Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: PZBlD0cNran0u1pKQnQ1uv3k4zFDBTAGx3Sd7mSqAok=
Subject key identifier: 01:19:89:37:44:37:3F:6D:24:0D:7A:81:FC:22:F2:26:E8:97:6C:32
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 0196A98B83AB82D7F444FA61C4A047858180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 053A
Signing time: Wed 07 May 2025 07:00:14 +0000
Manifest this update: Wed 07 May 2025 07:00:14 +0000
Manifest next update: Thu 08 May 2025 07:00:14 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: 0RXNI7gJP2vldpX0XqxTw1dr09ilnT0w4uYYQ+Xg7Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:83:ab:82:d7:f4:44:fa:61:c4:a0:47:85:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: May 7 07:00:14 2025 GMT
Not After : May 8 07:00:14 2025 GMT
Subject: CN=0119893744373f6d240d7a81fc22f226e8976c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:1e:4f:49:c9:40:25:84:15:da:e2:71:02:
fc:8e:59:5b:16:0a:9f:60:41:6f:53:7d:a9:0f:72:
f1:93:99:b7:cc:7d:ed:3a:5f:71:39:f3:04:25:80:
6f:ed:2a:9f:31:7c:b6:79:cb:50:24:0c:5a:55:58:
bf:00:c1:89:d5:d4:3d:5f:53:9f:61:98:f3:86:f1:
e6:d9:69:88:7a:b6:8b:9d:83:df:e0:84:77:b8:ea:
70:10:92:28:3c:d8:39:56:e7:59:65:df:eb:c5:8d:
9b:3f:4d:ce:fc:fe:84:3e:2b:32:f5:5d:d7:13:26:
8a:ee:9d:0e:12:f9:db:11:62:c7:bd:5f:91:ca:e7:
e4:eb:da:e7:e0:7c:c8:cb:b3:f1:01:f5:48:1a:e7:
56:21:b1:ed:63:3c:6c:18:c1:44:00:7a:e2:e8:0d:
94:1e:bf:65:91:e2:9d:ea:01:97:4f:ad:fb:1b:9f:
64:b4:1d:8b:49:6f:4b:90:34:95:95:a3:ae:f2:7f:
64:f6:e5:ad:03:57:5b:95:e8:f5:4f:d1:05:6f:3b:
7d:86:57:bb:66:27:7c:aa:77:92:cd:23:86:11:29:
f5:d8:5b:70:22:ce:bf:9e:83:65:df:80:34:d6:76:
b7:ed:d0:77:b6:04:40:cb:6a:cf:48:d5:76:4a:6b:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:89:37:44:37:3F:6D:24:0D:7A:81:FC:22:F2:26:E8:97:6C:32
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:31:43:89:b2:40:7c:2e:56:88:a8:10:b0:0e:a2:a8:cf:45:
4c:b1:5d:d7:2f:d1:6e:6a:8d:07:88:7c:2e:11:d3:b0:f4:ad:
00:a2:ab:1a:df:3b:47:d5:3a:08:e3:44:69:51:21:d6:38:8d:
64:2c:7d:9c:a1:4b:ba:36:c1:69:e9:e3:df:87:4e:85:bf:80:
28:c0:53:d2:ae:0a:e7:9d:b9:85:70:e8:b5:00:68:01:ab:b5:
3c:80:88:85:2d:46:c5:7f:ca:b8:20:51:05:28:9d:38:b6:7d:
6d:0f:22:a1:cc:b7:60:21:59:ff:65:54:78:04:42:dc:f0:c8:
42:61:79:9e:6a:6e:fb:04:54:e1:36:8f:84:23:1d:34:e1:cd:
86:be:9b:dd:e1:df:92:35:db:18:38:fa:3a:7d:cc:9b:36:3c:
d6:54:24:d6:4b:f3:8b:c2:5e:fb:fc:ab:f2:9e:c6:ce:e8:1a:
96:1e:30:86:dc:06:91:67:24:71:ae:88:34:73:d1:6c:16:6e:
1d:48:44:41:44:76:63:40:1c:98:1d:9d:e8:58:3d:d0:5b:bb:
05:78:7b:c6:5b:f6:41:48:bb:5e:c2:71:80:4b:95:30:7b:39:
d3:b9:e8:11:4e:f8:07:2a:11:3a:1d:20:71:70:b4:f7:8b:af:
fb:3a:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:09:37 2025 by rpki-client