Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File: gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier: AxpaXBtAB6nQ/0UDRUEHYdGSzojd58XiPZnSDSDAQ24=
Subject key identifier: AD:5F:B7:75:00:15:5B:D6:BF:7E:DA:E3:6F:07:98:EA:82:40:80:F8
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 0196A051ADDC0769D3E5B81F0E77E0853F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number: 0BA1
Signing time: Mon 05 May 2025 12:00:29 +0000
Manifest this update: Mon 05 May 2025 12:00:29 +0000
Manifest next update: Tue 06 May 2025 12:00:29 +0000
Files and hashes: 1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
2: WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa (hash: rq9cnpsLBzesNH6rgMT8gVQiRyG9ecQKConKub1KWeo=)
3: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
4: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
5: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
6: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: Ce2cvWVIJpb2knAx1rr0C2uw58II/5kD46V2z6ADSes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:ad:dc:07:69:d3:e5:b8:1f:0e:77:e0:85:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: May 5 12:00:29 2025 GMT
Not After : May 6 12:00:29 2025 GMT
Subject: CN=ad5fb77500155bd6bf7edae36f0798ea824080f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:f8:f4:ec:14:fa:a2:4e:bd:ad:f4:c4:cc:
ce:d1:40:22:b3:75:66:59:4f:98:2d:f5:61:4d:2f:
3e:c9:06:13:ac:a8:30:bf:f5:53:c0:62:38:56:78:
44:8c:14:e2:3e:b7:43:00:f2:c7:06:0c:fb:83:bb:
62:4f:ba:17:3c:b9:dd:3e:39:ce:bf:dc:b9:10:32:
4c:5c:9e:cf:8c:44:12:bc:24:c4:02:56:9d:f5:85:
c5:94:55:d0:f9:ce:d4:5a:56:9a:76:84:8b:61:59:
38:6f:cb:65:ac:11:de:38:1e:8f:7c:ae:4b:9e:3f:
b6:46:64:18:0d:10:e4:65:c7:76:d3:91:2a:7d:ff:
fd:e4:e1:07:43:7f:01:7c:72:88:a2:d8:45:3b:aa:
25:5d:1b:30:75:a8:13:22:cc:4e:17:a6:c8:d4:8f:
80:b8:12:69:fe:89:d2:6b:c9:75:ab:b4:51:a4:1d:
e6:7d:e1:97:24:2e:47:7c:ff:af:5a:da:9d:7f:04:
7f:85:5b:cd:4c:ed:bf:f8:be:d5:49:ca:b2:82:fc:
2f:aa:b9:54:15:a7:fc:8f:79:e4:04:8d:92:af:63:
93:9f:19:80:f8:68:7a:01:b4:7a:78:53:45:5a:1a:
c2:8b:73:14:f7:d3:cd:7c:b4:cb:79:38:9f:75:56:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:B7:75:00:15:5B:D6:BF:7E:DA:E3:6F:07:98:EA:82:40:80:F8
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a8:c5:95:07:b6:ed:d3:4b:fd:dc:1d:f6:36:4e:5f:6b:e2:
92:86:4e:dc:fb:52:5b:a4:a7:64:c3:2d:ce:ef:2a:42:3e:b5:
d8:1e:ba:31:9f:7e:af:79:c6:2d:cf:71:a7:00:8e:79:37:95:
d6:24:ee:1e:0a:03:1a:8a:ab:73:65:41:63:61:56:6c:09:f2:
0e:87:d7:ed:67:89:6e:a9:33:33:23:b1:6b:c8:48:e8:5a:38:
85:1c:64:ed:ca:fa:a1:de:d6:d2:f1:53:2d:dc:5d:d0:df:fd:
ad:ad:c6:f7:e4:39:b1:f4:b4:45:3c:d6:97:da:a0:e1:fa:26:
7d:e1:d6:39:d1:1f:ae:6c:70:d9:fd:07:c2:58:1a:3c:a7:0a:
19:4e:ef:41:20:2d:68:25:aa:c1:bc:08:dc:bb:90:af:a1:2c:
f3:a8:d8:4c:c5:81:17:cd:88:f1:b7:fa:b0:8c:75:6a:ac:b0:
40:05:62:f2:2a:80:f4:57:23:ce:ca:73:25:4a:00:0b:63:dd:
27:20:5c:5d:78:3f:07:55:78:df:52:35:a6:de:d7:90:fc:67:
dc:1c:70:ae:4a:69:8a:89:81:d6:5e:91:ab:76:a0:26:f5:aa:
4e:8e:88:5e:95:53:45:2f:13:fa:42:8d:51:a8:90:29:aa:dd:
c1:eb:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:34 2025 by rpki-client