Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: tgRUv5Gkv0gCsT7KfXBie+1tHIynzwecY2/JtPBwo7I=
Subject key identifier: F7:99:48:ED:B3:3D:B4:5E:D6:B2:F1:5A:AF:F9:55:4A:05:F5:81:BB
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 0196B9357D16B306128DA24BEA5634266A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 0CB9
Signing time: Sat 10 May 2025 08:00:12 +0000
Manifest this update: Sat 10 May 2025 08:00:12 +0000
Manifest next update: Sun 11 May 2025 08:00:12 +0000
Files and hashes: 1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: jg3Gl/J5gBcZKJaF1Jt/dwBpOHiINiyfv1tvKTS0+mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:7d:16:b3:06:12:8d:a2:4b:ea:56:34:26:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: May 10 08:00:12 2025 GMT
Not After : May 11 08:00:12 2025 GMT
Subject: CN=f79948edb33db45ed6b2f15aaff9554a05f581bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:d5:28:b0:9e:41:0e:43:13:20:8b:3d:f3:
91:eb:b2:32:44:3c:81:f4:1a:44:c4:89:32:05:f2:
d6:ff:9c:2c:67:f1:4d:f0:61:f5:3a:18:90:7d:52:
24:36:37:e6:1c:2c:72:15:28:1c:a1:1c:46:6d:7d:
ac:c1:94:79:fc:21:54:ab:3f:f7:cc:0a:e2:bd:67:
86:02:bb:54:3c:79:5f:07:94:b8:07:f3:07:45:1a:
ab:11:2c:88:d6:95:f4:e7:ee:a4:a6:f2:71:95:29:
c3:a0:a4:47:e0:b4:38:ae:61:72:dc:59:0e:f7:69:
36:0c:36:fc:f2:41:c4:7d:82:6f:c0:6d:07:9e:e1:
3a:19:e7:9b:bf:57:5a:11:3a:d9:71:00:c7:7a:c3:
67:d0:bd:2a:c8:d4:ee:0a:17:29:fe:49:6b:d4:72:
e3:fc:0d:b9:81:d2:d7:38:21:96:ae:24:f1:f4:e0:
e7:74:09:c5:fa:f1:d2:9f:91:e5:1a:f8:66:ec:46:
0d:3a:34:e8:19:76:54:96:64:d9:75:90:5c:b0:48:
02:b3:7c:e7:d5:6e:41:55:4a:32:6c:a7:46:bd:8f:
54:b0:19:cc:30:e1:d6:65:8d:56:6f:5b:d9:2d:6f:
8f:dc:1e:cb:4d:19:78:46:90:e4:d8:47:26:bc:2f:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:99:48:ED:B3:3D:B4:5E:D6:B2:F1:5A:AF:F9:55:4A:05:F5:81:BB
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:44:a8:96:5c:0a:75:75:0f:89:bc:e6:a1:14:6a:b2:fa:
37:17:d9:ac:96:7f:b3:59:34:64:f6:2c:b3:74:85:93:7a:83:
ed:c7:b2:c3:0e:63:17:87:d9:dd:8b:24:b4:51:ae:5c:d3:c5:
96:c5:48:83:90:bc:74:d9:ba:07:d0:10:62:ca:a4:b5:06:87:
7a:03:65:81:fb:53:09:e5:cc:0c:6d:7e:46:b4:75:0a:8c:60:
bb:8c:c6:46:94:95:7a:1e:70:8f:e0:72:2a:a1:6a:18:ac:a6:
e0:6d:35:b3:1e:a2:67:51:c9:86:81:c7:23:aa:25:c3:b9:df:
e2:35:96:16:75:69:6b:b9:8c:a1:61:69:24:59:1e:0d:64:fd:
90:a0:53:6f:50:a3:4f:00:20:05:18:ed:be:8a:94:69:2c:ec:
6d:42:68:79:a9:6f:e1:6f:29:9d:f0:14:0e:b6:a2:89:c0:e1:
ed:04:a7:ef:ae:6a:be:4e:44:22:a1:fe:a2:ec:0d:a4:c3:6f:
4b:2d:b0:a1:ba:bf:00:60:35:84:16:c1:ce:d9:dc:fb:03:97:
d8:84:b2:fb:7e:de:5e:20:7d:11:6b:61:49:0c:67:12:f7:0e:
cb:c7:ac:76:35:57:d2:de:eb:e6:40:ce:f2:e3:e9:86:95:fb:
87:ca:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:11:42 2025 by rpki-client