Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: tU20HAxETonvwajrf9y+sC/d53mYWbudstrsDVR/ZDA=
Subject key identifier: AC:84:AF:60:5F:41:49:90:DA:10:12:C5:38:70:BD:58:A0:A9:F9:31
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01967FB4507E8B1D85A81EDE6A1C0E4A3FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 04:00:45 +0000
Manifest this update: Tue 29 Apr 2025 04:00:45 +0000
Manifest next update: Wed 30 Apr 2025 04:00:45 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: Q9orgaZ0S+dvXZHTT+yEGR2mxlPu/fq8rVnyensy7DE=)
2: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:50:7e:8b:1d:85:a8:1e:de:6a:1c:0e:4a:3f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Apr 29 04:00:45 2025 GMT
Not After : Apr 30 04:00:45 2025 GMT
Subject: CN=ac84af605f414990da1012c53870bd58a0a9f931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:e2:05:31:b0:b4:27:ad:e5:58:87:52:f6:
f0:cb:60:ee:aa:51:03:c9:d1:cc:23:2a:57:fc:a8:
6e:2f:5c:d5:b0:9c:61:ab:15:f2:55:e3:bb:5e:0c:
36:bd:c8:f9:4a:a8:22:a2:5f:f1:29:61:21:59:4e:
87:67:22:5e:27:f4:53:07:54:01:a1:6b:c8:9c:f4:
d5:4f:7b:5c:57:9d:52:6e:cc:2c:b4:4c:23:b7:3a:
77:05:e4:9f:ed:f0:0b:c7:b5:a3:ba:a3:e2:45:e6:
18:c7:f3:73:a4:bd:37:57:ed:ad:5c:f8:49:53:8c:
82:67:90:9e:2e:66:8d:8a:c6:77:75:78:24:a0:15:
ce:30:9d:e5:bf:d4:83:06:fe:ba:23:35:05:63:b1:
cb:2a:11:1e:fd:05:27:89:65:52:0b:2a:50:c2:b2:
a0:bb:90:5d:63:79:df:73:62:4c:ce:5a:ef:de:42:
8d:11:d8:2d:a2:10:80:cd:6a:ff:98:7e:f8:a5:8e:
b4:12:c8:65:4c:ae:80:d7:5f:a2:55:45:82:d6:f8:
1f:07:f2:5e:a3:eb:9e:18:72:ef:11:b6:a6:30:aa:
59:c4:60:bd:63:3f:2b:45:34:3f:b1:d9:b6:54:c5:
bb:cc:8c:27:b2:f0:0c:03:bb:6a:a5:84:27:62:42:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:84:AF:60:5F:41:49:90:DA:10:12:C5:38:70:BD:58:A0:A9:F9:31
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:a5:81:20:01:0a:da:1f:cd:ab:a6:ba:df:a7:99:4b:26:
66:42:3d:df:32:1e:3c:c7:52:cd:bc:88:e7:fa:56:3a:9f:44:
c3:68:d3:f5:ce:57:71:65:1a:32:c7:9c:cf:1d:f2:59:60:d2:
b2:ba:ed:80:3a:be:c2:33:bc:e3:ee:d5:38:75:29:cd:bd:4b:
44:26:c3:03:1c:3f:f5:93:b1:85:45:55:58:d8:57:42:34:55:
40:94:56:a3:f9:cc:ac:b3:82:2a:ad:66:58:ae:a6:11:74:98:
0e:75:17:f0:33:6b:c8:50:4f:86:a4:c9:4c:74:17:00:19:c7:
78:b7:15:ce:24:4d:a1:fe:74:f0:82:be:19:da:67:8e:5e:36:
79:cb:53:09:92:fb:53:23:f6:98:dc:55:17:08:0e:63:1b:70:
28:99:5a:8d:f9:a7:09:a0:c9:bb:3e:9b:03:0c:2f:8c:16:75:
39:16:f9:74:0e:03:30:af:1a:e7:63:b2:77:1b:ef:29:ac:a8:
37:3b:d6:23:1c:ef:87:00:1a:24:03:49:8b:77:09:52:09:bb:
5d:da:98:d9:1f:d5:81:75:8b:4e:95:c1:76:fe:95:c7:53:9f:
d7:bc:b1:05:ad:61:b0:a6:41:47:b0:b9:21:43:99:a1:c8:e8:
46:1e:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:32:09 2025 by rpki-client