Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: fOUe4lHv0JE73eomC72f+TNLSec1hHsngw77sGxX1zc=
Subject key identifier: DF:FC:37:A9:AE:5E:05:61:6C:82:72:70:E6:B6:31:6E:21:54:4A:E3
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 0196BC00382A1172495E7005A34705BB5C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0D41
Signing time: Sat 10 May 2025 21:00:53 +0000
Manifest this update: Sat 10 May 2025 21:00:53 +0000
Manifest next update: Sun 11 May 2025 21:00:53 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: NTK3zOu3RFW8eSM5SqyR7sdoiHCQSGrasYLER0Smclw=)
3: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:38:2a:11:72:49:5e:70:05:a3:47:05:bb:5c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: May 10 21:00:53 2025 GMT
Not After : May 11 21:00:53 2025 GMT
Subject: CN=dffc37a9ae5e05616c827270e6b6316e21544ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:29:7c:5f:83:32:7d:16:17:f6:93:9d:ee:
a6:f2:ff:ea:71:21:0b:20:a8:6e:0e:f5:5b:3b:12:
11:c6:18:ed:67:e7:43:b5:a2:18:5f:00:0d:06:f8:
04:37:39:aa:48:f6:6e:38:9d:fd:d8:4a:40:13:26:
5d:f8:09:3e:cb:47:02:ba:32:cb:a4:f0:8a:00:68:
e8:68:2c:31:70:3f:29:2f:ac:5a:ba:4c:f7:ae:b8:
83:6b:ff:68:36:55:70:7a:b3:da:2c:fc:17:d4:93:
b7:e3:a6:ac:be:45:2e:e4:da:23:76:8f:0f:e5:cf:
f1:c8:fc:56:69:ca:9f:70:6d:45:06:95:20:e7:fd:
42:fc:f6:77:48:a2:e3:40:a5:c9:40:5c:9e:a7:78:
cb:6a:09:49:0f:f7:58:3d:0d:0d:c6:90:9f:4d:63:
89:25:a5:19:35:90:04:3e:c4:75:e8:ba:20:7a:6c:
e6:41:b1:af:9b:ac:95:7e:31:f3:20:a5:fe:e3:99:
cc:3e:15:ad:49:0d:cf:76:81:11:aa:0d:66:54:98:
88:cd:a8:69:36:41:e9:c5:7f:98:37:c8:ea:5f:7a:
53:7a:3e:c6:cf:67:78:fe:99:39:07:4a:32:9c:c4:
fc:25:58:65:c7:43:ac:0c:1a:60:dd:83:b4:dc:1e:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:37:A9:AE:5E:05:61:6C:82:72:70:E6:B6:31:6E:21:54:4A:E3
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:83:7d:30:3e:7a:15:4e:ed:08:8d:77:a4:4b:d6:00:57:9f:
e9:fb:ab:27:14:4e:4c:59:89:30:98:f6:f0:c9:c0:b7:48:13:
fa:bd:7c:fc:33:c6:64:f0:1f:eb:50:13:93:97:05:a3:c2:fd:
48:81:15:ed:2d:1b:75:34:c5:c9:27:b0:72:b3:2a:d1:6d:06:
29:d4:32:c8:c7:78:71:2b:db:65:03:8f:55:4a:98:ba:22:0d:
4d:b3:5e:b1:f6:05:02:30:eb:43:90:9c:63:71:c1:0e:a3:81:
26:d8:67:80:42:ae:5f:01:9b:92:fb:8a:a7:f4:3a:94:e0:e6:
1a:7e:65:38:db:4d:84:f7:d7:34:af:12:3f:cc:9d:54:03:13:
f2:f0:5b:74:50:b8:65:7e:cc:f8:90:37:c9:30:fe:09:50:c1:
13:0a:57:6a:90:56:ec:ba:08:18:83:9e:08:f9:0d:19:e9:79:
68:77:63:3e:7e:1f:eb:11:2c:bf:5c:00:ea:fd:1d:2c:b0:85:
27:18:58:c1:85:5e:44:cf:ef:31:f9:d0:c6:08:e6:d7:18:b2:
6c:18:5b:13:18:05:9f:09:93:5d:e5:40:8e:eb:19:8e:7c:a0:
d5:df:b2:b2:dd:06:ea:cf:ce:98:f8:6d:02:d0:69:2d:8d:fa:
f2:c9:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:24:46 2025 by rpki-client