Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: H9qf7SM1aeaPyBO3+A5cqR0cLioOorJf/hi6sFYDdS0=
Subject key identifier: EE:11:05:F8:6C:78:91:DB:61:FE:F9:8B:13:04:60:02:F1:92:DD:B9
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 019653B6E2B497879124A655F57CD4403187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 0695
Signing time: Sun 20 Apr 2025 15:00:16 +0000
Manifest this update: Sun 20 Apr 2025 15:00:16 +0000
Manifest next update: Mon 21 Apr 2025 15:00:16 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: weg3ioHMn2qrdZPdkIo82tF7gYipcFxT+5WXgjtG8Bs=)
2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:e2:b4:97:87:91:24:a6:55:f5:7c:d4:40:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Apr 20 15:00:16 2025 GMT
Not After : Apr 21 15:00:16 2025 GMT
Subject: CN=ee1105f86c7891db61fef98b13046002f192ddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:d2:32:e5:37:63:16:e7:8f:88:70:1e:fc:
f8:af:f0:e3:89:8e:e6:14:d7:8c:df:90:ed:35:1a:
08:c8:f8:90:a4:8d:44:a5:f0:d8:68:10:2c:a9:2b:
90:28:a3:fe:40:2c:e8:97:36:b8:02:7e:a2:42:d7:
16:14:3d:04:84:9c:a1:b5:e2:c0:e9:7c:3f:9b:4b:
5b:f2:ec:07:18:c7:57:4b:f5:0f:a7:8a:c0:6e:4d:
02:e5:12:29:eb:de:7d:11:17:ec:73:ee:af:ce:12:
3f:a2:41:22:c7:79:76:e3:3a:cc:e6:82:23:b3:5c:
f9:d2:4d:e8:92:07:98:70:b9:21:f3:a2:54:e2:73:
6f:65:4f:cd:b6:03:7e:4f:0c:a4:04:80:47:97:e7:
f3:98:b0:dc:08:98:32:ef:73:9a:18:7b:b6:b1:96:
bc:0e:f2:c8:fc:a5:17:4f:66:8d:ca:5c:4b:95:3f:
b9:3b:33:dd:84:7b:33:eb:7d:84:ea:4a:8d:d9:cd:
82:a1:cd:ef:56:d8:a2:d3:93:dd:e6:2c:79:e0:d0:
e1:11:58:f8:71:d1:52:cc:cc:22:57:de:26:59:2d:
46:3b:9b:3f:50:e9:94:a0:4c:d6:43:cc:bf:40:95:
a9:fd:55:71:e6:af:cf:3b:a5:a9:5d:80:7d:13:66:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:05:F8:6C:78:91:DB:61:FE:F9:8B:13:04:60:02:F1:92:DD:B9
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3c:8f:c9:7d:5d:61:11:58:7c:9e:9a:a3:98:af:b8:bb:96:
e2:5b:1c:00:aa:08:f2:b4:d5:1f:3f:49:47:37:a4:6e:79:a7:
95:e0:cb:23:9c:6d:03:a2:7d:df:46:0d:40:52:5a:1c:27:41:
c0:12:69:97:a0:b6:22:6d:70:4b:b0:fd:a1:d5:34:f0:16:4a:
68:51:31:fd:05:0e:36:ca:a6:be:45:08:c9:f1:86:c1:5e:a9:
39:66:30:0a:8d:7c:2a:6e:c1:4f:a2:30:24:54:79:a2:c8:9d:
29:fb:b3:4f:58:1a:18:ee:47:f3:0b:65:99:dc:d6:69:54:85:
6d:bb:e5:34:87:15:f1:df:19:16:fd:29:bc:ed:5b:b6:45:d2:
59:cf:e0:4f:ab:57:19:0f:ab:a8:20:73:82:b0:bf:f4:1a:2c:
d0:a2:14:56:36:66:f0:2e:62:9d:67:9c:66:58:2a:90:5d:0c:
f3:d1:b1:64:f6:1a:3d:4d:1e:b5:1c:69:8f:43:5e:e8:e0:dc:
63:13:a7:46:0c:2b:38:67:28:af:82:0f:2f:40:40:a3:0b:1f:
fb:8f:c3:73:fd:4b:20:d8:56:1a:c4:a0:db:0e:c8:b4:07:91:
b5:ed:78:b3:82:64:e4:33:c0:d2:5c:da:8a:66:7b:65:42:c9:
a2:67:d9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtuK0l4eRJKZV9XzUQDGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDZlMzM4NjAxNzFlZjZlYzYwZWJjZmM1ZWM1YWM5MWMy
NTc1N2MwHhcNMjUwNDIwMTUwMDE2WhcNMjUwNDIxMTUwMDE2WjAzMTEwLwYDVQQD
EyhlZTExMDVmODZjNzg5MWRiNjFmZWY5OGIxMzA0NjAwMmYxOTJkZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlnSMuU3Yxbnj4hwHvz4r/DjiY7m
FNeM35DtNRoIyPiQpI1EpfDYaBAsqSuQKKP+QCzolza4An6iQtcWFD0EhJyhteLA
6Xw/m0tb8uwHGMdXS/UPp4rAbk0C5RIp6959ERfsc+6vzhI/okEix3l24zrM5oIj
s1z50k3okgeYcLkh86JU4nNvZU/NtgN+TwykBIBHl+fzmLDcCJgy73OaGHu2sZa8
DvLI/KUXT2aNylxLlT+5OzPdhHsz632E6kqN2c2Coc3vVtii05Pd5ix54NDhEVj4
cdFSzMwiV94mWS1GO5s/UOmUoEzWQ8y/QJWp/VVx5q/PO6WpXYB9E2a/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4RBfhseJHbYf75ixMEYALxkt25MB8GA1UdIwQY
MBaAFIBG4zhgFx727GDrz8XsWskcJXV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYt
ZDM5ZmZjMTZlZjg5LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYtZDM5ZmZjMTZlZjg5
LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjyPyX1d
YRFYfJ6ao5ivuLuW4lscAKoI8rTVHz9JRzekbnmnleDLI5xtA6J930YNQFJaHCdB
wBJpl6C2Im1wS7D9odU08BZKaFEx/QUONsqmvkUIyfGGwV6pOWYwCo18Km7BT6Iw
JFR5osidKfuzT1gaGO5H8wtlmdzWaVSFbbvlNIcV8d8ZFv0pvO1btkXSWc/gT6tX
GQ+rqCBzgrC/9Bos0KIUVjZm8C5inWecZlgqkF0M89GxZPYaPU0etRxpj0Ne6ODc
YxOnRgwrOGcor4IPL0BAowsf+4/Dc/1LINhWGsSg2w7ItAeRte14s4Jk5DPA0lza
imZ7ZULJomfZ/g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:42 2025 by rpki-client