Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: Ny+J2S1asfv44ErnemRLFQVTnMMN9AUTF48qKk6t9DE=
Subject key identifier: C2:45:7D:41:45:40:45:45:C5:2B:75:E6:B7:F4:9D:1D:91:B3:32:1A
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 0196B7EC63B2917D5EBED4659A60BF86B4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0C17
Signing time: Sat 10 May 2025 02:00:44 +0000
Manifest this update: Sat 10 May 2025 02:00:44 +0000
Manifest next update: Sun 11 May 2025 02:00:44 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: 1UvkS353MUxQhwuElOXsMD5ojl5kZ/S7ocZmXAs1miI=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:63:b2:91:7d:5e:be:d4:65:9a:60:bf:86:b4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: May 10 02:00:44 2025 GMT
Not After : May 11 02:00:44 2025 GMT
Subject: CN=c2457d4145404545c52b75e6b7f49d1d91b3321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:0d:86:37:47:2c:4a:c7:86:98:ea:45:8a:
7e:37:77:b6:d2:aa:67:5e:aa:5d:4e:ab:8f:4c:67:
f8:ad:21:cb:fc:82:00:98:ee:53:bc:20:bc:5c:51:
05:7a:d2:be:e0:cb:f4:41:81:37:23:51:90:76:9f:
4b:81:f2:40:a9:3e:ac:dc:8c:b6:d2:91:25:42:91:
de:7a:c7:c1:08:34:5e:3b:62:41:71:53:fb:6d:f1:
49:ef:91:9f:e1:9c:e0:f0:7c:e8:be:29:ba:9d:8a:
3a:df:f2:a6:6f:06:92:f1:e1:ef:97:d1:0c:ed:95:
53:20:13:23:53:84:aa:86:d7:98:62:3f:36:8b:8f:
47:aa:23:47:52:cc:bf:f6:6c:73:62:39:b6:d5:37:
8d:ba:5d:f8:1c:2b:1a:94:67:72:bd:9b:09:b7:56:
60:60:9b:cd:0a:81:53:0a:fd:06:63:53:65:70:cd:
9e:ad:6b:a0:14:5b:27:c1:53:45:5e:cc:a9:b2:9b:
7f:3e:eb:89:73:5d:94:8b:a4:0d:80:36:93:98:48:
89:8e:99:29:07:87:04:5c:ce:d0:dd:61:30:9b:2b:
a6:6e:0f:63:34:bb:e0:2f:e9:64:89:5e:b1:ae:e0:
34:61:2e:f0:7a:e5:e3:09:24:59:b8:c3:95:53:10:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:7D:41:45:40:45:45:C5:2B:75:E6:B7:F4:9D:1D:91:B3:32:1A
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f1:03:e1:8e:f2:fc:00:01:e6:3b:a9:21:ea:e4:c9:5b:2c:
81:68:7a:12:dc:4c:82:fe:e4:cb:ce:af:37:97:4b:8b:82:8a:
ee:cd:5d:59:c7:f4:c8:a8:a7:15:a7:3f:c8:66:96:de:8a:0b:
62:77:1e:f7:d1:c5:38:1e:8c:d1:10:b1:ac:92:c6:e6:ee:8d:
8f:cd:a2:12:27:d4:ad:69:fe:d0:0a:09:ed:15:f1:77:f8:58:
a2:a0:31:58:ec:8d:4c:6d:92:4e:b2:fa:a5:3a:80:02:38:9f:
0f:02:6b:71:44:a2:d1:ad:7b:aa:c5:0f:f3:60:ce:10:c9:48:
18:5f:9b:52:80:bd:44:3e:3b:df:9c:7c:82:70:e3:b8:f5:a4:
ae:ad:5b:ef:94:7a:ed:f4:30:6c:5a:24:9c:1f:cb:33:b1:4f:
c0:d4:3a:3c:61:dc:d3:94:16:03:c5:2f:ca:06:65:82:e4:47:
e9:f2:1b:06:62:06:e0:63:87:23:f7:a1:c9:c7:18:22:aa:6d:
b2:91:7d:a6:71:71:94:b9:07:10:d2:b7:d2:56:7f:44:ae:a1:
14:51:a5:e3:46:66:c8:8b:c4:e9:c2:28:2f:f4:3e:ab:df:c1:
15:62:4e:1b:b9:12:b3:e8:7a:33:2e:b2:8f:34:3e:db:42:49:
7b:db:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:50:57 2025 by rpki-client