Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: Va6PA0eNfYIlJERJf5rNlCMXJE7w0JxMww5j3zESXBU=
Subject key identifier: CE:A1:88:D0:6A:95:2B:AC:5A:10:B8:39:FB:00:CB:3E:3F:D0:49:CB
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 0196764345E5C2C6B4B24DDDB6BBB2D91132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 133C
Signing time: Sun 27 Apr 2025 08:00:42 +0000
Manifest this update: Sun 27 Apr 2025 08:00:42 +0000
Manifest next update: Mon 28 Apr 2025 08:00:42 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: N7AquC2SVv9643jOwkVgf4Kl63D0NtupfGu1Ru6sqEk=)
2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:45:e5:c2:c6:b4:b2:4d:dd:b6:bb:b2:d9:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Apr 27 08:00:42 2025 GMT
Not After : Apr 28 08:00:42 2025 GMT
Subject: CN=cea188d06a952bac5a10b839fb00cb3e3fd049cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:8d:3e:e8:d7:3b:0b:8d:8e:95:01:e2:9b:
d6:e3:4e:69:1a:b9:2a:f9:a5:b3:f9:b7:ae:78:bb:
09:ab:c5:0e:f3:7b:e5:a0:f6:3f:33:40:55:1e:cc:
75:de:4d:7f:cd:4a:85:42:f2:16:97:02:04:ac:d3:
b7:73:24:5b:d2:07:ce:e7:a9:5f:a6:83:1d:e5:db:
50:dc:01:f6:2f:7d:81:17:0b:bd:2b:18:30:c2:28:
42:ec:c2:d3:d4:2e:a5:1f:ab:39:a6:e4:d1:00:32:
68:73:18:bb:d2:9b:52:e5:99:d5:50:85:0c:1f:61:
62:b3:7e:7f:94:96:d8:78:d5:ab:8d:dd:2b:8f:73:
8e:c6:1a:33:3c:15:02:33:b9:a0:e2:4a:f9:1c:a7:
5e:69:8e:fb:9d:94:79:8f:f9:be:c5:18:a7:de:07:
ab:9e:52:97:31:b4:bd:52:e7:ce:20:29:a4:2f:81:
42:cd:4a:38:90:7a:c1:76:6f:7c:71:8b:5e:16:1f:
9e:f7:9f:98:73:8f:fa:eb:50:80:13:d0:be:72:88:
56:77:0e:48:a6:d1:31:cf:eb:b3:c7:71:09:f2:68:
62:db:38:a3:9d:d8:b1:18:4f:4c:49:6c:18:c0:73:
a5:5a:df:85:c5:f1:f2:40:0f:08:16:74:8f:41:b6:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:88:D0:6A:95:2B:AC:5A:10:B8:39:FB:00:CB:3E:3F:D0:49:CB
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:92:75:d7:60:2a:88:b3:64:cd:72:1b:03:ba:d4:e1:bb:
c4:7a:c0:04:52:06:1d:d5:d3:0c:9e:50:07:a3:3a:be:6e:c0:
16:b2:43:04:7d:f1:64:32:33:1e:e2:73:0b:30:b2:03:82:11:
93:05:73:9a:dd:04:a7:4b:c5:aa:80:d7:71:e9:36:dd:22:fb:
01:02:20:47:8d:6b:35:7a:04:d2:2a:ff:6b:04:ae:b1:81:6b:
67:ba:e1:5f:9b:a6:5a:4a:9c:f2:a2:ed:f7:11:0f:3d:a4:59:
16:98:2b:69:e6:70:52:5f:11:db:2c:5e:43:fa:ae:2e:03:05:
82:e7:36:57:f7:52:e3:d5:a0:47:bc:2c:82:b4:28:38:49:5e:
a6:57:58:71:c1:fb:58:a0:63:ee:29:8b:9e:74:ae:86:6a:60:
cb:b2:c5:c5:a6:07:4b:e6:9e:c2:12:89:7b:b8:bd:da:a6:0f:
16:27:cd:7c:f8:63:95:4d:31:eb:58:2e:62:cd:89:68:6e:a0:
03:6b:f2:81:d7:d3:42:0e:db:e1:76:c9:12:e4:14:10:ff:1c:
ba:76:3a:62:f4:30:92:eb:37:c9:6d:d5:61:21:f0:00:6e:33:
5f:c8:00:76:a7:45:2a:14:ba:4f:55:44:b6:10:1e:82:a9:71:
76:8d:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:31:28 2025 by rpki-client