Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: zU/2Us/FNReAPmt6M6AOMHEXIF25i+nBWDiPSZgMoQY=
Subject key identifier: A6:9C:0C:C6:55:0E:18:B0:C6:E4:EB:07:DD:DC:C2:E0:7F:D7:F9:6C
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 01965B70F618FFC261A3B0D5C96451CD96FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 04B9
Signing time: Tue 22 Apr 2025 03:00:51 +0000
Manifest this update: Tue 22 Apr 2025 03:00:51 +0000
Manifest next update: Wed 23 Apr 2025 03:00:51 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: D2kTqL/thgwRkiZNk+kPnt16eLsRX5hHcCI/SRyaNrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:f6:18:ff:c2:61:a3:b0:d5:c9:64:51:cd:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Apr 22 03:00:51 2025 GMT
Not After : Apr 23 03:00:51 2025 GMT
Subject: CN=a69c0cc6550e18b0c6e4eb07dddcc2e07fd7f96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:0d:2d:6b:88:d0:24:88:a2:b5:0e:b3:d1:
47:7c:3b:00:69:6e:99:3b:99:30:64:7b:5b:f9:65:
e4:d8:f4:d1:87:d4:9b:5d:fd:29:53:18:78:5c:25:
89:c5:9a:7a:f0:b1:fa:bd:d0:43:54:5b:bf:8d:63:
17:11:a0:cd:e4:0b:51:53:44:c9:88:fa:17:bb:e7:
50:33:10:e6:a6:b3:83:23:8a:44:fb:e0:c9:79:86:
9d:e0:d6:43:0a:26:f6:20:40:a1:b4:d6:cc:aa:25:
f5:cd:28:02:6e:1d:c7:29:3d:02:a3:ae:e6:bb:77:
04:54:bc:6d:32:05:24:f7:c1:48:3b:8c:03:57:9d:
a6:24:c9:f4:16:2b:61:73:73:6b:ed:50:81:cd:46:
ae:cd:ad:00:d2:e0:21:8d:6e:22:6b:44:ef:85:ab:
c7:46:ec:65:c5:63:60:24:ad:b4:2a:60:0f:7c:1f:
8b:75:8d:82:6e:0c:94:8f:91:6a:72:d0:44:68:b9:
16:1b:29:cf:25:af:98:ac:75:a0:b0:fd:65:0f:cd:
32:a6:0f:8e:9f:df:5e:73:95:e3:66:94:07:42:e7:
f7:d8:be:dc:74:71:25:0a:f2:62:f5:9e:fd:8b:e1:
b6:98:a2:1d:44:52:d0:0a:30:0e:44:43:85:87:4a:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:0C:C6:55:0E:18:B0:C6:E4:EB:07:DD:DC:C2:E0:7F:D7:F9:6C
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:27:70:cd:93:0b:93:ec:f7:9d:79:1c:c6:25:03:2c:42:
0f:67:46:32:ab:bf:03:45:e0:7a:7c:14:ba:f2:a6:e5:26:09:
0b:88:6c:b5:29:77:9d:09:2c:ef:72:07:d4:25:30:8f:1c:85:
92:cb:f2:1d:d1:fb:e7:34:49:af:24:7a:ab:f1:a1:a1:0e:3f:
1b:05:40:f6:d1:75:69:f6:b1:86:28:1e:98:16:92:c0:a7:b1:
f3:88:6e:88:a9:23:0b:9a:4b:17:fe:2e:40:ce:c6:af:40:fd:
a9:0e:c4:e5:73:77:19:fd:17:5a:04:4a:c8:bc:4d:ec:d7:01:
08:56:aa:b6:26:9c:30:8d:dd:93:8f:40:52:f9:2f:7f:dd:da:
4f:84:43:24:31:7c:fb:8f:0a:92:59:51:e8:8e:ac:25:6e:46:
d5:68:f3:7a:74:2f:dd:63:bc:b9:09:1f:66:9a:01:4b:06:7f:
eb:4c:b6:b7:27:6a:5a:c4:f8:4a:6f:8a:e4:ee:cc:f6:92:00:
22:41:32:80:80:24:ba:e5:d6:d0:7a:d7:c7:64:02:51:c5:a7:
4e:2b:67:e8:49:f6:20:26:b1:73:5f:62:2c:24:4e:cc:1f:cf:
42:09:ed:db:0a:62:a4:87:36:5c:ea:bc:0c:ee:2c:a1:dd:1e:
c2:ff:8e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcPYY/8Jho7DVyWRRzZb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDdkYzAzNmQ5ZDZjMjhmMWQ4N2FiNjRlNzhlZTQ4NWE5
NmZkODEwHhcNMjUwNDIyMDMwMDUxWhcNMjUwNDIzMDMwMDUxWjAzMTEwLwYDVQQD
EyhhNjljMGNjNjU1MGUxOGIwYzZlNGViMDdkZGRjYzJlMDdmZDdmOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqwNLWuI0CSIorUOs9FHfDsAaW6Z
O5kwZHtb+WXk2PTRh9SbXf0pUxh4XCWJxZp68LH6vdBDVFu/jWMXEaDN5AtRU0TJ
iPoXu+dQMxDmprODI4pE++DJeYad4NZDCib2IEChtNbMqiX1zSgCbh3HKT0Co67m
u3cEVLxtMgUk98FIO4wDV52mJMn0Fithc3Nr7VCBzUauza0A0uAhjW4ia0TvhavH
RuxlxWNgJK20KmAPfB+LdY2CbgyUj5FqctBEaLkWGynPJa+YrHWgsP1lD80ypg+O
n99ec5XjZpQHQuf32L7cdHElCvJi9Z79i+G2mKIdRFLQCjAOREOFh0odDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKacDMZVDhiwxuTrB93cwuB/1/lsMB8GA1UdIwQY
MBaAFIEH3ANtnWwo8dh6tk547khalv2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYt
NzZhMTQxY2RkNDFmLzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYtNzZhMTQxY2RkNDFm
LzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIgncM2T
C5Ps9515HMYlAyxCD2dGMqu/A0XgenwUuvKm5SYJC4hstSl3nQks73IH1CUwjxyF
ksvyHdH75zRJryR6q/GhoQ4/GwVA9tF1afaxhigemBaSwKex84huiKkjC5pLF/4u
QM7Gr0D9qQ7E5XN3Gf0XWgRKyLxN7NcBCFaqtiacMI3dk49AUvkvf93aT4RDJDF8
+48KkllR6I6sJW5G1WjzenQv3WO8uQkfZpoBSwZ/60y2tydqWsT4Sm+K5O7M9pIA
IkEygIAkuuXW0HrXx2QCUcWnTitn6En2ICaxc19iLCROzB/PQgnt2wpipIc2XOq8
DO4sod0ewv+OCg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:21:10 2025 by rpki-client