Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: veOVZA9cFjL0Rj4DjQAAseCgPriz2AT+2lmXL40Eeq0=
Subject key identifier: 2D:73:8E:B3:3F:1E:C6:C7:76:A6:82:90:96:39:85:C9:70:A6:CF:78
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 01969F3F8A366FA89B29674EC843E75CFF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 11BC
Signing time: Mon 05 May 2025 07:01:03 +0000
Manifest this update: Mon 05 May 2025 07:01:03 +0000
Manifest next update: Tue 06 May 2025 07:01:03 +0000
Files and hashes: 1: 15Cc0rkgOAAGUx8rhsWE0wocji4.roa (hash: w5RcK6dKOaSgSCjKMtRrWFYt+lmDT9Fb/OPGmzxAWAs=)
2: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (hash: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=)
3: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: ZNTMmX3/yRzfTkJAWn8flAQt42CZhDGjMoFYucaPZSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:8a:36:6f:a8:9b:29:67:4e:c8:43:e7:5c:ff:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: May 5 07:01:03 2025 GMT
Not After : May 6 07:01:03 2025 GMT
Subject: CN=2d738eb33f1ec6c776a68290963985c970a6cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:74:6a:36:40:1c:14:85:c6:8d:27:86:ef:
ea:33:20:93:d3:c9:34:90:1a:c5:cd:f7:4a:94:c2:
bc:72:93:3e:15:b6:d8:fd:40:3a:f9:44:89:6b:bc:
00:20:26:1e:4a:79:b0:11:b8:5f:9c:8e:76:6a:f9:
69:d2:f7:9f:fa:9c:88:50:9f:b2:e8:20:b8:28:36:
a1:b3:fd:51:a0:36:e2:53:ed:35:07:60:8c:31:4c:
fa:0f:80:09:49:bf:84:63:84:73:8c:2b:14:64:93:
cb:ac:ed:0a:fb:5c:6d:33:c8:70:6c:0d:28:ce:8e:
a7:f5:0e:9a:69:db:2e:da:bb:4e:67:c7:15:e9:92:
36:38:ce:97:a0:54:93:61:6e:f3:25:ab:02:99:84:
36:e7:b1:63:9b:f6:ba:40:26:89:e4:6d:82:39:c5:
db:51:54:3e:94:28:9a:11:a4:76:eb:cb:b9:ec:08:
82:0c:9c:8a:96:1b:4b:d4:a6:13:95:36:6b:a1:9f:
b2:95:01:db:66:f7:8b:27:63:8c:98:88:1d:7e:2f:
dd:e2:a0:a0:2b:2c:a5:c1:24:5e:87:da:1d:96:d5:
21:b3:e9:3b:6e:e8:c5:bf:61:98:c7:c7:33:a2:88:
a5:9c:f9:b6:26:8f:9c:94:ac:0b:82:ac:57:48:6b:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:73:8E:B3:3F:1E:C6:C7:76:A6:82:90:96:39:85:C9:70:A6:CF:78
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:23:db:7e:96:84:3a:ff:2d:af:57:88:35:e6:b6:5a:d1:
67:71:32:e0:3c:aa:15:5e:f7:22:38:e3:98:4d:4d:31:8e:35:
51:ef:69:20:5f:a7:83:8b:65:15:b0:c7:bb:13:84:0a:f2:1f:
cc:f4:28:75:2b:80:99:1c:11:37:eb:56:54:fc:4a:1f:7b:6c:
f3:9a:f0:31:09:07:95:98:73:81:0f:db:9b:9d:23:d8:e4:1c:
9d:b3:8a:0d:4d:b4:cc:39:6a:72:99:c7:d1:c3:9f:24:b4:06:
21:4e:d6:87:a3:4f:d9:66:02:ec:1a:c4:e2:bc:4c:69:d9:78:
36:83:f2:3e:3b:46:63:21:b3:47:cd:b9:95:d0:f6:62:67:be:
bf:39:64:03:aa:28:b5:dc:11:9a:05:0e:a8:ef:52:88:cd:91:
05:28:19:c4:15:18:3d:7a:7c:bb:93:9f:8d:d1:85:5e:46:74:
1a:e5:ae:bb:5e:8d:47:47:27:4b:07:06:31:f3:61:0d:10:64:
63:fe:11:6c:9f:ed:f0:59:54:d6:1d:5c:53:d8:00:d6:aa:6a:
07:09:16:f9:63:e3:bc:88:03:8e:d1:3c:0b:5f:82:9d:18:7c:
9d:fc:7a:fe:e9:e3:97:70:e1:ac:a3:38:38:e8:27:53:41:15:
14:1b:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:52:27 2025 by rpki-client