Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: ZcsNQuaiqPjtzOtk64s9PM+n6XFl39dWGuxmW62d4VM=
Subject key identifier: 88:1A:C7:82:4F:27:06:20:4A:E4:9A:0D:88:DD:C2:EE:A4:19:C1:50
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 0196BC0066F3601F37723C509528EC3C6EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0C26
Signing time: Sat 10 May 2025 21:01:05 +0000
Manifest this update: Sat 10 May 2025 21:01:05 +0000
Manifest next update: Sun 11 May 2025 21:01:05 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: Qsj4n7EDGQtJmk0iTclXg0DqALZUhPmSKSNkNL7E3gI=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:66:f3:60:1f:37:72:3c:50:95:28:ec:3c:6e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: May 10 21:01:05 2025 GMT
Not After : May 11 21:01:05 2025 GMT
Subject: CN=881ac7824f2706204ae49a0d88ddc2eea419c150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:e5:36:8d:d6:45:d3:10:20:db:ae:de:b9:
2d:38:d4:0c:42:2e:a0:de:5b:c9:58:23:3a:80:33:
41:47:02:87:b0:da:9c:cb:35:46:2d:fb:8d:75:f4:
63:c7:61:7c:33:24:b5:46:5e:c1:a8:27:04:e8:8b:
0a:77:c6:6a:3a:82:46:fc:b8:bf:e9:a4:3a:90:3d:
18:a7:97:5b:e8:73:ec:fc:32:a0:31:92:4b:32:55:
dd:3e:69:4d:cd:d9:8f:2e:52:10:73:94:0a:04:6f:
5a:75:9f:51:95:17:2c:53:e8:a2:52:82:73:b3:28:
c6:bd:9d:b1:10:87:76:58:cf:bc:c2:8e:ff:d8:d2:
4f:32:99:ca:4a:45:cc:b5:3b:40:a7:48:09:76:7c:
c2:e9:8f:a9:be:57:01:65:53:a6:6a:17:aa:36:df:
db:93:d0:a3:87:af:a1:58:a6:22:92:33:bb:98:26:
0b:00:dd:c2:2c:bb:2a:07:a3:88:a8:e0:12:1c:45:
51:75:34:d5:41:22:af:85:84:13:40:e3:f4:19:c3:
34:7f:c9:4e:b5:b9:e3:25:71:e7:e5:34:4c:e5:7c:
00:40:aa:2a:e8:1c:ec:c0:ea:60:89:71:6d:c6:a7:
3a:10:34:1a:8e:5f:0f:7d:a1:1b:f3:27:9e:e3:08:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:C7:82:4F:27:06:20:4A:E4:9A:0D:88:DD:C2:EE:A4:19:C1:50
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:43:1e:96:a5:f6:06:2c:63:15:54:75:70:03:54:df:17:
1b:e8:de:14:1c:01:83:f6:b0:d1:ac:96:eb:bb:7b:a2:80:86:
c0:6e:38:f8:ce:6e:07:93:ba:b9:54:b5:c8:88:93:48:ce:df:
b9:00:6c:fd:6c:c7:d6:b6:ae:11:89:af:70:23:ea:9b:8c:74:
00:66:46:d3:3c:79:40:ee:6e:92:78:79:32:7c:82:9c:16:01:
80:ba:e8:c5:77:f3:95:b3:54:2c:19:7d:23:06:52:de:23:e2:
71:b6:eb:e5:00:99:73:47:a3:03:1c:09:8d:dc:2f:78:18:52:
6d:16:ef:03:88:78:47:5a:18:c0:25:c8:ca:22:1c:0a:e2:9a:
ed:a9:2c:9c:53:49:dc:3f:15:d7:74:bb:2b:66:b8:a1:12:53:
2d:39:ca:3a:34:45:26:a2:c6:22:db:1e:06:3a:62:5b:55:be:
49:1e:78:03:95:c2:da:d1:97:12:47:0a:e4:dc:3a:cd:e4:51:
19:b0:6d:ca:9f:63:bf:d7:1c:1f:d9:68:a2:4e:ec:6b:f1:94:
34:51:e1:76:f3:6a:ab:b8:8a:b2:14:8c:59:21:a9:4c:74:11:
ca:26:db:00:92:a3:9e:f6:33:1b:18:5c:d4:44:82:50:48:cf:
51:4e:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:25:38 2025 by rpki-client