Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: NUFkQJu09NJ2HzxqkQZhkPM3w7snF6g8vgJxD3I+tSQ=
Subject key identifier: B4:1F:A8:13:E0:9D:D0:94:35:AB:57:01:BC:D2:D4:F8:62:33:FD:5A
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0196BDB7713E99F89171ED64D174D917F2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 05:00:37 +0000
Manifest this update: Sun 11 May 2025 05:00:37 +0000
Manifest next update: Mon 12 May 2025 05:00:37 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: OKIAbKYxtv/j8yeF5fBsbpmqCfz8fERS9OzUuLf+6Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:71:3e:99:f8:91:71:ed:64:d1:74:d9:17:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: May 11 05:00:37 2025 GMT
Not After : May 12 05:00:37 2025 GMT
Subject: CN=b41fa813e09dd09435ab5701bcd2d4f86233fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:a2:98:25:8a:ea:13:1f:a6:d8:ec:27:76:
35:01:18:fc:95:3a:f9:f6:34:34:22:90:d4:bd:5b:
6a:61:4b:b8:77:a8:49:72:e2:d8:f3:5e:65:6d:38:
5e:79:81:c3:52:eb:17:a6:d3:3b:7a:17:86:dc:bd:
4a:8e:fe:9e:5c:c7:1d:07:cc:b1:3b:5c:12:2d:b3:
a6:fb:a1:2c:8e:d0:ad:e9:36:28:65:41:83:43:e4:
af:81:73:df:b5:ab:20:4d:87:4a:c4:08:27:07:30:
aa:6f:db:f3:87:08:df:6a:a6:39:2a:21:d8:bb:d0:
a7:07:0c:96:b7:0b:52:b2:b4:f9:83:77:3f:97:ea:
0a:ec:e6:b9:da:5b:b7:b6:c8:d6:c4:af:2f:91:2a:
9d:fb:8b:b0:35:fd:63:46:c7:0e:3a:3c:34:da:ac:
b8:2b:15:5b:20:7d:c9:72:84:93:06:fb:a8:ee:71:
cb:3e:6b:c7:43:6d:5a:72:ef:7f:1e:f6:e0:73:a8:
c8:ff:cd:9e:cb:b2:39:6d:b4:41:20:dd:26:6d:e3:
cd:86:a0:c3:56:9f:6e:84:0e:fb:d5:eb:98:84:89:
3a:8e:fa:67:40:5b:6a:5e:96:87:2d:bd:3c:f5:76:
c3:f8:bc:6c:57:fa:df:59:b3:75:b1:d2:b9:b0:13:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:A8:13:E0:9D:D0:94:35:AB:57:01:BC:D2:D4:F8:62:33:FD:5A
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:68:a4:ec:44:ee:0b:a8:b5:84:9e:12:6f:13:c6:28:41:
c7:f9:b0:6c:14:73:40:e0:31:35:30:46:3c:dc:2c:fe:58:d1:
ae:19:83:7d:18:2d:c8:be:be:fb:8e:5e:98:0a:c2:e7:9c:71:
01:1d:5e:21:b0:e2:5c:f2:e2:13:f6:e6:46:42:99:4b:b9:20:
ae:df:d3:a0:aa:08:79:85:55:eb:f2:f5:1c:ab:a2:df:59:e2:
02:fb:c3:8c:62:21:e2:21:7a:41:2d:fb:2d:10:ea:f9:25:e7:
8d:46:7b:ba:ec:1c:a9:ea:fe:f6:60:0d:36:82:b6:81:f5:f1:
ba:56:4c:40:6f:88:34:34:54:1f:0c:da:d7:f6:77:c6:13:09:
cc:e8:f6:d3:12:ef:94:e3:33:e9:57:eb:46:47:19:69:d5:df:
53:66:9c:b2:e5:12:64:b5:dc:d3:fd:c1:a9:7d:87:07:54:f0:
94:5f:1f:10:70:22:2d:11:55:f9:fc:14:e1:81:7a:32:a3:6f:
c5:9f:b0:d1:d2:03:01:87:e5:a1:a7:1b:26:53:91:f6:75:59:
8f:4f:1a:12:41:1c:67:eb:6a:b5:2e:a7:b7:2f:93:56:77:35:
fe:3f:e1:f9:11:df:87:30:30:04:d9:94:0f:91:fe:0b:60:43:
cb:ef:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:22:03 2025 by rpki-client