Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: 02DsBDdO6eqAqhpDl2Q+Tm30eWCIdbWHl01bcVl3ou4=
Subject key identifier: 35:E9:D4:FD:34:60:BD:07:A1:EA:EB:C9:0E:34:A7:AE:A9:AE:DF:80
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 01965FF26621BD4844ED7FE13B58E177C57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1501
Signing time: Wed 23 Apr 2025 00:00:43 +0000
Manifest this update: Wed 23 Apr 2025 00:00:43 +0000
Manifest next update: Thu 24 Apr 2025 00:00:43 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: XEwT5Q9NbGlX9X7MLOkN2RS1/PBy5HTenaFqj0/l//Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:66:21:bd:48:44:ed:7f:e1:3b:58:e1:77:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Apr 23 00:00:43 2025 GMT
Not After : Apr 24 00:00:43 2025 GMT
Subject: CN=35e9d4fd3460bd07a1eaebc90e34a7aea9aedf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:20:ba:5b:b8:d9:a4:11:d0:49:8e:cd:db:
29:e0:00:6f:85:b8:fb:1d:42:39:c1:16:8f:c5:b9:
d7:8e:d8:aa:26:62:1c:cd:0f:4a:b7:0b:1e:30:23:
bc:43:78:db:b5:d8:a8:aa:ca:8f:33:63:74:22:f9:
1e:df:88:b3:20:be:85:34:cf:3e:f8:ad:a2:57:c7:
8f:4f:37:11:a5:fa:1f:b2:b0:ce:04:87:32:5f:f6:
24:8f:56:1d:b7:74:1b:86:fe:a1:53:c0:f3:12:5b:
11:b2:1a:87:ad:ca:4f:9a:45:d4:0d:86:83:4e:f2:
15:6d:77:9d:2c:86:22:cc:39:01:29:78:56:03:51:
f7:63:ba:ab:ba:32:cb:9c:f8:26:e2:00:72:bd:07:
5e:8d:d1:5b:df:41:86:31:fd:54:1e:d7:2f:c1:4f:
ef:6f:34:77:2b:7b:22:53:b8:c6:e4:82:04:3d:a1:
20:09:31:17:e5:ef:49:2d:4b:46:e6:0d:dd:b6:7f:
ca:07:02:db:5b:49:1e:c1:43:35:3b:b4:de:74:95:
21:3d:ea:f1:fb:5c:39:a3:4a:89:bb:e1:6d:82:50:
bf:e4:a7:ba:ea:d5:f3:64:f2:ca:dc:9f:ff:d9:d6:
91:0e:0b:21:a0:eb:50:45:3f:44:f7:13:66:e3:ae:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:D4:FD:34:60:BD:07:A1:EA:EB:C9:0E:34:A7:AE:A9:AE:DF:80
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:32:f1:a8:5c:64:ae:fe:10:6e:56:23:cc:ab:13:07:7b:07:
ba:a3:9a:79:83:20:4a:0a:fd:a0:78:46:f4:73:db:03:2c:cb:
cd:d2:a8:6f:21:57:d2:59:6c:00:36:56:b5:1d:62:f5:a3:fe:
f3:8f:e6:33:af:f2:d3:5e:82:5a:b5:5e:45:54:1a:2a:8b:07:
80:f3:a3:ad:52:0b:72:20:04:64:bd:76:09:49:d7:d1:7e:92:
c3:66:2d:a9:16:ff:ab:5d:0f:98:53:f4:16:a8:90:5a:0d:3f:
90:e1:c9:06:cb:89:a1:d8:7e:d2:90:85:39:71:2d:39:a4:10:
08:33:57:ff:e2:f6:14:2b:1d:68:bc:a2:ae:ff:cd:19:46:cb:
2f:55:54:51:26:66:4b:6c:fd:5f:ad:5e:9b:21:58:4e:72:e0:
7e:b8:fc:f6:5c:32:35:8b:ac:59:bc:3a:79:12:b5:5c:6b:31:
e5:38:35:34:b7:83:15:46:2f:c4:3c:1b:bc:04:0c:91:bd:a4:
ad:13:c4:e6:04:a1:a7:28:7d:d3:df:65:1e:8d:de:ca:b7:41:
bf:19:21:17:28:36:f9:75:a6:6c:30:ae:02:14:ee:a0:35:9d:
9a:f4:9c:86:2b:46:a6:fc:59:fe:e2:ba:d3:ad:78:0d:48:c1:
7d:ac:fa:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZf8mYhvUhE7X/hO1jhd8V7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2
Yjc2MjYwHhcNMjUwNDIzMDAwMDQzWhcNMjUwNDI0MDAwMDQzWjAzMTEwLwYDVQQD
EygzNWU5ZDRmZDM0NjBiZDA3YTFlYWViYzkwZTM0YTdhZWE5YWVkZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfUgulu42aQR0EmOzdsp4ABvhbj7
HUI5wRaPxbnXjtiqJmIczQ9KtwseMCO8Q3jbtdioqsqPM2N0Ivke34izIL6FNM8+
+K2iV8ePTzcRpfofsrDOBIcyX/Ykj1Ydt3Qbhv6hU8DzElsRshqHrcpPmkXUDYaD
TvIVbXedLIYizDkBKXhWA1H3Y7qrujLLnPgm4gByvQdejdFb30GGMf1UHtcvwU/v
bzR3K3siU7jG5IIEPaEgCTEX5e9JLUtG5g3dtn/KBwLbW0kewUM1O7TedJUhPerx
+1w5o0qJu+FtglC/5Ke66tXzZPLK3J//2daRDgshoOtQRT9E9xNm465ChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXp1P00YL0HoerryQ40p66prt+AMB8GA1UdIwQY
MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt
YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh
LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzLxqFxk
rv4QblYjzKsTB3sHuqOaeYMgSgr9oHhG9HPbAyzLzdKobyFX0llsADZWtR1i9aP+
84/mM6/y016CWrVeRVQaKosHgPOjrVILciAEZL12CUnX0X6Sw2YtqRb/q10PmFP0
FqiQWg0/kOHJBsuJodh+0pCFOXEtOaQQCDNX/+L2FCsdaLyirv/NGUbLL1VUUSZm
S2z9X61emyFYTnLgfrj89lwyNYusWbw6eRK1XGsx5Tg1NLeDFUYvxDwbvAQMkb2k
rRPE5gShpyh9099lHo3eyrdBvxkhFyg2+XWmbDCuAhTuoDWdmvSchitGpvxZ/uK6
0614DUjBfaz6DA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:36 2025 by rpki-client