Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier: 80HzefB906QliW7pA4iopxgjYtmEo7/V+OT7LUGigIY=
Subject key identifier: B3:C4:30:2A:74:AD:A9:6C:98:6B:AF:95:5F:35:16:5B:F5:E7:38:A0
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 0196BC6E56BFCE3BA2820683236F394538C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number: 1276
Signing time: Sat 10 May 2025 23:01:09 +0000
Manifest this update: Sat 10 May 2025 23:01:09 +0000
Manifest next update: Sun 11 May 2025 23:01:09 +0000
Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=)
2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: iN9ZnLGdV0lDwysQDOGOzpdrcw9mGeHkFEbAAg8WUqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:56:bf:ce:3b:a2:82:06:83:23:6f:39:45:38:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: May 10 23:01:09 2025 GMT
Not After : May 11 23:01:09 2025 GMT
Subject: CN=b3c4302a74ada96c986baf955f35165bf5e738a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:3a:4e:50:19:88:3a:d3:9a:67:f5:68:aa:
18:08:30:6e:2b:b9:73:75:9b:1b:09:27:61:02:36:
5c:7f:d7:92:ed:e9:44:01:de:0f:27:c1:fb:b0:34:
26:ed:4a:37:ee:61:75:b8:11:ed:d9:a6:38:df:22:
77:8d:b2:b5:75:c8:a2:b2:28:97:2b:5a:1b:10:96:
e6:38:e7:50:6b:47:b7:08:a1:d3:cc:f6:77:1a:0a:
8a:1f:55:1b:63:d8:cf:59:4e:5c:df:63:9f:17:f5:
f5:85:ea:46:a7:9a:2d:16:01:9e:29:25:3e:ae:c6:
3b:f2:80:8a:a0:93:71:c0:dd:3c:b5:cf:40:c8:93:
a4:9f:9f:e8:c9:3d:f1:20:4e:6a:45:00:3c:47:71:
a3:8c:a8:ad:f9:fb:82:49:ed:67:b4:c8:8b:a6:af:
fb:4c:00:90:fc:46:5f:92:8f:03:77:1b:06:d5:48:
e8:28:11:2b:f8:3d:c0:b3:3c:42:74:8e:81:4c:81:
45:f5:2a:7a:f8:d3:b3:6e:78:95:c3:db:52:e0:6b:
f3:00:da:7d:de:ba:73:da:67:f7:6d:76:63:5c:b3:
f5:52:15:77:47:50:50:22:3c:2c:b8:35:60:e0:1f:
1a:64:1b:7b:6c:d1:97:41:57:69:5c:66:fb:6f:fc:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:30:2A:74:AD:A9:6C:98:6B:AF:95:5F:35:16:5B:F5:E7:38:A0
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:76:a3:11:0e:e5:24:0a:09:89:87:9c:a2:3f:6d:7b:2b:13:
67:84:19:0e:a0:54:4d:2d:1c:72:7c:df:bc:f7:87:fb:1b:bd:
af:ce:d4:11:9b:8f:a2:e7:f8:34:fe:53:6f:b1:5d:57:ab:2a:
b2:39:d7:57:b6:88:f2:e2:93:d8:b6:85:d2:28:60:93:81:32:
c3:f8:68:0a:8b:8b:2a:60:08:3e:13:e2:dd:fa:bc:9c:b3:fa:
b3:df:82:aa:67:55:56:76:30:48:26:01:31:f3:56:74:f9:b0:
59:2f:f8:f5:da:78:c2:f4:4d:ee:50:be:7d:82:f3:44:bb:8b:
73:4b:e7:2f:f0:fa:0e:07:bd:5e:cc:79:6b:18:62:b9:90:7c:
6f:6e:18:97:fd:da:1d:71:e1:1e:6e:92:7b:37:b7:e3:eb:a8:
3f:fe:3e:6e:89:0e:6e:00:16:f6:36:ed:ea:4e:8a:ca:f9:fc:
96:99:80:ff:d5:24:00:95:8c:93:43:ec:0d:b3:52:1c:b4:d2:
9e:a1:42:b4:96:d0:49:87:6a:a8:0a:96:6e:98:bb:5c:5f:40:
8d:87:3b:46:1c:99:c7:cc:6b:78:f6:b5:0d:a6:ec:0c:71:a6:
4e:7a:27:06:ac:15:17:00:ec:b9:07:7e:37:59:39:04:58:e7:
23:34:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:56:13 2025 by rpki-client