Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: 9DHWYOZwRU4/26Gx2JAEFbV5GF1OvkLWOJRvihwHbHY=
Subject key identifier: 85:C2:C2:32:69:AD:60:34:E8:9F:8E:D6:72:57:41:D4:E2:E4:F7:DB
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 0196789FAECFFAECE16714EFDDFEBED3A87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 14C9
Signing time: Sun 27 Apr 2025 19:00:52 +0000
Manifest this update: Sun 27 Apr 2025 19:00:52 +0000
Manifest next update: Mon 28 Apr 2025 19:00:52 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: Ogjl1IwxcY0INT0hoc3V-UZ1sHo.roa (hash: w0QqL1VQBTrf30Omc7SiLZ4gKL+da0byGUFGvs9DV9w=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: 6jQ5Q1aYfv+PNTmQkPfCQA9OKGFeJ5RkM/qekKSVW6I=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:ae:cf:fa:ec:e1:67:14:ef:dd:fe:be:d3:a8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Apr 27 19:00:52 2025 GMT
Not After : Apr 28 19:00:52 2025 GMT
Subject: CN=85c2c23269ad6034e89f8ed6725741d4e2e4f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:c7:76:f4:c0:4a:71:77:51:8e:37:26:85:
a7:71:65:eb:d0:4d:b5:04:a8:29:e7:71:5b:da:12:
76:52:51:76:66:76:1b:9b:46:38:75:45:c8:ec:1d:
fe:1d:e4:df:38:10:69:21:58:0b:b7:09:1e:5f:eb:
c2:5b:15:e0:db:a7:36:62:b8:38:df:ce:8e:7d:99:
50:2a:3f:2d:87:20:b1:3d:e8:9d:c2:36:b8:6c:5f:
5b:4d:eb:e4:e0:61:08:b5:e0:3b:04:f9:7f:7e:74:
5b:85:4a:4c:4c:5b:7a:8d:4b:de:3c:1e:27:64:b4:
21:b0:b6:d4:83:d8:7a:46:7d:e8:40:01:de:0a:42:
2c:4a:c6:95:15:18:7f:3c:ae:2a:d8:6f:d2:92:60:
e6:51:e3:45:77:79:03:47:8a:f5:2c:25:7a:87:1c:
85:8c:e6:d5:30:68:de:18:88:c6:0c:fa:e4:57:0e:
e6:76:d7:4e:3a:60:10:d1:92:c6:a2:2f:a4:83:88:
5a:6f:b0:49:3c:65:24:44:e4:a7:ef:93:b3:12:6a:
ac:be:11:58:3b:73:e0:11:82:2a:a7:df:50:b9:5e:
70:ce:f4:f5:42:4a:c6:e3:46:c3:22:75:14:49:86:
c5:ad:d4:3f:37:e4:69:f3:dc:b7:04:7f:87:99:6a:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C2:C2:32:69:AD:60:34:E8:9F:8E:D6:72:57:41:D4:E2:E4:F7:DB
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:09:61:6e:28:d5:c8:9f:f9:ae:85:28:1e:d1:96:24:79:93:
87:d6:8f:11:2c:64:7b:13:35:7f:11:57:72:e9:ec:58:8f:b7:
4a:6a:5d:cf:d7:d8:29:3c:f3:64:61:1d:fd:9c:ad:41:c6:0a:
85:0b:fe:0b:74:fc:a5:af:78:20:db:d6:af:54:be:41:ac:2a:
bc:86:0e:44:16:49:c9:51:ba:ef:76:cc:4b:d7:35:4a:35:8a:
e9:72:1f:2b:42:fc:91:a1:5f:6f:91:79:f5:f4:12:76:59:f0:
0a:bb:e4:7f:ed:11:76:c1:6a:61:d1:15:dc:f9:3a:41:c2:16:
15:a7:f1:15:e0:3e:72:a4:22:7e:80:52:ae:36:82:5f:71:a6:
1b:1a:a1:08:ea:5d:fd:da:f8:bd:76:6a:64:49:fc:3f:71:48:
9a:cb:4d:48:35:b6:aa:fd:6d:3a:27:d5:6e:47:1c:18:18:21:
2e:2b:97:fb:e3:da:d1:de:41:d9:cd:58:f1:62:2d:e7:40:f4:
16:d7:ea:27:65:16:0d:66:c8:91:8f:71:70:12:47:88:0b:31:
1a:6f:2b:5b:cb:83:21:a8:4a:a3:88:3a:a5:8d:da:1b:f3:5c:
54:ef:f2:8a:fe:47:78:26:6b:d2:3f:22:16:1c:44:6f:7b:9f:
83:9a:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:17 2025 by rpki-client