Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: BOeX+qn6uu6T/N70d6SGVtuQ1Fg3BjxvmFyxIpIY6Ts=
Subject key identifier: DD:26:86:0A:8C:0A:AA:42:EB:8C:41:A8:3E:98:C1:62:75:6E:BC:87
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019675D5744CF1BB32EF3A61DB18C3FA2BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0BB8
Signing time: Sun 27 Apr 2025 06:00:45 +0000
Manifest this update: Sun 27 Apr 2025 06:00:45 +0000
Manifest next update: Mon 28 Apr 2025 06:00:45 +0000
Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: /HHRi9TchuYAC23wp9BDcEsKS/OtSlyz0xyNI5dCZmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:74:4c:f1:bb:32:ef:3a:61:db:18:c3:fa:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Apr 27 06:00:45 2025 GMT
Not After : Apr 28 06:00:45 2025 GMT
Subject: CN=dd26860a8c0aaa42eb8c41a83e98c162756ebc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:32:bc:08:9b:a7:d2:83:92:93:79:b0:16:
d2:83:a5:41:a5:94:4f:58:a3:40:be:5f:69:05:c6:
23:3a:a9:29:87:77:c0:0d:e3:e1:7d:7f:c7:b4:6f:
91:32:e2:86:53:9a:6a:c7:94:27:e0:50:55:c6:95:
0a:34:7b:4c:10:c7:9a:48:00:d6:c6:9b:cd:e9:bc:
6d:c6:0f:d0:d4:f4:7f:ff:aa:3c:99:6e:bd:57:ef:
d7:4d:77:fb:09:d4:10:05:cf:a2:70:f2:46:d9:f5:
ac:2e:fe:64:60:fc:0f:dc:f3:96:b7:cd:37:46:62:
8d:cc:4c:0c:14:c7:fb:12:99:c4:8c:72:9b:0d:dc:
79:a2:c5:a8:53:4c:5a:15:45:dc:2c:84:76:30:b3:
10:e8:0f:87:c6:99:50:5c:d9:60:52:80:0b:1e:3e:
1b:39:3a:0f:d5:e3:73:fa:84:80:49:de:72:2f:bd:
b8:63:38:7e:91:ff:f9:b0:f4:09:9c:2f:0f:f5:46:
60:24:be:87:2c:19:2d:df:6f:25:f6:4a:3a:15:8e:
28:db:5f:d6:4e:4f:9d:19:96:99:8a:2d:4b:f5:c1:
a6:47:3e:2a:1b:ec:84:46:99:93:29:fe:da:77:58:
43:f4:6a:f4:05:a2:eb:2d:5a:dc:5f:7c:19:d9:92:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:86:0A:8C:0A:AA:42:EB:8C:41:A8:3E:98:C1:62:75:6E:BC:87
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:40:57:dc:a4:15:0d:45:f5:3e:b9:db:0e:87:5b:14:0c:
e6:35:28:5d:8d:53:4d:58:97:e9:f6:2f:44:77:d9:7b:7b:88:
a2:3d:09:64:e8:a1:a6:40:49:74:10:d1:22:15:69:f8:51:11:
13:30:f9:a9:ef:a6:69:9d:1a:09:a1:b5:58:cb:4f:96:f5:79:
47:48:ec:4f:f4:7a:d2:1b:73:ff:e5:52:2e:8f:1b:78:15:c7:
05:7e:aa:7c:26:99:13:40:df:54:d3:d0:90:c3:6f:5b:b7:85:
d5:a4:6c:c5:b6:1a:16:c9:45:b2:10:aa:3a:19:29:d1:79:9b:
13:01:86:4f:ef:5a:23:8f:8e:91:7f:24:11:53:9d:04:8d:89:
b0:32:cd:2b:d8:bb:0a:88:cc:06:53:f4:21:4a:95:72:c1:ad:
f2:6c:77:fa:d4:29:70:8b:c6:ca:3b:55:46:bd:53:e8:65:f0:
3b:c7:20:ea:3b:1c:66:83:1a:56:72:03:98:c6:91:e4:9b:ea:
aa:3f:9c:35:3c:64:53:c6:fe:1b:2e:57:17:8c:04:77:55:2f:
85:c6:f2:48:36:b2:af:e4:51:5d:db:08:97:ee:1f:d9:cc:c0:
3c:44:49:19:0c:bd:33:15:26:c3:88:1c:61:96:4f:b7:ab:e4:
2d:e5:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:30 2025 by rpki-client