Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: LXhBlnvoi6r0Vc4XFw4SDrogGr/6Aa+Ba+L8NOd/asg=
Subject key identifier: 1B:A5:69:5E:40:B2:CC:D6:E9:CB:43:EE:75:49:6A:D0:D1:F8:92:81
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 0196D776F92AF0B696D617BF73C9579E792D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 1249
Signing time: Fri 16 May 2025 05:00:20 +0000
Manifest this update: Fri 16 May 2025 05:00:20 +0000
Manifest next update: Sat 17 May 2025 05:00:20 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: qvW9E4OJKbM5zVisal1DF6mr7wlZ4QSCl5SlcqUfYiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:76:f9:2a:f0:b6:96:d6:17:bf:73:c9:57:9e:79:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: May 16 05:00:20 2025 GMT
Not After : May 17 05:00:20 2025 GMT
Subject: CN=1ba5695e40b2ccd6e9cb43ee75496ad0d1f89281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:fc:81:20:a8:6d:63:2c:38:43:38:77:ca:
95:98:cc:7f:3f:d3:8e:d2:39:8d:17:56:e3:50:17:
34:88:08:6b:03:75:c8:d7:9e:51:61:1c:8e:99:f8:
c3:fa:8c:27:e7:fc:f1:e9:11:8e:8c:ec:12:a4:94:
f3:41:f2:7a:8c:a3:87:e2:cd:db:3c:27:c8:6c:01:
5b:dc:07:ec:41:59:22:6f:56:26:47:f4:a7:78:5a:
1e:b3:97:dc:59:05:78:61:a7:78:d7:4e:15:5e:c3:
70:be:25:61:06:04:53:3e:d4:1d:56:51:98:ee:7a:
b6:5d:5c:3b:21:de:20:b5:aa:da:72:04:b7:0b:72:
cb:08:44:a0:59:9d:fd:e0:54:70:2e:f0:3d:57:63:
1a:b7:73:48:7f:61:a0:5b:5d:9c:3e:88:da:90:6e:
0c:b3:9e:65:64:3e:dd:15:54:82:9a:e5:06:8b:38:
32:0b:38:a1:b2:49:e7:36:75:fe:97:e0:4f:e1:c2:
80:13:fd:6f:a2:2d:f9:18:df:28:eb:11:42:e1:0c:
02:ed:96:71:78:43:93:47:44:6d:23:70:77:43:d9:
59:f3:a9:68:34:5f:a1:00:63:11:f5:55:b5:af:76:
be:44:f9:9b:50:4b:bb:92:43:9f:2c:90:93:cf:fc:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:69:5E:40:B2:CC:D6:E9:CB:43:EE:75:49:6A:D0:D1:F8:92:81
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:32:74:63:fc:d9:e0:81:3c:4e:e3:26:cf:78:a1:55:d3:85:
16:f6:e2:98:f0:f9:1a:ac:23:36:1f:d8:43:e0:18:c9:de:80:
bf:dd:cb:b5:59:44:de:bc:19:f5:3d:f6:61:93:b3:9d:fa:db:
84:54:e3:c5:09:56:39:b9:de:6b:54:19:23:a3:5f:56:c4:7c:
16:6b:94:90:55:b0:1d:b4:69:41:54:37:89:bc:74:7f:52:4a:
cc:cd:b1:4e:90:35:3e:9b:40:ee:f6:12:43:c2:71:91:51:37:
87:db:b7:bb:ba:85:3d:1c:bf:48:73:0b:d7:5b:3f:38:45:cd:
a7:ae:a0:70:7b:9f:57:42:bf:51:10:5c:f8:9f:a9:50:b9:f3:
b8:dc:4b:1c:47:7d:44:b7:f4:07:6a:63:a8:33:a5:0d:26:c4:
8e:2b:5f:71:8b:42:c1:ed:f9:6d:ba:71:83:e1:b1:40:ee:cd:
64:3d:d8:6c:5f:e5:fd:e1:55:62:40:14:36:da:22:12:04:38:
7e:26:eb:2b:b3:90:1f:f9:b2:a1:cc:e4:ee:5f:66:64:54:2a:
cc:3b:cc:89:28:dd:8f:35:a0:c6:21:da:f9:98:7c:ba:47:02:
7a:70:2e:39:89:46:57:59:b2:a6:25:86:04:9b:13:07:05:aa:
e2:b8:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:08:23 2025 by rpki-client