Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: ME3TSHk0ZBRBMvy+/hP8FxgsrKeaueQqP3Y1VIYeD3c=
Subject key identifier: 39:54:C3:AD:98:6E:A5:ED:99:58:33:03:CD:9B:D8:D9:4E:99:7F:98
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 01969E9ADA18E554F2730AD0AA3E1AE8995D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 14F1
Signing time: Mon 05 May 2025 04:01:10 +0000
Manifest this update: Mon 05 May 2025 04:01:10 +0000
Manifest next update: Tue 06 May 2025 04:01:10 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: K8rlaqaNYsh4cJBdpJ0jq6ATgw+rhLY3iRO38bUj0i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:da:18:e5:54:f2:73:0a:d0:aa:3e:1a:e8:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: May 5 04:01:10 2025 GMT
Not After : May 6 04:01:10 2025 GMT
Subject: CN=3954c3ad986ea5ed99583303cd9bd8d94e997f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:8f:43:e1:9f:28:57:5f:ac:64:2e:fe:1b:
c2:2e:77:04:f3:7d:70:9f:cc:bf:b5:11:78:e1:eb:
e5:2d:5d:6b:2c:07:fa:20:7d:40:28:b4:4c:2c:79:
6b:18:42:8c:05:08:6d:58:4c:e1:81:64:2d:a6:b2:
6b:58:48:b2:fe:c4:57:8d:0d:33:76:a6:e4:b4:18:
fc:6e:81:9a:4e:da:d0:a6:2a:83:86:36:99:11:e8:
fd:7f:01:7c:a6:e9:d7:e6:55:9b:19:5c:92:f5:5d:
d6:78:6c:49:58:54:ba:65:ee:5a:f2:61:0a:1f:df:
0b:95:1c:c1:3f:6f:ac:b0:7f:c0:64:35:a1:ff:c3:
91:b2:0b:51:9f:6e:0c:8c:3c:cf:9b:39:5d:af:91:
bf:de:b2:da:68:e0:c9:c7:34:c1:7f:8e:35:7a:af:
96:87:e1:b0:50:4f:3c:4f:26:bb:64:95:dd:b2:cd:
26:9f:d4:4b:ac:2f:44:9b:56:1d:db:82:56:c7:54:
67:b5:81:6b:8f:72:c3:c5:66:a9:35:d5:d1:2b:79:
57:ed:7e:95:2b:e7:3d:22:6e:6e:b8:12:39:b7:6e:
4b:97:4b:e4:d5:a2:31:3d:6a:fa:59:67:2d:e5:21:
b6:f5:0c:6f:0e:a9:46:dc:04:74:5d:cd:b7:0a:c8:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:C3:AD:98:6E:A5:ED:99:58:33:03:CD:9B:D8:D9:4E:99:7F:98
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:41:b6:6e:a6:12:6f:bd:5a:ec:91:61:40:fb:88:f7:ba:9c:
b0:97:1e:f0:a1:3d:b1:0f:3c:b5:85:85:b5:fc:09:f1:e2:8c:
04:78:b6:96:d8:87:e7:2a:81:96:d8:78:98:19:aa:06:ca:42:
7b:c4:63:a8:4a:b6:ac:e5:5f:0b:97:62:36:ed:47:0b:29:05:
97:8f:82:61:32:5c:4d:09:34:59:14:b6:77:23:21:db:ce:84:
46:b8:c3:fa:27:f5:27:fb:b7:22:f5:04:70:33:ef:4b:c4:ba:
39:21:0d:49:0e:75:1c:72:d8:09:bd:c6:e9:04:ff:0c:4f:10:
e6:36:ff:ee:d6:c6:4c:69:6b:fd:a7:4a:8c:06:8d:22:2f:89:
de:41:e8:db:d4:63:df:6b:e1:93:e8:62:c7:ff:82:a9:15:d4:
2d:58:ea:0e:fd:05:69:cb:db:b8:c9:52:88:c7:de:90:ba:74:
89:51:38:79:ff:3a:e0:f7:cd:f9:8a:87:68:fa:43:d7:97:6f:
d2:e1:79:89:8f:59:0e:76:24:da:a9:d0:86:8c:65:d3:86:91:
8b:ca:fe:d2:b2:00:39:b1:86:c8:6e:7f:d0:96:0b:87:8d:b4:
9c:a9:43:d9:3a:90:87:65:3b:5b:ea:28:fe:c8:a9:18:a2:57:
a1:66:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:48 2025 by rpki-client