Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: bTxF2YDFNK6LY9MLChxuPXOGJWRA7DM8civYuOXhAcs=
Subject key identifier: DC:FA:F8:46:3D:26:30:5D:96:D2:A2:31:D0:3F:41:21:A9:26:C0:F3
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 0196B3A19566A588CD49837682B2EAEA9BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0958
Signing time: Fri 09 May 2025 06:00:33 +0000
Manifest this update: Fri 09 May 2025 06:00:33 +0000
Manifest next update: Sat 10 May 2025 06:00:33 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: bmw/bOKjy669LgRfInLSCr6VmvVXHf1ROkXUdNVuoHk=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:95:66:a5:88:cd:49:83:76:82:b2:ea:ea:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: May 9 06:00:33 2025 GMT
Not After : May 10 06:00:33 2025 GMT
Subject: CN=dcfaf8463d26305d96d2a231d03f4121a926c0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:c0:37:0c:b6:5f:36:f4:63:f9:98:f4:5b:
0e:1d:05:73:23:b0:e2:b0:b4:a4:2c:c1:62:5a:67:
bd:5a:73:80:bb:ea:c9:3f:d9:2c:db:46:d0:8d:70:
a8:0c:45:b0:71:9a:72:83:e5:a4:ec:5e:8d:99:b8:
19:d0:33:ae:d2:59:fa:fe:36:ca:0e:b1:fc:a6:f4:
24:50:cd:33:bb:a3:30:83:3b:22:09:d2:d1:67:07:
53:e2:97:c4:26:bb:cd:8c:4c:54:d0:2a:40:ab:a2:
18:16:52:cd:d9:65:c9:f1:3d:44:18:6a:18:7d:e3:
bc:8b:e0:c6:35:6f:6b:a6:72:eb:f8:58:9d:a1:ff:
71:b1:bb:c6:29:40:6e:d9:a7:e0:50:de:ce:5c:cc:
0b:05:93:d0:98:d2:90:f5:42:6c:0b:03:d5:43:be:
49:2d:9b:03:0e:6f:74:76:6d:61:6a:42:b9:6a:db:
2e:77:6f:f5:d0:79:eb:ba:62:72:6a:1b:e6:68:a0:
f1:f7:08:8d:f2:98:a1:66:98:17:f8:c3:36:08:cb:
48:6a:d0:3c:55:ba:cb:9e:47:b8:a1:c3:c6:41:bd:
06:46:22:9b:f5:fa:c6:c1:8c:ed:03:ea:b4:e3:5b:
28:64:22:54:f6:1e:a7:8b:ad:3b:37:07:e3:e8:ae:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:F8:46:3D:26:30:5D:96:D2:A2:31:D0:3F:41:21:A9:26:C0:F3
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:78:9d:e2:c0:33:84:6d:f5:30:02:50:2d:2a:48:8d:73:34:
9a:da:28:0c:91:67:5e:27:34:24:e6:66:e6:b3:45:b3:0e:5f:
88:1a:ed:eb:e0:b5:8b:32:e0:46:ea:37:93:17:fc:62:17:9e:
bf:c7:b2:00:b6:cf:18:a8:69:02:c4:ff:c2:76:fb:2d:92:43:
bb:04:13:a2:4a:72:68:cb:09:39:6b:29:81:72:23:86:6e:6f:
b9:89:ff:d8:e1:9d:a5:e2:cb:4c:fa:de:f0:13:1c:64:99:bd:
47:3b:c2:ce:bd:14:91:c0:31:6a:2b:97:57:9f:6e:d6:92:cc:
b7:2e:22:f9:a1:68:83:09:5d:2a:7e:49:09:c0:5c:e4:71:ce:
36:2d:e4:f9:fb:d2:04:b9:a8:a7:7d:f6:52:d3:e0:b5:80:9b:
6a:65:01:eb:de:08:3b:fa:e2:ee:b2:1f:3c:a8:24:ad:7f:ae:
25:f9:41:6c:a2:3f:18:17:b4:ed:cf:75:27:65:ac:1a:73:e4:
ac:dd:e4:49:bd:87:e4:81:2d:f1:66:ac:8c:df:25:06:0a:83:
a1:3b:97:65:e0:5b:79:b1:f9:af:b5:73:9e:b7:a0:c9:51:07:
8e:86:bd:0f:e9:01:4f:05:e3:71:f0:de:9e:f7:58:05:dd:b1:
1b:16:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:17:27 2025 by rpki-client