Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: axcksd4WxpVUFvILGXp8sMSFyt4WMae7F/oPDdO1Obk=
Subject key identifier: 56:2F:DC:E0:E6:66:75:D9:18:E9:CF:52:BD:4C:41:AE:CF:26:1B:D0
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 0196C2DD9ED41782F90BCBF1E32E7BFA4BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 0156
Signing time: Mon 12 May 2025 05:00:25 +0000
Manifest this update: Mon 12 May 2025 05:00:25 +0000
Manifest next update: Tue 13 May 2025 05:00:25 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: sUA2TAaCN7tqCahkCc3NxMLbM0SD7bYcrbHXVtPaqAE=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:9e:d4:17:82:f9:0b:cb:f1:e3:2e:7b:fa:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: May 12 05:00:25 2025 GMT
Not After : May 13 05:00:25 2025 GMT
Subject: CN=562fdce0e66675d918e9cf52bd4c41aecf261bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:79:70:46:60:48:6a:79:fd:4b:d1:cf:eb:
3c:ab:c7:67:bc:cc:90:76:ea:16:a8:a5:c2:2f:b8:
38:62:02:ed:49:4d:97:6d:4c:1d:c1:d2:11:13:ec:
c9:2a:00:67:00:0a:27:c9:e7:7c:f7:00:2d:d1:d0:
e9:13:17:70:b2:bc:42:63:0e:bd:b2:1b:0a:a8:50:
1c:05:ad:d4:69:32:6c:3c:ce:8d:47:73:ed:be:29:
ad:fc:42:00:2d:4f:b3:a6:79:f6:3e:34:17:08:9c:
a8:0d:9e:e9:75:01:5a:7c:19:d8:c7:dc:7e:18:74:
57:73:34:99:62:49:e6:bd:57:c5:e0:65:c8:9c:50:
be:d6:cf:01:9c:c2:7c:d2:26:32:4c:24:3a:61:30:
df:61:5c:c4:5b:ff:49:02:bd:1c:8b:d8:99:1f:2b:
70:91:93:01:8a:65:9f:70:60:d7:d6:b5:61:f1:91:
d8:e1:21:67:01:5f:e8:81:6b:25:a3:89:e7:8c:22:
c6:24:0b:c7:d8:01:7e:1e:6a:b1:b0:47:ef:1c:de:
d3:6d:0f:53:21:03:bb:79:08:7e:a6:22:e9:8a:64:
7d:4a:a9:d2:99:ad:d9:83:e0:e4:8e:68:13:da:31:
2f:86:02:8a:9f:b5:56:ad:fe:d9:8f:ab:71:1c:47:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:DC:E0:E6:66:75:D9:18:E9:CF:52:BD:4C:41:AE:CF:26:1B:D0
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:44:d5:8b:8d:63:b1:41:b7:90:04:d9:3a:67:ac:c1:35:7c:
c0:6e:e6:d4:65:b9:f1:17:26:e1:23:a0:2c:ae:c3:46:9a:4c:
56:22:88:8f:99:82:4b:b9:34:77:5d:ec:5b:5b:bb:27:89:46:
c8:89:11:c1:d0:79:41:5d:6f:79:70:3e:9c:71:b7:ac:52:c0:
fe:44:8c:d4:a3:96:dd:9d:9e:6a:98:ef:6a:9b:91:c5:ac:65:
4b:7c:2b:a8:6b:72:dc:ec:a8:c1:96:63:4f:15:f3:a9:72:70:
48:84:7d:f2:7d:da:11:c2:8b:11:76:f9:1c:a5:3b:00:60:9b:
c6:38:59:ca:7e:76:00:b5:e0:ee:c3:41:55:6a:38:19:2a:7c:
e5:55:7f:5a:4b:f2:46:bf:b1:46:00:0b:2a:6e:98:bc:27:fb:
c2:dc:16:1f:d7:12:6b:44:79:17:00:24:9b:47:d3:a6:dc:d4:
1f:27:27:09:7a:42:a1:7e:77:3f:aa:23:50:be:3c:b1:16:49:
5b:6d:69:7f:de:3f:b5:50:fb:c9:23:30:60:e4:c3:c1:07:69:
a9:ab:7e:c2:ae:13:84:4d:14:23:8c:66:03:21:d7:3e:da:23:
9e:5f:66:0c:9c:aa:0f:7e:d0:a8:9f:1e:3d:cc:c8:9f:63:bf:
e7:a7:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:24 2025 by rpki-client