Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: ERYoO3y82//c6g35NrjTZpVkvC4/SiBpKccOzlMS10A=
Subject key identifier: AC:64:BB:E4:28:39:AC:03:43:F7:92:6D:A1:07:0C:0C:84:90:B7:D8
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 0196C79699A23097C2163586DEB7491B8DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 03:00:57 +0000
Manifest this update: Tue 13 May 2025 03:00:57 +0000
Manifest next update: Wed 14 May 2025 03:00:57 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: mo68gmJh0TFAoe5IPS2BPBe2Cs6xSU54QScHHooGbJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:99:a2:30:97:c2:16:35:86:de:b7:49:1b:8d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: May 13 03:00:57 2025 GMT
Not After : May 14 03:00:57 2025 GMT
Subject: CN=ac64bbe42839ac0343f7926da1070c0c8490b7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:eb:88:66:14:6a:e1:db:de:b0:bf:d5:42:
ff:f8:1a:74:5d:52:c5:58:39:a9:9b:ba:3b:3d:7b:
79:da:25:06:79:30:38:cc:71:77:9d:c3:34:e6:5d:
68:6b:a1:80:93:1e:ac:a6:b8:2b:8a:a3:7b:62:5a:
30:14:56:1f:81:c2:05:d7:d9:e7:09:37:52:34:d6:
37:09:f3:8e:65:e3:73:93:65:44:9d:4d:66:d6:66:
c2:8d:ca:b5:0c:0d:47:22:2f:04:4c:97:65:1d:62:
68:24:93:d9:9a:81:d1:1b:64:38:a8:72:cd:6e:0b:
a5:7c:78:49:27:c1:ab:28:07:a6:fe:e8:ec:04:88:
6c:52:4d:a9:83:37:55:01:08:c7:60:71:aa:d7:a2:
e8:f4:99:74:46:d1:aa:47:94:dd:6f:79:e8:e1:c3:
a9:ac:c2:a3:48:9e:ad:72:02:42:ac:4f:ba:d4:0d:
46:57:d5:78:35:18:89:64:4c:b5:b7:9b:4e:19:5c:
a9:28:89:ae:f5:2d:8a:b3:77:0f:cb:31:7c:3d:00:
5a:bc:97:be:77:26:8f:5f:f4:e4:ed:8e:fa:c7:88:
7c:1d:e1:b6:c3:4f:29:76:f6:f6:f6:86:f3:f3:50:
05:f7:c8:3e:8c:22:60:21:b5:ef:87:21:1d:df:6b:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:BB:E4:28:39:AC:03:43:F7:92:6D:A1:07:0C:0C:84:90:B7:D8
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:c4:76:aa:9e:b3:9c:33:b3:9e:27:7d:0e:e1:78:38:65:
23:18:37:cb:31:97:4b:49:f8:06:61:80:55:06:d2:5a:94:ea:
ab:21:b7:ca:eb:d9:60:4f:b8:8f:ec:71:4c:2f:b6:f3:e0:72:
a2:45:19:df:e8:22:ed:d6:16:6b:5e:c7:b3:a6:90:4b:31:3b:
58:a4:84:56:96:dd:e6:58:20:69:12:79:e2:34:cc:05:fc:6e:
2e:90:c3:da:69:e0:c2:71:08:ca:7a:91:e4:ac:7f:35:fb:d9:
b3:59:6d:61:42:1b:b5:b2:32:83:a4:04:5d:6d:35:4d:56:fb:
86:67:6e:e7:15:b6:b4:e8:98:56:1f:ba:8d:07:42:f2:26:8d:
ab:62:1f:bc:af:38:13:53:4f:b0:b9:dd:8e:a6:4d:fd:49:b3:
b1:41:af:33:ae:cd:aa:95:a4:f6:61:dd:82:f1:72:eb:da:12:
88:26:9d:ac:1d:c8:a3:48:c2:96:2d:86:a2:e8:24:9f:69:65:
55:7e:12:44:d5:16:17:70:c8:cb:fd:2c:f7:25:43:47:31:76:
62:c0:8a:6e:71:44:1f:b9:9f:41:6b:19:61:ca:5e:24:19:cf:
73:42:e8:b7:6e:8f:45:59:d3:66:ff:5a:55:76:e8:61:ef:3f:
f8:34:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:14:17 2025 by rpki-client