Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: WhxkhKxHKr3vPLoJUyzBRJTPDLGdZrctrKLUJqc0hhw=
Subject key identifier: 79:63:5E:44:7B:43:32:38:C3:4D:D0:8A:0A:B7:FC:9C:89:F1:57:A6
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 0196753050D1C1D3628D440D001BFADB7C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 03:00:22 +0000
Manifest this update: Sun 27 Apr 2025 03:00:22 +0000
Manifest next update: Mon 28 Apr 2025 03:00:22 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: zDUVSogUazc4gfs3Tn3N9Js6GQPVitQ4Z5PEh+lHCbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:50:d1:c1:d3:62:8d:44:0d:00:1b:fa:db:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Apr 27 03:00:22 2025 GMT
Not After : Apr 28 03:00:22 2025 GMT
Subject: CN=79635e447b433238c34dd08a0ab7fc9c89f157a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:2a:37:d9:7a:54:3a:40:0f:e4:d5:7d:11:
81:80:9d:f6:5e:1a:38:0f:14:ff:b3:ce:f1:a9:5f:
0f:9a:e3:5a:bb:0d:09:6f:c0:20:e5:90:14:56:4e:
0d:7b:63:db:77:99:5b:22:f4:1d:85:3a:59:34:2b:
09:fd:ef:cc:b6:b5:79:c0:08:a8:2d:6d:bf:f0:99:
46:28:b3:79:eb:9f:36:2b:b1:ab:96:ff:55:7e:ee:
8d:1f:a1:ec:85:88:7f:ec:3b:bb:5a:15:67:57:7f:
d8:16:e0:93:48:43:5f:65:ab:89:2b:31:12:0c:85:
bb:39:ed:57:49:94:61:fd:2b:c3:50:98:c5:d8:d7:
3e:f9:73:ed:56:55:4f:d3:f7:eb:c4:5b:0b:0d:0b:
35:ee:09:2d:62:4f:55:1f:fb:76:79:8d:64:ee:fb:
35:37:86:97:ba:46:97:27:84:46:03:e4:5d:05:a7:
3b:c6:fd:12:87:6b:1d:8c:8c:58:2f:e9:9e:39:d5:
82:28:59:c9:56:05:c5:ca:02:1c:98:1a:e0:1f:67:
86:fd:d2:93:48:32:7f:a4:56:de:06:1c:9d:f9:7b:
fe:50:1c:87:72:68:d6:54:26:7f:d4:bf:63:1a:5e:
83:37:b6:6f:65:5d:40:6b:db:40:59:1a:9c:7e:87:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:5E:44:7B:43:32:38:C3:4D:D0:8A:0A:B7:FC:9C:89:F1:57:A6
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:72:63:4f:b6:11:a9:3e:3a:84:bd:fc:7a:33:92:dd:9a:8c:
80:a2:4e:3e:ce:19:d6:b8:cd:3c:4a:c5:ea:47:25:f7:e3:84:
2a:c4:dc:97:68:f6:d8:ce:77:d5:b1:19:6f:c0:69:e9:b7:d8:
d1:9a:8d:54:fe:3c:cd:a1:24:82:31:3a:93:f5:df:7f:de:d4:
41:1f:b2:b7:c8:af:1f:e6:9d:5f:bd:65:19:44:cd:bc:fc:05:
ba:6b:64:df:fb:f1:95:22:c8:86:9c:64:13:be:ac:0a:83:fc:
35:d0:5f:09:a5:1f:6c:99:62:68:02:e1:73:52:bb:e5:40:96:
97:71:bd:43:38:10:db:4c:db:46:b7:78:65:f6:8d:81:0c:9d:
47:52:2e:f8:9e:01:2f:1d:58:fe:9b:ab:13:8d:ef:3b:94:37:
0c:86:98:9c:de:dd:d1:79:fa:cc:cf:26:0e:7d:18:3b:78:28:
8c:eb:d9:eb:35:95:e8:a5:09:b9:be:31:b3:7c:5a:74:fe:d5:
7f:ac:17:dd:33:58:bd:1e:51:71:92:25:83:30:85:a3:d9:88:
a5:a4:95:4c:31:5a:00:36:fe:ed:94:a6:3f:98:ec:42:5b:30:
ab:86:45:55:41:0a:54:78:7d:ee:b8:01:6a:a1:aa:80:39:ff:
00:0b:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:47:53 2025 by rpki-client