Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: rYwb3n2D9VxdTzM9Y08uGeXyRlHJUk7bjbmQO1vDfds=
Subject key identifier: EE:B8:1D:C3:DD:38:C6:C8:B5:3C:FC:95:65:95:E6:5E:92:EA:51:7D
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 0196A8E74272C88212B7C10C8516D7BFFCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0A4D
Signing time: Wed 07 May 2025 04:00:50 +0000
Manifest this update: Wed 07 May 2025 04:00:50 +0000
Manifest next update: Thu 08 May 2025 04:00:50 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: rBl+vQ+dHmumK5JxQXzBhLl2l9OVCqgiwu1+fCButsA=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e7:42:72:c8:82:12:b7:c1:0c:85:16:d7:bf:fc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: May 7 04:00:50 2025 GMT
Not After : May 8 04:00:50 2025 GMT
Subject: CN=eeb81dc3dd38c6c8b53cfc956595e65e92ea517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:3c:06:dd:51:ea:83:58:f5:04:c8:ee:35:
56:a2:92:a5:79:17:9c:40:c8:f0:09:a9:11:9f:22:
fe:02:36:14:32:e2:f2:c4:6a:a5:df:b3:99:66:56:
66:0a:6e:cd:5b:32:00:18:80:55:f8:58:22:03:d8:
87:d9:1b:7d:e2:a4:41:cd:95:fa:fe:08:37:c2:5b:
af:05:92:3c:f9:ce:5c:5d:61:f7:b9:ea:b3:38:0d:
c2:62:6c:55:d3:21:d8:77:48:02:99:f1:79:86:bf:
de:88:44:f8:aa:d6:bd:f9:fc:7e:b8:10:74:ea:df:
fb:b5:26:d1:2a:17:a6:31:c0:c7:bf:54:1a:e2:14:
86:26:5d:4a:41:b1:64:70:80:dd:fe:b5:8d:19:bf:
9a:e0:2e:bb:97:52:b8:82:b7:0f:88:5e:8f:cb:d0:
3f:7b:e1:bc:72:5d:9c:b6:fd:0d:47:fe:15:be:d8:
6a:ec:fe:9d:68:9b:d3:90:23:ac:5e:7b:f9:41:9f:
e0:3d:89:84:0e:d4:da:52:4d:c9:7e:6c:17:49:3d:
2e:36:43:ec:fa:b6:3c:e1:47:43:6d:1c:f8:17:f1:
29:a3:59:89:69:bc:a2:c7:a0:f8:df:ed:d0:94:8c:
dd:3d:08:ea:da:f1:fd:47:50:38:76:11:ed:93:8c:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:1D:C3:DD:38:C6:C8:B5:3C:FC:95:65:95:E6:5E:92:EA:51:7D
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:2f:dc:b6:ef:c0:6c:68:f2:4c:dc:1f:56:89:fc:e6:aa:
1c:fc:f0:aa:5e:fd:a3:36:d2:92:54:cc:2d:c2:db:b1:e8:6a:
76:5c:73:4f:ee:aa:d0:08:af:a1:64:c5:9f:88:b5:a9:47:eb:
7a:71:de:fa:ee:4d:b3:96:d5:ee:f4:1a:66:f1:2e:57:cf:88:
44:a0:99:f9:30:b1:ea:d4:0d:f9:6a:7e:06:7b:84:76:b8:27:
cb:63:e9:c1:0e:bb:c5:ec:fc:c8:43:7b:be:bb:c9:96:ef:f9:
dc:29:59:87:7a:ff:bf:b7:1d:a2:95:3f:90:6e:df:3f:4f:3d:
7a:b1:82:88:3c:b1:39:16:b8:ad:2c:0f:c1:d3:2b:5b:94:aa:
e2:a3:48:d3:d1:b1:c8:5f:c3:0b:ef:9d:f3:43:d2:1f:af:f0:
45:b8:2a:c8:15:9c:b4:3a:ed:c3:9b:a0:22:a8:49:7c:97:63:
3f:1d:42:26:14:17:2f:0b:18:fb:2f:65:82:29:3d:ce:d3:b9:
bd:7a:e8:da:3a:a2:03:60:8e:a8:21:74:ba:de:85:d9:48:3c:
06:dd:12:49:0b:76:a0:3c:79:3d:fa:ff:79:dc:7e:51:de:7d:
92:fa:0e:78:98:69:01:ab:79:44:af:0e:9e:1d:0f:07:b2:f4:
e3:1d:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:41:19 2025 by rpki-client