Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: 5SYwWbycl1RQU/VHIWm6qu9gsWaEr+kNlI3ajSYM/ds=
Subject key identifier: 93:18:F0:56:A9:03:01:18:78:7D:2F:D6:7A:58:E0:CC:F0:45:A4:94
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0196C2397CC6A138C71A9B3021FCA41125C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 02:01:09 +0000
Manifest this update: Mon 12 May 2025 02:01:09 +0000
Manifest next update: Tue 13 May 2025 02:01:09 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: ZOn3MFCtYT5SOTEvjlbcrsFJCvyiWfnHculRDasXvDo=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:7c:c6:a1:38:c7:1a:9b:30:21:fc:a4:11:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: May 12 02:01:09 2025 GMT
Not After : May 13 02:01:09 2025 GMT
Subject: CN=9318f056a9030118787d2fd67a58e0ccf045a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:0b:b4:04:b6:48:07:3c:b4:63:1f:49:65:
80:59:60:b9:7d:7e:dc:91:38:b0:87:9e:eb:3d:23:
51:6a:c3:b8:b6:77:ac:62:5f:f4:46:d1:59:ce:6f:
64:fa:38:24:cb:ee:d1:cb:52:9c:4f:48:8e:86:68:
9d:0a:a0:d4:a6:ff:54:bb:27:86:b3:fe:7b:a7:23:
85:f8:a9:fe:d1:6b:e8:fc:90:85:f2:a9:53:a8:7d:
9b:56:ad:fc:ac:c3:dc:f6:10:91:02:98:a4:99:45:
dc:8a:97:de:b5:c5:3b:f9:87:bf:b0:f7:8c:a4:f9:
7f:12:42:cc:0a:db:55:d4:51:de:dd:fe:47:96:c6:
38:98:04:55:33:97:aa:df:1a:52:1f:6c:f0:60:01:
b4:ea:e7:5f:65:4f:54:64:b9:51:dc:92:0a:1e:d1:
87:1c:28:26:69:7f:da:10:e2:58:65:ae:78:b4:26:
3f:88:d2:19:37:d7:28:77:c4:17:05:11:59:26:0f:
71:aa:fd:d2:37:02:cf:2d:b4:4a:3c:e8:72:fa:14:
15:af:b5:09:2f:f2:31:ef:3d:d7:09:ac:8c:e8:ba:
83:0c:b9:4b:68:15:56:b2:53:1a:84:58:1f:ef:a8:
54:db:dd:a5:df:09:77:0a:68:b7:0e:9d:52:46:28:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:F0:56:A9:03:01:18:78:7D:2F:D6:7A:58:E0:CC:F0:45:A4:94
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ad:55:9b:e8:8c:79:f5:79:a6:b0:82:1b:8c:bc:02:40:82:
fe:7e:30:7a:3c:02:7e:bf:94:d3:b9:4b:38:10:36:40:c7:a0:
e3:84:e3:e9:2e:2c:17:cc:8f:f2:31:32:e9:35:06:07:37:08:
98:88:93:ce:44:a0:37:36:f2:3c:4c:9b:8b:2a:41:c6:e3:6a:
e7:e0:a3:b5:15:bc:55:d1:a6:26:2b:fe:74:5d:41:16:50:ca:
30:18:89:55:b8:04:70:8c:94:55:d8:f3:13:6d:3a:90:7c:f9:
81:52:2c:e4:b8:a2:52:5d:51:43:dc:75:bd:58:87:d5:0f:a3:
46:f7:82:f1:b8:b9:79:a6:8c:a4:1d:71:ad:81:a9:1e:8b:1d:
46:0e:82:43:0e:ce:cd:80:8d:08:9c:84:18:21:ff:ab:6d:9f:
99:c1:27:e1:2c:d5:bb:25:5a:8d:c4:3c:98:b0:8b:55:08:a2:
72:0c:c8:f6:74:fc:9b:af:8d:d1:03:d5:f5:78:af:7d:3e:c2:
09:d4:58:64:ff:9f:bf:56:57:f0:51:8c:d9:94:21:9b:7e:e4:
06:9b:76:af:de:cf:24:60:ae:fa:7e:a3:47:73:2a:d2:97:2f:
7a:fc:62:4c:7c:56:d0:46:a5:33:24:ea:6b:fd:47:12:a8:cb:
aa:23:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:43:22 2025 by rpki-client