Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: 30fDSaFFsZfc4UfdH25+mkKbfu5OFYhp80YkM4Jctmg=
Subject key identifier: 49:F3:0B:53:1F:E3:73:49:F4:38:1B:25:61:A2:5E:00:20:DC:C1:4F
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 0196A208E7BB8D20710EC85FFCF990916B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 0423
Signing time: Mon 05 May 2025 20:00:14 +0000
Manifest this update: Mon 05 May 2025 20:00:14 +0000
Manifest next update: Tue 06 May 2025 20:00:14 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: sKHfFwcTiG7kgOj1pMYAK3cL+n8ZaxkTaOAGdMCf1wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:e7:bb:8d:20:71:0e:c8:5f:fc:f9:90:91:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: May 5 20:00:14 2025 GMT
Not After : May 6 20:00:14 2025 GMT
Subject: CN=49f30b531fe37349f4381b2561a25e0020dcc14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:13:59:bf:28:9c:7d:0f:a6:97:14:1b:85:
97:e1:16:84:10:86:56:1e:a5:af:30:99:a6:f8:73:
8f:eb:05:1b:57:78:dc:00:34:9d:bd:8e:89:72:2a:
13:f1:3a:81:c3:e2:7c:1b:99:b3:c8:5b:fd:52:f1:
b7:89:ad:8d:d0:2c:e5:1e:59:ff:79:cd:ab:7b:5e:
dc:24:62:d8:ca:31:d9:3c:c9:74:c0:60:f0:9a:7d:
f4:3f:59:a9:1c:c3:83:86:cc:79:bb:08:b2:33:ee:
1e:f9:5a:36:3d:00:a5:3b:6c:96:1b:7f:30:63:1f:
a2:1b:1a:37:75:87:f2:55:02:39:fb:b7:81:45:40:
7b:a8:0d:78:73:7d:79:4b:26:71:1b:c7:98:03:6e:
e0:59:17:a7:69:c3:e7:f5:fe:27:11:94:dc:86:d4:
57:9d:14:e6:cc:d7:05:b8:13:91:ae:b5:d9:8c:90:
d3:92:a7:bc:9b:31:74:8e:41:11:4b:3c:41:56:f3:
0e:08:2f:e8:ef:e4:91:e3:45:2a:dd:c1:49:13:fb:
32:61:fa:59:42:3f:0a:5a:1d:f0:ba:fc:6e:87:4b:
11:04:2b:81:aa:8e:0c:bf:7b:58:fb:80:a3:65:ee:
b4:e7:72:7d:d3:25:9c:6f:3e:d2:6a:d4:03:f1:89:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:0B:53:1F:E3:73:49:F4:38:1B:25:61:A2:5E:00:20:DC:C1:4F
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:46:a5:df:db:7d:8c:56:4a:17:fd:99:40:5f:99:b1:f1:62:
5b:08:e9:75:c0:6d:8a:8e:f3:6b:75:26:d3:87:db:4d:df:dd:
fe:73:e7:35:74:94:1d:15:5a:33:9e:e3:4f:2d:8e:bc:1a:5d:
c6:66:0f:2d:03:6f:5b:35:42:59:d5:75:1e:c3:05:27:e7:ce:
ab:29:d1:93:da:bc:c5:c1:aa:d3:32:bd:4c:22:3c:61:54:35:
ae:76:cd:d0:ae:c7:59:06:20:3d:58:7d:91:31:4e:f0:c6:7f:
f0:2f:69:3c:6e:af:07:28:39:f8:c0:46:57:3a:d9:b9:e6:08:
33:bd:f1:42:4c:53:20:8d:f2:fb:b6:84:fc:6d:c3:47:b0:87:
a6:30:69:9e:91:8f:88:ea:0b:61:14:87:c9:16:00:dc:24:2d:
28:99:4e:e0:18:7a:84:63:64:cd:1b:14:61:18:48:55:e7:be:
af:95:75:af:d3:d2:bc:6c:85:92:44:40:1e:ea:b0:3a:4b:60:
87:dd:56:e0:81:db:c6:54:da:a6:ed:cb:7e:8f:b8:6e:80:49:
ec:bb:54:23:89:41:a7:19:35:74:a5:0c:81:8b:d9:0d:b1:58:
fa:a8:7e:b7:1a:50:4a:ee:de:3f:74:a7:f2:80:bf:d0:f4:78:
69:ce:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:49:49 2025 by rpki-client