Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: 7HY4ExjzwVcvaVY54R9RnBGeteGXXYcwYbtKmbeM5oM=
Subject key identifier: 41:66:4C:F9:84:DF:87:3D:A9:63:AE:12:15:D5:61:81:77:9F:0D:50
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 0196C4950ACC36B9BD7AC0E2A0BE69E7200F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 04CF
Signing time: Mon 12 May 2025 13:00:24 +0000
Manifest this update: Mon 12 May 2025 13:00:24 +0000
Manifest next update: Tue 13 May 2025 13:00:24 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: 4dNMNEolKzxarxlBH3UfqOdUvu7JX5hqsqiSOu4AqBM=)
2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:0a:cc:36:b9:bd:7a:c0:e2:a0:be:69:e7:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: May 12 13:00:24 2025 GMT
Not After : May 13 13:00:24 2025 GMT
Subject: CN=41664cf984df873da963ae1215d56181779f0d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:4c:da:70:8e:ed:40:ed:ee:dd:2b:aa:19:
5f:8c:60:b8:c8:45:9d:5d:d4:3e:48:0a:cd:e9:62:
87:41:6f:1b:6f:1b:89:d6:0e:f4:11:0c:74:c8:aa:
05:b0:5b:b3:ee:16:a0:91:72:b7:44:4d:c3:20:67:
02:e6:b4:38:48:00:c0:d4:29:b6:24:95:2d:cb:6a:
f0:08:59:14:61:cc:b8:36:e4:f5:db:2f:69:9f:56:
93:4b:b3:ab:b8:3e:3a:60:3a:ea:51:d2:2e:58:c8:
0c:30:71:3c:41:2d:cc:f6:32:d2:b1:26:96:3a:d7:
5e:6a:0a:90:c5:f0:6a:be:61:69:ca:1a:c0:f6:aa:
14:2f:63:a8:cf:19:22:75:d2:d5:32:69:1c:0d:bd:
4a:4c:f1:59:c3:35:9b:b4:2e:90:cd:75:f9:35:fb:
50:97:c4:8b:43:77:a2:52:ea:47:f1:76:eb:5b:bb:
4a:1c:e4:9a:3e:08:05:26:c6:90:14:8b:98:1b:45:
28:52:87:f8:3a:e7:26:d8:28:28:19:b8:88:82:bb:
c0:6e:55:fd:d7:d3:4a:ad:18:17:d7:83:3c:fe:93:
9c:dd:12:70:ce:d8:8f:d7:ec:dd:48:5d:ba:8b:f8:
f6:cd:96:e3:ef:de:c3:58:62:72:b7:8e:42:45:ec:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:4C:F9:84:DF:87:3D:A9:63:AE:12:15:D5:61:81:77:9F:0D:50
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:a3:77:1a:98:17:7f:ea:d1:07:d3:db:8d:f7:4d:26:74:
e0:d9:6a:35:e8:9b:5a:81:16:64:7a:1e:08:a7:05:c4:31:1a:
31:82:e7:9a:8f:cb:e6:48:11:f8:f6:f4:9c:27:d2:72:37:ed:
4a:c7:3d:13:21:2c:09:9f:2c:46:f6:70:e1:11:46:1a:34:62:
50:78:59:ba:b4:72:fb:77:7d:bc:50:4d:8d:0c:b7:46:4d:3c:
92:d1:31:d5:6b:af:e5:b8:d1:04:d4:dc:97:00:88:e6:4e:6e:
e3:ca:79:15:72:ed:a1:59:41:c9:39:b7:28:e4:90:8f:e9:84:
0f:22:91:39:f6:10:c6:0f:70:c5:db:74:ca:2e:7b:f2:2e:1b:
26:ef:7c:72:7e:60:1f:16:8c:07:51:b1:20:71:de:86:44:5f:
4c:88:4a:69:ec:ae:a2:fa:9b:fa:2a:73:ce:60:dc:65:da:8b:
6c:96:02:f8:d3:de:48:86:13:2e:39:c2:cc:33:f0:0a:a8:97:
e9:23:33:83:6b:fa:87:e7:08:b8:04:97:7c:1c:18:4a:f5:fa:
70:7f:2d:f6:05:ca:10:7a:7e:80:3f:75:ed:d8:89:f3:fb:21:
01:15:b0:9b:e5:d7:bc:9d:88:0f:98:9c:a6:e5:69:e5:40:a4:
5f:16:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:27:08 2025 by rpki-client