Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: 4ylv3gJJMPKoI+8Qo1w1Zl5JNFc2qwAvf0IlO7QuT+8=
Subject key identifier: A8:D4:2F:13:AF:6F:F7:66:7D:47:F7:D6:9E:6F:83:2C:C7:7F:CF:AC
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019671C1B5E142BDE6FBC1BBB33FDC275C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 040A
Signing time: Sat 26 Apr 2025 11:00:42 +0000
Manifest this update: Sat 26 Apr 2025 11:00:42 +0000
Manifest next update: Sun 27 Apr 2025 11:00:42 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: MA9MosmS8LG108kxxJIhmHzevfdmJuGN6xYKatucaR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:b5:e1:42:bd:e6:fb:c1:bb:b3:3f:dc:27:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Apr 26 11:00:42 2025 GMT
Not After : Apr 27 11:00:42 2025 GMT
Subject: CN=a8d42f13af6ff7667d47f7d69e6f832cc77fcfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:c4:63:fb:6c:0a:5c:6b:31:68:16:47:6b:
25:7f:36:96:8d:9b:56:d0:1e:f8:3f:6f:eb:10:6e:
fb:71:84:8e:17:b0:77:d0:8a:25:e8:fb:0a:49:44:
bc:65:e9:00:56:da:68:ec:e8:2e:82:bb:78:84:19:
0a:90:0e:3f:62:a9:51:a1:88:ac:1f:e5:9a:67:79:
b1:80:53:96:64:f1:71:33:76:e6:e0:33:41:6d:6f:
27:1c:c2:fc:44:fe:0c:44:04:aa:6d:52:3e:40:41:
ac:30:76:2a:1e:65:79:38:c9:72:56:32:fe:ad:5d:
87:08:18:cb:c8:96:5f:10:b0:c0:f6:4e:4c:b2:8d:
54:15:fd:b0:9a:62:21:0e:19:28:08:b9:e8:80:f8:
56:5e:b6:e9:e1:90:ce:d7:dd:ed:14:2d:cb:cd:ed:
a2:6c:ed:b0:e6:de:dc:81:27:03:26:e3:86:1c:f3:
f1:f6:2e:38:c4:d8:ad:89:7c:a6:f5:14:46:48:3b:
1f:da:5a:2d:f0:c9:c2:53:af:75:5d:15:de:f0:7b:
c2:d9:7b:f6:5e:67:81:d6:85:35:94:23:30:36:6b:
61:32:31:5f:b3:9a:38:dc:36:bb:e4:7c:0f:df:e3:
eb:af:e2:1c:0f:fa:97:e9:73:c5:42:7f:97:63:b6:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:2F:13:AF:6F:F7:66:7D:47:F7:D6:9E:6F:83:2C:C7:7F:CF:AC
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9d:8b:ae:ff:2b:3d:9a:9e:9c:36:e7:e4:e2:e4:ca:8f:3b:
21:0c:b3:7e:f4:ef:2e:6c:d6:50:20:49:fd:b3:68:ab:a2:20:
b7:09:5f:3c:04:0e:a0:7e:7b:55:dc:31:a7:d7:0b:a8:36:5f:
2e:f8:b7:70:c9:ad:b2:4b:09:3d:07:43:3f:0a:18:26:10:ec:
70:4f:57:90:6b:87:e7:49:1e:d4:7a:1f:0e:7f:bb:18:40:63:
0a:75:af:4b:9a:8f:11:6e:21:3e:5e:58:2a:1a:54:a1:de:4e:
d8:52:5b:fe:0b:d1:8f:79:b7:c5:45:aa:fd:1f:26:2c:e0:f4:
e3:ba:74:b2:bd:f1:fa:a1:d8:ff:af:86:c3:9f:b0:ae:91:d3:
0f:60:3b:79:08:84:09:5b:f9:cb:54:12:8e:1c:8e:48:41:ff:
44:98:ce:a4:2a:71:89:44:7d:22:2b:c9:71:95:4e:47:0c:da:
21:b4:93:80:bf:7c:bd:38:4f:24:a3:06:4a:32:5a:53:d8:09:
3e:19:1b:c9:a8:23:12:5e:15:39:c2:d8:93:be:10:41:92:39:
e9:b5:1b:1f:e7:22:93:84:53:a0:e3:b7:85:ec:df:40:d2:19:
1c:c0:3e:03:5d:7b:59:e6:a5:8c:86:29:a5:00:55:09:2d:1b:
fa:56:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:57 2025 by rpki-client