Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: Ehknn/op+MUc8HOc+Jk8qNV8No9CuxQ2aBSz4h8ewn8=
Subject key identifier: 13:8A:1A:21:B4:AD:4C:AA:0F:69:02:3C:D9:8B:87:06:20:69:DB:CC
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 0196C3F099016977BF025FBD4F60494B0D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 14F0
Signing time: Mon 12 May 2025 10:00:47 +0000
Manifest this update: Mon 12 May 2025 10:00:47 +0000
Manifest next update: Tue 13 May 2025 10:00:47 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: Ogjl1IwxcY0INT0hoc3V-UZ1sHo.roa (hash: w0QqL1VQBTrf30Omc7SiLZ4gKL+da0byGUFGvs9DV9w=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: lP3adw2gZ2wBrOsQl0vpdtjxRa9JTIhim8M/tMQGcy8=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:99:01:69:77:bf:02:5f:bd:4f:60:49:4b:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: May 12 10:00:47 2025 GMT
Not After : May 13 10:00:47 2025 GMT
Subject: CN=138a1a21b4ad4caa0f69023cd98b87062069dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:63:7b:98:dc:7f:2b:ae:f7:c0:10:70:d3:
3b:e3:3a:0e:8c:b0:36:e7:cb:d2:00:41:b4:e8:71:
57:95:1b:78:67:1e:db:26:5e:cd:84:5d:d1:3e:7e:
bd:bf:fb:23:0c:a8:53:d4:15:a4:d8:59:fc:8e:82:
01:15:e4:d9:db:a7:9d:29:5e:41:38:a8:1a:1d:d5:
4b:65:bf:f4:14:f6:2d:07:bd:b2:9b:a2:7c:1c:19:
05:c5:53:23:72:2b:ec:34:4a:9e:ca:a1:74:57:56:
2c:28:4c:ad:96:0a:59:2d:d3:96:b0:4d:dc:e4:b4:
5a:31:3b:df:43:b4:87:a9:b4:9e:6b:a3:1a:eb:fd:
54:9f:f8:86:ab:c0:7d:9d:af:4a:54:51:ad:1f:fb:
d6:d1:71:f3:3b:e4:86:ea:27:46:e8:19:d3:29:2d:
0e:9a:90:6b:80:e0:8e:51:53:45:ab:71:c6:9e:2d:
95:60:17:86:5f:d2:ca:f3:95:2b:83:75:8e:62:9a:
ad:81:f3:b3:69:71:a6:60:a6:41:9d:7b:f1:fa:f1:
f5:60:0e:15:35:06:08:4b:92:14:dd:a5:11:49:86:
fb:07:95:95:07:0b:11:5c:70:2f:20:fb:9c:da:1e:
ca:1a:f9:64:c0:f4:d1:2e:6a:42:aa:54:f3:79:c3:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:1A:21:B4:AD:4C:AA:0F:69:02:3C:D9:8B:87:06:20:69:DB:CC
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:19:d2:2a:39:f2:95:ea:66:c5:3e:64:28:92:e4:bd:1e:2e:
58:16:45:93:02:3b:bc:ef:28:7e:ad:c1:19:9b:b0:4d:80:d7:
cc:47:92:52:5f:10:9f:02:7f:da:fa:10:08:af:5d:f3:1e:57:
ab:e4:a6:8d:31:bf:cf:c9:73:43:b5:2e:17:22:92:1a:79:2a:
20:86:10:5d:91:06:51:6f:71:4e:f5:59:e7:02:d4:29:18:26:
a0:98:ec:59:fe:72:bf:c9:38:ff:6e:09:30:14:ea:05:69:88:
16:fd:8b:c1:5b:07:23:a0:8e:d4:78:0c:d4:37:17:a5:e6:ed:
46:e1:58:c0:bb:c4:82:c8:bb:07:65:4a:a2:b5:4e:33:3f:1b:
f8:65:d5:e5:84:83:19:68:52:cb:be:36:bd:2c:94:51:ff:12:
c4:1f:5c:49:fb:36:92:58:ff:fc:7e:82:a0:8d:24:0e:97:bb:
02:2b:db:63:6c:36:e6:bb:7c:df:34:ae:d1:27:dc:28:d2:b4:
c2:af:91:26:b2:1a:c9:b5:b8:30:cb:8e:24:ed:2c:1f:bc:5a:
94:aa:93:67:fa:99:9e:6b:f3:79:06:19:c5:79:d2:31:50:d2:
91:42:52:bd:6d:42:ae:3c:5b:f2:24:24:dd:d4:db:4b:ba:d0:
34:f8:8b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:28:45 2025 by rpki-client