Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File: goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier: KCCnyEMLn9kyfkrTQ8pkY6BFA0U5SdZlJdUBUEutmJA=
Subject key identifier: AE:F0:AC:AF:DC:AE:93:C6:9F:EC:B2:2F:DB:64:1F:E9:49:89:15:85
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial: 0196B8C8159F595AC9BD06E3042C9ED962E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 06:00:42 +0000
Manifest this update: Sat 10 May 2025 06:00:42 +0000
Manifest next update: Sun 11 May 2025 06:00:42 +0000
Files and hashes: 1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=)
2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: Xs+g5YyDgD4FgBHnfprn+zg4kwUhHWP8g/CBUli1hqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:15:9f:59:5a:c9:bd:06:e3:04:2c:9e:d9:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Validity
Not Before: May 10 06:00:42 2025 GMT
Not After : May 11 06:00:42 2025 GMT
Subject: CN=aef0acafdcae93c69fecb22fdb641fe949891585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:5d:c4:f3:cc:b6:67:c0:6f:84:5c:b1:ea:
f2:0b:a7:04:c0:b6:f2:c6:ec:68:5b:5d:79:eb:f9:
93:20:11:16:8d:9f:ce:0a:b3:cb:85:d3:4f:57:a4:
58:18:2e:9c:ec:c1:93:25:78:24:05:59:24:74:5a:
58:24:81:d0:96:a3:3c:74:9f:dc:27:ed:3c:ef:58:
77:e6:0e:3b:3c:da:ae:1a:51:5c:db:e0:f2:07:b5:
58:40:56:b5:eb:a0:ea:6f:02:fa:77:e7:ef:3d:10:
03:51:22:3e:61:77:76:d1:bf:0c:04:bd:8f:eb:8c:
c4:30:c3:ad:e4:da:72:7a:31:fb:4a:08:b8:de:cd:
e5:3f:60:7d:dc:b8:27:13:0a:21:b3:5d:f3:9b:9b:
ce:c8:6f:ad:64:5d:f9:d1:ec:ba:e0:75:9d:83:29:
73:37:f8:59:42:d2:c2:f2:2d:4e:91:c9:69:7d:08:
b6:44:71:ea:2a:0c:0a:b6:6f:95:09:52:cd:99:14:
dc:a3:0d:d0:09:ae:5f:f3:e9:78:d1:2c:60:cc:d9:
a8:11:c5:8d:96:fb:2e:aa:00:a8:71:19:ae:fc:01:
ba:ed:fa:f9:d9:f8:6a:8e:83:ab:48:c0:ac:d0:a0:
c7:95:e7:aa:c2:7b:5f:b8:53:c5:96:c9:fa:60:e9:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:AC:AF:DC:AE:93:C6:9F:EC:B2:2F:DB:64:1F:E9:49:89:15:85
X509v3 Authority Key Identifier:
keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:de:6e:2e:aa:0a:74:a5:ff:fa:93:05:6e:70:ff:e4:8a:9f:
fc:3c:e8:38:39:b6:69:ae:88:19:7c:7e:68:d0:91:c5:fd:eb:
be:aa:6e:85:bd:0c:03:7c:20:9e:f2:42:f5:45:f5:ae:76:1e:
41:dc:77:b8:2c:f5:67:d8:07:78:4a:19:5c:b8:c8:9d:60:09:
03:9c:15:f9:92:b3:39:f1:97:6b:c0:56:73:dd:3b:10:46:5f:
ae:bc:3a:09:ba:65:a9:0c:e0:1b:cc:b1:58:d4:0a:66:02:ae:
32:2e:bf:0c:32:e6:57:6e:71:db:c9:0c:dd:1a:3d:15:87:8d:
1c:cb:3e:2d:53:02:72:e1:aa:2c:04:6a:61:88:e9:6d:27:06:
68:17:fe:a8:cd:be:49:a3:8b:8b:51:ec:7c:50:a1:57:0a:da:
2c:76:1c:5d:bb:da:aa:82:f8:0e:4c:79:08:f2:ae:bb:ae:63:
6b:03:cd:99:67:ed:d0:d8:2c:45:05:9b:ac:9a:31:2e:51:f1:
4d:82:cc:21:3d:7b:75:16:61:bc:d9:cc:a6:3a:75:b6:48:0f:
5d:30:0e:04:d1:b1:37:43:76:68:42:cf:1d:89:89:24:35:6a:
69:f7:ae:56:14:67:7e:03:f9:aa:12:b5:ae:50:5c:3a:94:17:
f7:ea:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:25:42 2025 by rpki-client