Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: nDpuXDVim8x1MwhQ6aFiSBNrCKiQtpTkV5Q9Gcuzp7o=
Subject key identifier: 71:B8:76:A4:A1:E4:5B:BB:14:8C:1A:B7:13:D5:40:3C:A8:0A:33:AE
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 0196BA487F38DE03FE7B8F2B9AE2C7DC1845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 127D
Signing time: Sat 10 May 2025 13:00:35 +0000
Manifest this update: Sat 10 May 2025 13:00:35 +0000
Manifest next update: Sun 11 May 2025 13:00:35 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 2iPx4TzfnropDErS9JHTnhVOBOashpoecjzSG8lIYjI=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:7f:38:de:03:fe:7b:8f:2b:9a:e2:c7:dc:18:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: May 10 13:00:35 2025 GMT
Not After : May 11 13:00:35 2025 GMT
Subject: CN=71b876a4a1e45bbb148c1ab713d5403ca80a33ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:a0:06:0a:82:7f:84:00:00:a5:10:0e:49:
ad:f4:2c:7d:e7:e3:ac:06:f2:4c:7f:ba:9b:0e:e2:
e6:b6:29:15:3c:77:ed:2e:78:17:32:71:bc:1a:fc:
64:d7:61:d3:a0:d2:48:14:31:9f:d2:9d:03:38:e5:
43:76:9c:25:fe:ce:82:89:49:2c:6b:6a:be:1d:be:
17:65:68:f9:cf:ec:7d:5d:4d:70:cb:f5:49:8f:ba:
c9:8f:87:61:3e:fd:7f:1a:9d:16:7d:9b:f6:bd:9e:
3e:e7:80:1e:fa:14:12:cc:82:bf:91:1b:9c:3b:e5:
7c:b8:36:5a:a8:df:e9:9c:52:97:d0:f8:c9:c2:e2:
af:c1:de:e7:58:09:41:78:46:a7:06:e7:ae:e1:83:
c1:54:1d:51:6c:af:3e:be:98:37:80:6b:93:5a:3d:
7a:a5:4d:90:36:c2:14:59:db:3a:09:75:5e:26:a0:
17:d4:76:bf:b0:24:15:4e:2a:f0:eb:b0:40:00:ee:
f4:c0:f8:8f:f2:bc:98:41:0c:76:ee:1f:d5:85:a1:
ef:99:c7:42:d5:c5:87:74:cb:33:c6:e5:30:53:d3:
94:9b:6a:0b:c1:78:7a:72:32:01:c5:b1:84:b7:7c:
ff:70:1c:9b:4b:32:a3:89:1e:7f:79:43:65:40:18:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:76:A4:A1:E4:5B:BB:14:8C:1A:B7:13:D5:40:3C:A8:0A:33:AE
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1b:68:49:04:a3:61:71:85:a2:ce:7e:a0:3d:05:0c:8e:7a:
37:48:42:a8:b3:55:d5:1d:95:f4:fb:c1:cc:ed:90:d6:13:5c:
ef:78:7b:d9:d9:b2:4a:93:a2:52:8a:fd:37:91:fe:c5:71:08:
6b:30:c4:00:f4:84:11:a0:27:24:19:9e:67:e7:15:5e:02:69:
88:a9:74:b3:8d:41:31:c8:62:1e:9e:3c:2b:39:10:d2:cc:51:
b5:7d:cd:4a:d7:fc:c3:50:14:fa:4f:76:51:0c:36:5a:a0:ab:
d8:8f:cd:3e:60:c9:5d:da:0a:76:38:17:f3:23:4d:ba:cb:a8:
cf:ec:81:b3:a0:a0:0d:c2:68:37:33:7a:cc:4b:85:16:93:d7:
20:50:fa:6c:ff:91:af:21:2a:10:a9:e3:94:aa:d7:04:3e:db:
74:34:28:28:06:4c:20:bf:bb:b0:78:23:66:3d:6f:c9:60:e1:
4f:10:43:2c:2b:e1:6c:ce:e4:8b:ab:19:8c:be:d6:3a:aa:a0:
46:9c:f2:9c:ca:a9:75:35:ba:01:f7:3e:df:71:d5:c3:5e:2e:
c2:b3:f8:df:84:d3:85:4f:33:8a:d3:5f:d4:e7:c7:09:22:47:
ec:00:ee:47:af:b1:45:ea:18:3a:f6:f3:24:53:ff:16:68:85:
2f:75:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:13:44 2025 by rpki-client