Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: iINKa6TEAQLlq6Cv3KXaZfeSMcHc5X08IXNDSOwfRic=
Subject key identifier: 1D:D8:C0:B1:18:4F:35:97:94:25:0C:4B:68:34:3F:4E:77:6F:09:84
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 0196C238DBC0772AB1226FA9D24A09873ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 02:00:28 +0000
Manifest this update: Mon 12 May 2025 02:00:28 +0000
Manifest next update: Tue 13 May 2025 02:00:28 +0000
Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=)
2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: IE3yoFqvTr58OheqRLmntf0BiJNVbHPXk4Rf3mq/dHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:db:c0:77:2a:b1:22:6f:a9:d2:4a:09:87:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: May 12 02:00:28 2025 GMT
Not After : May 13 02:00:28 2025 GMT
Subject: CN=1dd8c0b1184f359794250c4b68343f4e776f0984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:6d:1b:9a:86:12:de:7d:f2:6f:c4:55:29:
8c:f1:fc:6c:78:41:14:f6:17:0e:9d:1c:3d:23:da:
9e:5b:26:e0:ac:de:0d:87:da:f3:77:a3:41:82:06:
56:89:66:35:fa:7e:5c:dc:12:a0:4e:34:e5:83:b0:
6e:4a:1d:17:a8:00:98:c8:c7:45:ee:e4:d0:5b:f8:
b9:37:a4:28:40:3a:78:c2:85:d4:83:05:8e:4d:f3:
3f:2e:f8:11:f3:30:58:7f:8a:4e:01:8f:5b:18:9b:
f6:2c:00:5e:0f:77:d3:f5:89:1d:af:af:dd:e9:8d:
f7:e5:6f:96:c7:a3:74:e4:a9:a7:b4:cb:53:e9:c3:
62:ec:42:be:ea:f3:75:61:0e:15:07:90:99:13:a9:
ba:a5:e2:25:94:c9:7b:af:04:ce:d9:9c:ca:47:2f:
a8:aa:98:31:f9:12:27:df:47:09:02:9c:0d:14:0d:
92:67:21:b9:d6:dd:22:63:5e:8b:77:b9:f6:9a:60:
c3:6d:9c:de:be:1a:a5:79:52:f8:a8:9b:ab:9a:c6:
1b:db:c2:1c:d0:e3:71:09:e9:6c:60:a3:f8:22:40:
44:4f:cd:f4:31:60:e8:37:7e:98:48:32:a9:7e:12:
c1:2b:6e:49:aa:80:61:bc:d0:05:6c:5c:72:9e:a3:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:C0:B1:18:4F:35:97:94:25:0C:4B:68:34:3F:4E:77:6F:09:84
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:e0:f4:4c:13:6b:93:32:5b:33:ef:f8:b4:cb:aa:27:e6:
22:77:d5:e6:20:f6:75:e8:55:72:95:a1:58:73:8d:11:90:77:
7a:89:84:df:f5:73:9c:15:e8:95:1b:52:44:1f:d7:8b:d0:a3:
36:d5:f1:62:f3:87:8b:37:f7:d0:2b:e6:9d:4e:60:83:cf:a1:
3e:89:0d:5b:f8:41:01:b3:61:99:de:58:d0:13:4d:fe:0a:95:
d0:27:91:2a:53:52:42:bd:1d:60:b9:09:10:d4:de:c3:bc:69:
74:d1:70:76:b2:f3:ce:17:4e:15:89:1a:f9:fc:47:ba:f7:33:
ed:d9:27:2d:69:e6:cd:c4:91:dd:09:f2:dd:a0:f6:cb:c4:19:
cd:5c:cb:04:5f:9e:23:5b:8f:6f:a6:f3:8a:4d:f2:31:73:34:
13:2e:1c:88:16:4a:ce:98:8e:44:30:78:b7:81:a6:4b:1b:92:
5f:50:1a:bf:40:1d:89:ee:28:56:82:0d:4e:89:ed:ca:9a:2b:
21:d6:1d:4e:41:b0:28:76:8b:76:11:7d:d8:d1:c6:36:b5:0b:
9d:98:b4:24:24:4b:b3:e1:0c:37:c1:a9:0f:00:11:1e:9f:82:
07:de:bd:ec:25:51:bc:28:b1:2c:eb:99:99:4d:38:70:5e:52:
6d:ce:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:24 2025 by rpki-client