Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: zO0Fnpfa4M66978M7QajBaUNuT9AlVfQSXSZ6d9ruZk=
Subject key identifier: 98:D7:B1:34:E7:14:91:25:27:D4:88:7B:B7:C9:D5:E7:B4:0C:46:63
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 0196AE0E14D5C34ABA8C42E9B6340B25AF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 04:01:20 +0000
Manifest this update: Thu 08 May 2025 04:01:20 +0000
Manifest next update: Fri 09 May 2025 04:01:20 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: TOZaBVmw1h1C+NOGk+PXICkKsNDdS52yn76kpnp1azM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:14:d5:c3:4a:ba:8c:42:e9:b6:34:0b:25:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: May 8 04:01:20 2025 GMT
Not After : May 9 04:01:20 2025 GMT
Subject: CN=98d7b134e714912527d4887bb7c9d5e7b40c4663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:9e:f4:1e:91:35:50:33:4e:1a:ad:b0:48:
32:3b:28:0d:51:d2:31:23:41:b1:29:bb:36:37:22:
c2:40:ec:df:83:e0:bf:ab:29:c8:bf:5a:e4:2a:3c:
f8:ff:03:4b:39:45:ee:6e:f2:05:a9:69:79:76:dc:
5d:3f:a5:da:3d:68:5f:70:5f:9f:05:a0:3b:9c:ed:
73:8b:81:90:23:e4:1b:1b:e6:3d:35:be:6c:e7:65:
89:74:14:48:1e:62:a1:f1:56:b5:13:2f:5f:9e:63:
03:dd:e5:ac:fd:fd:08:de:37:83:9d:80:be:88:00:
7e:5d:a5:fd:36:d9:c9:2c:4b:a6:b4:e0:dd:1c:a5:
f8:65:1b:d8:90:8b:c3:cd:fd:88:59:73:50:a9:e9:
98:08:2d:55:13:11:65:a0:f7:b2:91:c4:eb:76:01:
14:fc:6a:ba:f5:06:8d:11:b0:d5:f3:18:82:1d:58:
83:bb:f6:12:f5:55:55:ff:c0:64:61:e8:fd:d9:e9:
b9:95:0d:9c:61:28:36:ee:d2:59:d5:a6:ed:df:b6:
88:89:64:ae:ad:09:c0:d4:e5:5a:1c:2e:2f:8d:02:
1e:7b:1d:e8:03:11:c0:4f:bf:54:30:f7:2b:ec:18:
00:c2:01:df:8d:a7:22:fc:42:65:aa:1d:b4:01:92:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:B1:34:E7:14:91:25:27:D4:88:7B:B7:C9:D5:E7:B4:0C:46:63
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:05:e8:b6:9e:40:f1:14:8f:49:3d:a9:f0:cc:d5:d0:24:cf:
f1:3b:95:3f:3f:65:de:0c:20:56:43:e4:f5:e6:da:cc:c2:9c:
93:23:08:dc:c9:b5:99:4b:67:f2:e3:6f:e6:b0:5c:7e:9c:53:
b0:57:b2:df:fe:57:1c:19:45:f8:ac:7b:0a:5a:5f:ac:54:51:
fc:6a:ba:94:b3:25:08:0a:cb:45:f7:93:6e:92:3c:00:07:d3:
d1:5c:f0:e1:86:24:ff:87:3d:0f:ff:2d:4f:60:d8:52:40:24:
0d:a3:76:83:90:13:83:63:cb:54:5c:f8:44:90:e8:23:c6:4e:
82:7a:26:50:86:c2:cc:e9:de:5d:ac:c0:71:85:25:c0:f0:5f:
1b:9f:52:94:45:6e:2e:19:83:1e:a3:45:2f:14:e7:1b:8e:dc:
05:c6:be:6c:27:89:a2:e8:26:fe:d4:1c:89:e9:b4:12:ac:33:
09:d1:8f:8b:d1:f1:9d:34:ba:44:ec:3e:5a:b3:77:5e:67:2b:
e9:5a:9f:d8:f0:b0:4d:d8:28:80:ba:dd:ca:5e:f2:1e:e9:4c:
2d:ac:13:aa:03:e6:8e:03:4a:92:04:1e:a1:6d:cd:3d:5c:f0:
2b:e8:ec:87:ab:cc:8e:01:e6:7b:e0:47:8a:71:d5:57:2f:d3:
5f:64:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:09:43 2025 by rpki-client