Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File: gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier: o+1f6o3hFjxuSyoabDkUYUeZfYpFWTlhrPiMWmSf25w=
Subject key identifier: BF:C7:A1:C1:DA:F1:FC:E0:FA:9E:8A:E7:8E:4D:45:AE:8C:5A:70:ED
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 01965A5E4B90F4F1024BAD93880AF4D3D69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number: 1153
Signing time: Mon 21 Apr 2025 22:00:51 +0000
Manifest this update: Mon 21 Apr 2025 22:00:51 +0000
Manifest next update: Tue 22 Apr 2025 22:00:51 +0000
Files and hashes: 1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: 1I8+HJhE+SXh8NhpF2KJreeKWmkLPMQ4pFPS65FeLvs=)
2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:4b:90:f4:f1:02:4b:ad:93:88:0a:f4:d3:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Apr 21 22:00:51 2025 GMT
Not After : Apr 22 22:00:51 2025 GMT
Subject: CN=bfc7a1c1daf1fce0fa9e8ae78e4d45ae8c5a70ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:de:cf:e1:db:52:f3:86:ff:57:63:b8:e9:
99:e0:2d:5f:50:4f:5b:13:0d:10:0f:89:67:31:26:
b1:03:da:99:02:72:7f:87:c1:c5:e8:d0:e4:8b:ef:
1b:4f:79:19:90:a1:a4:ee:84:8a:c8:3b:35:cc:fd:
58:37:39:02:45:aa:3c:7a:a6:24:86:1f:d1:85:43:
84:21:62:06:17:60:dc:1d:b2:2e:e4:cd:c3:ed:39:
22:c2:e1:9a:94:16:7b:0c:e1:ce:4c:6d:a2:ba:92:
4e:0e:64:07:e2:6e:c0:ad:03:6c:67:85:67:9c:33:
4a:62:e0:a6:46:32:c5:6d:70:5a:66:f7:c2:52:20:
2d:05:b8:9b:1d:2a:21:f5:dc:8d:f1:0e:cd:8e:a0:
a7:e0:da:39:6c:bd:9a:a9:dd:a1:d0:e0:9c:ba:ad:
ba:6c:4b:75:fe:d2:b9:31:83:0e:d5:2d:3a:ba:69:
a4:bd:d2:eb:1b:ef:c9:e1:ca:c3:fb:7e:f4:b8:91:
d0:f8:d8:a4:9a:f8:eb:a4:ff:59:2e:a1:cd:52:63:
54:b2:7e:f8:9a:11:16:66:3d:78:1b:83:28:87:74:
77:b0:0a:09:37:e3:63:30:ca:89:3c:a4:77:bf:d7:
3b:0a:08:05:19:be:52:92:e8:67:15:56:64:d7:8d:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:A1:C1:DA:F1:FC:E0:FA:9E:8A:E7:8E:4D:45:AE:8C:5A:70:ED
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:5d:cf:72:2c:2e:51:85:9d:29:a6:13:7a:d4:b1:ff:e4:
f8:8f:3d:f0:73:e3:ea:94:8d:65:71:65:2b:3f:ae:fa:ce:46:
26:83:cb:37:e2:2d:3e:e8:e7:71:50:77:a0:36:2e:9e:63:aa:
0a:cd:0a:4e:a7:bf:50:d8:f3:e3:97:0b:40:dd:0f:ab:08:34:
79:eb:49:f3:d1:47:76:e8:a3:53:8d:0f:75:7f:c0:d3:d2:b4:
c6:5d:9a:6f:91:48:8d:7e:c4:a3:2b:ab:5d:3f:99:d9:d2:1b:
9f:45:8d:d3:4d:0b:46:3f:59:50:32:1f:c7:16:17:3f:5e:f9:
cf:33:96:7d:5a:a3:96:4c:56:79:84:9d:e4:c8:e4:f8:7f:b2:
9a:0c:ab:81:0f:d8:38:b1:48:0d:3e:66:74:fe:66:0c:30:2a:
1d:24:98:89:57:17:39:e2:0c:af:b1:86:33:87:15:0e:31:a3:
51:10:85:86:c5:09:73:56:15:09:2b:6a:9b:70:e4:5a:59:fe:
0a:9b:e4:b3:80:86:b1:42:6f:8f:f1:28:a3:a8:24:20:9b:5a:
80:d8:c9:7b:bc:3e:10:71:25:c5:23:7c:a8:d7:91:bd:b1:3e:
07:6d:48:3a:d6:36:11:56:7a:c3:78:ac:81:02:7c:7c:db:7d:
6f:37:95:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXkuQ9PECS62TiAr009abMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmEyNWIyZmNiMTQ2ODExNGI3Mzg5MjhhYjIwZDg3NjFi
Zjg4MzEwHhcNMjUwNDIxMjIwMDUxWhcNMjUwNDIyMjIwMDUxWjAzMTEwLwYDVQQD
EyhiZmM3YTFjMWRhZjFmY2UwZmE5ZThhZTc4ZTRkNDVhZThjNWE3MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgHez+HbUvOG/1djuOmZ4C1fUE9b
Ew0QD4lnMSaxA9qZAnJ/h8HF6NDki+8bT3kZkKGk7oSKyDs1zP1YNzkCRao8eqYk
hh/RhUOEIWIGF2DcHbIu5M3D7TkiwuGalBZ7DOHOTG2iupJODmQH4m7ArQNsZ4Vn
nDNKYuCmRjLFbXBaZvfCUiAtBbibHSoh9dyN8Q7NjqCn4No5bL2aqd2h0OCcuq26
bEt1/tK5MYMO1S06ummkvdLrG+/J4crD+370uJHQ+NikmvjrpP9ZLqHNUmNUsn74
mhEWZj14G4Moh3R3sAoJN+NjMMqJPKR3v9c7CggFGb5SkuhnFVZk142CVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/HocHa8fzg+p6K545NRa6MWnDtMB8GA1UdIwQY
MBaAFIL6JbL8sUaBFLc4koqyDYdhv4gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQt
NzY4NWM5NjcwMDE3LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQtNzY4NWM5NjcwMDE3
LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFNdz3Is
LlGFnSmmE3rUsf/k+I898HPj6pSNZXFlKz+u+s5GJoPLN+ItPujncVB3oDYunmOq
Cs0KTqe/UNjz45cLQN0Pqwg0eetJ89FHduijU40PdX/A09K0xl2ab5FIjX7Eoyur
XT+Z2dIbn0WN000LRj9ZUDIfxxYXP175zzOWfVqjlkxWeYSd5Mjk+H+ymgyrgQ/Y
OLFIDT5mdP5mDDAqHSSYiVcXOeIMr7GGM4cVDjGjURCFhsUJc1YVCStqm3DkWln+
Cpvks4CGsUJvj/Eoo6gkIJtagNjJe7w+EHElxSN8qNeRvbE+B21IOtY2EVZ6w3is
gQJ8fNt9bzeVfQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:03:39 2025 by rpki-client