d6:48:16:3f:e6:cc:7d:84:f6:13:09:c3:44:bd:9c:d2:cb:
2b:4e:f9:1a:5b:d5:04:ba:ec:1b:40:f4:7e:77:2d:a5:37:a2:
ca:68:95:95:5e:2f:1a:fd:c3:5d:81:0a:13:20:35:10:a6:a1:
21:2e:6d:77:cc:7e:ef:5f:01:80:09:f9:b2:fe:69:24:70:47:
b8:6d:23:92:7d:c9:59:ee:02:43:34:9d:1b:b0:ff:50:3a:b6:
aa:83:ff:6f:16:0f:cc:69:6f:e6:ab:bf:77:27:6b:86:07:12:
0f:e6:0b:4d:e1:68:d1:13:4d:c7:b2:e2:0a:57:b8:b7:80:0c:
a1:48:69:db:05:f5:91:dd:5a:75:67:49:4d:6b:ff:37:47:07:
fa:82:08:ac:86:d1:ca:91:37:88:96:0f:10:0f:d1:dd:06:d2:
fc:a4:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:51:06 2025 by rpki-client