Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: Yjy8wjeRTVU3+R8u37yYgw+SekVC0h1UGAOb/VU95/U=
Subject key identifier: 53:03:21:7D:DC:7F:8C:CA:F1:45:49:68:EB:A0:B4:94:67:F1:5E:A6
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 0196C3F0F1021C3F4CA006103FE207ABE608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 094E
Signing time: Mon 12 May 2025 10:01:09 +0000
Manifest this update: Mon 12 May 2025 10:01:09 +0000
Manifest next update: Tue 13 May 2025 10:01:09 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: YXlUE3bL5B0Bk0v6V/9YDITwXPUqkSiwQJ3jLQOEAkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:f1:02:1c:3f:4c:a0:06:10:3f:e2:07:ab:e6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: May 12 10:01:09 2025 GMT
Not After : May 13 10:01:09 2025 GMT
Subject: CN=5303217ddc7f8ccaf1454968eba0b49467f15ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:fe:16:27:01:1e:0e:f7:df:d7:ba:5a:c9:
b9:09:58:ab:98:a5:28:53:ae:83:5e:69:46:ba:5b:
05:74:be:2d:ac:a0:6a:ec:10:48:33:4b:4e:04:9f:
bf:87:24:78:dc:ea:63:94:f6:6a:81:1f:d9:5b:fd:
62:68:a9:8f:64:df:94:a0:9a:09:54:a2:a1:9d:bf:
fd:14:46:88:27:50:56:45:76:60:c2:26:4b:9d:1e:
f7:c3:ee:71:59:d7:64:d4:7b:70:90:66:e1:30:4e:
87:95:b1:3a:e4:7d:44:27:9d:a7:be:7e:b2:ce:21:
bf:2a:d2:82:f3:5b:6a:41:a3:8d:51:b3:1d:0b:1c:
dc:e6:ae:e4:b6:55:60:71:26:fd:93:99:74:d3:09:
e0:ff:79:9f:80:18:29:61:37:c7:72:b3:7a:20:cf:
75:c2:71:03:66:43:e9:b0:f8:5d:63:ea:88:41:b2:
cd:37:cd:7e:5e:2a:8e:7a:11:e8:90:be:c0:2d:85:
2f:c8:04:86:e9:4f:74:03:44:b2:f6:0b:f1:75:6a:
11:33:83:dc:58:71:b0:47:d2:d9:9c:10:83:a0:f8:
18:ad:00:46:27:e8:14:27:13:a1:1c:f9:5b:2a:0e:
b4:78:11:3f:12:24:3c:eb:d2:1a:24:42:1c:bc:04:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:21:7D:DC:7F:8C:CA:F1:45:49:68:EB:A0:B4:94:67:F1:5E:A6
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b7:dd:cd:84:96:bc:8c:d3:53:73:d4:d5:d5:da:1d:33:5f:
57:35:ea:10:41:c3:8d:a9:d0:4d:01:d9:e2:2d:07:86:91:76:
14:37:ea:d8:5a:db:14:dc:04:61:ca:5c:14:90:c8:96:23:e5:
0e:60:32:6b:e5:65:3f:d9:c2:82:ed:87:e4:78:11:9b:30:bb:
04:20:7a:59:41:1c:af:f1:50:ae:33:9f:14:82:9a:9d:3c:34:
f6:b1:8b:bb:6d:e2:09:7d:9f:5c:db:f0:30:9c:15:c5:e6:c8:
44:03:5c:f5:5c:b8:c4:51:65:65:35:37:66:94:42:f5:d6:3d:
f0:4a:21:b4:82:e2:c0:3b:41:86:b8:13:9e:9d:5c:25:5f:f5:
00:40:2d:d8:d9:a8:8b:5d:a6:d5:8c:52:94:e3:6e:74:fa:11:
a0:ad:fb:c4:69:d3:6d:14:03:0e:bf:4d:a5:ef:40:2c:e6:e6:
0b:cb:5e:3e:d4:6f:99:43:34:5f:1c:26:2a:33:a2:6d:6c:d6:
8c:59:2d:23:81:3e:de:58:8b:3c:da:fb:5a:3f:95:a4:3e:44:
a2:c6:4b:f4:fb:ac:2e:52:f8:a1:6f:9d:aa:56:c8:d3:e5:82:
7f:79:ab:f6:25:3b:c0:72:ac:21:c0:9a:96:eb:c3:a3:86:db:
6a:2b:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:24:56 2025 by rpki-client