Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File: g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier: 0XSI0TnitjXCdcRf+hWbwojAoMLohJ92lTapfvnwNFM=
Subject key identifier: AD:58:A7:0C:54:2D:17:43:D9:37:25:F3:FA:30:1F:1D:72:27:D5:F2
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 0196D88A2862767798C1F6EF1FFFE7B4E96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number: 06B4
Signing time: Fri 16 May 2025 10:00:55 +0000
Manifest this update: Fri 16 May 2025 10:00:55 +0000
Manifest next update: Sat 17 May 2025 10:00:55 +0000
Files and hashes: 1: En8-GoJ8b8wzWMOZSSvYdOC_d0Q.roa (hash: PL43OakReMXHfp4mMkhTD4X7qZfQiScwqWGHnEOSCsQ=)
2: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: vqM5f5ib1bN5mCJSiZJxHfu6iVvi3hut0lSkV13vyVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:28:62:76:77:98:c1:f6:ef:1f:ff:e7:b4:e9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: May 16 10:00:55 2025 GMT
Not After : May 17 10:00:55 2025 GMT
Subject: CN=ad58a70c542d1743d93725f3fa301f1d7227d5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:bc:2e:0e:e4:22:2a:dc:1e:e7:a1:28:25:
95:05:f5:90:72:07:2f:0d:ae:22:75:93:e0:8a:10:
3c:c6:9f:30:e1:76:9f:a4:63:49:67:6a:2d:6f:c4:
e7:55:f7:0d:f6:30:b7:a2:2a:8c:e5:b7:7b:df:ae:
88:7b:43:5c:00:4a:83:61:1b:13:c7:27:9d:d4:e2:
75:51:22:10:3c:25:86:e0:28:ce:9f:40:88:89:87:
39:24:d7:cc:cb:85:e1:29:6f:db:ef:f1:0a:41:07:
61:1c:20:c1:3c:51:e7:df:fc:a2:3f:0f:ff:a8:8b:
ee:5c:92:80:36:a6:08:63:bf:f5:04:cf:eb:9a:22:
82:55:66:fe:8b:fd:74:03:da:bd:52:4a:07:95:27:
b5:2b:87:e3:fa:64:8c:1e:7e:f0:d8:e9:77:65:31:
50:b3:ed:a1:5a:44:25:c2:bf:80:2d:a2:02:7e:d2:
c4:c8:52:51:61:23:ac:7c:4d:82:66:e3:6a:ac:aa:
f0:75:86:47:ac:91:68:47:c1:af:02:38:d4:2a:73:
25:60:c4:0e:93:e6:7e:84:f5:39:f1:2f:9a:6c:3b:
08:1f:34:29:fa:76:9b:2c:41:c1:bc:99:02:fd:6a:
d7:ec:e1:9e:86:c0:f8:76:34:82:fc:25:46:f4:b0:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:A7:0C:54:2D:17:43:D9:37:25:F3:FA:30:1F:1D:72:27:D5:F2
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:52:48:4c:95:44:e4:e5:ef:65:07:3d:1f:b8:4b:01:6d:4a:
62:df:f9:c6:7e:ad:91:55:9b:5f:0a:67:bc:3f:ca:74:ce:8c:
53:cb:85:e1:46:eb:d7:23:89:71:30:45:fb:f0:e0:75:77:fc:
99:96:0e:a8:e6:3a:54:29:c5:13:3a:9c:91:af:70:81:97:52:
1b:84:dd:28:87:32:9d:6c:05:4b:61:63:78:c6:81:49:8f:76:
53:cb:b1:03:69:c9:24:cd:1c:08:ed:a4:95:41:3d:86:e5:b1:
c3:93:ff:01:0d:29:fd:2f:e6:3e:4a:c1:96:b5:e0:de:e3:b0:
48:37:0e:db:2d:a2:5a:72:05:62:10:3a:b0:79:a3:a4:0e:00:
0f:6f:8a:b7:f5:5f:44:84:3c:2d:f2:15:df:49:5e:db:b1:2c:
97:86:73:8a:da:8f:fe:79:ee:f5:b5:00:5c:94:69:52:22:53:
c2:ee:58:e9:64:67:4e:06:a1:ee:9a:ac:4d:26:a2:99:60:f9:
af:ee:aa:b7:e6:55:0f:48:f1:b7:d0:6f:68:9d:cf:80:38:58:
3e:b8:06:19:0a:f9:37:b9:e8:08:37:64:4a:ab:6b:56:e7:be:
9e:19:3d:3b:ce:65:f9:5f:f1:e3:b7:82:fc:ba:bd:a2:9b:08:
c2:2e:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:53 2025 by rpki-client