Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: SIcfZLDqIVlM/sKBkHwKrTUTKbezczMbwk9U+VAItiA=
Subject key identifier: E5:34:6F:1B:56:D9:09:C1:9F:9B:28:F6:5D:A9:4F:A9:48:49:36:45
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 01967530AFD75DB85D79BF98BD5FE88E1C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0D0B
Signing time: Sun 27 Apr 2025 03:00:46 +0000
Manifest this update: Sun 27 Apr 2025 03:00:46 +0000
Manifest next update: Mon 28 Apr 2025 03:00:46 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: KrbQK7+suMaDAIxiTvpYppaC0gLjXAHv3RSfSy3ecv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:af:d7:5d:b8:5d:79:bf:98:bd:5f:e8:8e:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Apr 27 03:00:46 2025 GMT
Not After : Apr 28 03:00:46 2025 GMT
Subject: CN=e5346f1b56d909c19f9b28f65da94fa948493645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:27:fd:af:6f:40:9a:21:ec:91:b4:58:fa:
c6:c7:cc:6a:ff:ae:20:f1:ca:8a:97:32:ef:3d:6e:
5c:b5:41:9f:5e:72:47:9a:b3:ca:74:39:d1:44:a4:
a9:87:d4:16:9b:e7:06:a4:cb:13:37:8a:14:43:4a:
cb:a2:e6:d0:58:07:de:ff:75:d0:22:5e:d1:d4:2d:
d6:a7:fd:5d:d4:27:d3:50:85:b8:1d:5b:e6:7d:49:
96:98:b4:88:f4:b5:7d:fa:2e:07:80:45:78:a6:9e:
75:0b:06:cc:63:b5:7e:04:b8:7c:5d:c8:d4:8a:78:
29:a9:ae:93:43:f2:f9:5e:d9:f1:9a:79:5e:13:17:
b2:8f:33:82:ab:37:69:f6:58:f3:93:ef:ec:d4:5d:
1d:88:e8:87:f5:1c:76:68:cf:e1:38:a4:78:5c:dd:
64:44:ff:67:bd:02:19:e0:1f:ef:78:a4:8e:95:1a:
6c:16:6d:78:1b:24:57:9f:cd:6a:3c:06:ec:4b:b8:
ec:7b:d7:a6:11:d7:11:aa:71:9e:fd:c1:ae:77:5b:
6c:2b:30:af:35:09:53:4d:08:d0:42:59:3a:87:7c:
8f:b0:7b:ca:0d:6c:78:72:36:ca:7d:4d:a9:fb:6d:
cc:62:26:22:be:6a:1b:4a:6b:b6:89:0e:85:d7:33:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:6F:1B:56:D9:09:C1:9F:9B:28:F6:5D:A9:4F:A9:48:49:36:45
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d2:9e:15:07:6b:f1:b8:96:77:1c:22:a9:84:e0:6b:9c:17:
16:29:cb:4d:dd:bc:33:30:eb:8b:c3:9f:f2:00:b2:85:e7:c1:
78:fe:39:a2:f6:97:8e:f3:a8:0a:60:8a:86:f4:44:89:e8:a2:
f4:bd:f3:b1:76:cb:e5:75:ae:ff:ae:7b:e3:5c:00:94:2f:e8:
5b:d0:ea:9f:03:30:96:19:b3:0c:8d:12:ce:2e:17:07:b0:14:
29:cb:70:d4:30:ad:4a:fd:d9:4e:97:9c:05:e2:8b:ae:c2:99:
e1:71:ca:f7:d0:19:1e:7b:ce:f9:2c:01:01:80:15:25:8b:d7:
1b:c2:9b:0b:38:a8:4d:ad:49:db:4a:cb:00:f0:84:06:c0:1b:
bb:65:8a:e0:d1:a9:62:c4:1f:00:c0:cc:1c:11:19:bd:84:3e:
91:84:84:3e:39:bf:f7:72:77:80:a8:85:cf:2e:3b:ad:3c:fb:
e0:5c:8b:96:b1:c0:a0:40:c1:9d:69:f7:63:31:d4:4e:3d:cf:
c3:eb:b0:5d:8a:61:fa:4c:e1:71:d0:ea:6b:e6:f2:5b:f5:02:
b7:1e:db:67:aa:d7:0a:41:5d:9d:4a:25:c4:5a:d5:b2:a8:fb:
89:a5:d3:02:fb:2c:48:54:ec:e8:f4:29:70:33:73:22:f7:fa:
c3:f4:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:44 2025 by rpki-client