Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier: VRurPHbb2ZkLmtGZSm2Xag3Ozm4R8+TSsiIh5J7jMWo=
Subject key identifier: CF:3F:3A:C8:88:9A:AF:95:D5:C2:43:DC:DA:D7:30:09:4F:EB:18:A2
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 01960CB158CB059EA1A062ECAC2734988F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number: 14DC
Signing time: Sun 06 Apr 2025 20:01:11 +0000
Manifest this update: Sun 06 Apr 2025 20:01:11 +0000
Manifest next update: Mon 07 Apr 2025 20:01:11 +0000
Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: 3DsMf6kpzFTt2gsk2PXlG320eKJ2tXQBPFXseCPeu+U=)
2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=)
3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=)
4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:b1:58:cb:05:9e:a1:a0:62:ec:ac:27:34:98:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Apr 6 20:01:11 2025 GMT
Not After : Apr 7 20:01:11 2025 GMT
Subject: CN=cf3f3ac8889aaf95d5c243dcdad730094feb18a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:86:19:67:7f:60:4a:38:b5:0e:45:5a:58:
c6:3a:30:b0:09:0d:51:91:dd:17:a1:0c:d2:ac:a6:
7f:2e:95:b9:ff:41:cc:62:dc:44:4b:41:ed:d1:3c:
9f:36:af:17:51:d2:5f:e9:06:79:39:ce:09:61:b3:
e1:d0:f6:ea:2c:59:28:66:f1:15:76:13:34:72:9e:
eb:0a:f3:ff:03:c0:72:f3:7d:fa:13:f5:66:21:41:
49:c7:46:24:c0:7e:23:a4:28:cf:92:0e:e8:fa:c1:
d2:5c:8d:66:63:0f:01:8d:5c:3b:dc:05:97:fc:62:
80:09:f0:2e:64:04:f3:4f:a9:13:34:42:48:2a:ee:
4e:1d:c1:ab:99:d2:21:86:97:cc:d0:59:23:22:ed:
ea:83:89:01:7d:55:8d:f3:ac:7f:83:45:b3:51:0f:
98:12:97:03:4c:e2:65:da:0e:51:cb:cb:0b:82:50:
20:be:cd:b1:63:62:59:4d:83:f5:89:71:ad:79:a2:
cf:94:27:0e:62:65:ab:37:11:1c:31:44:72:2a:89:
2c:7b:24:42:fc:64:bf:1c:74:db:4d:d2:bb:32:da:
0d:03:88:d9:75:8e:63:9b:29:46:42:6d:1e:ce:7a:
54:7f:57:a1:4e:fa:5b:34:30:a8:89:6b:e7:d1:b3:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:3A:C8:88:9A:AF:95:D5:C2:43:DC:DA:D7:30:09:4F:EB:18:A2
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7a:d7:9c:8b:ae:25:ad:b5:37:2c:9e:56:8d:bb:1f:b0:8e:
7f:c0:56:f9:68:8f:ec:3e:d3:0a:e4:84:1d:e2:50:42:87:2a:
33:b0:30:6a:68:fc:7d:53:82:6a:1d:71:3b:1e:2e:27:02:15:
32:d8:67:70:ae:d8:49:d7:86:05:d7:1d:e6:1a:28:06:02:f3:
a6:8c:4d:9a:9f:83:3c:04:6f:89:be:64:b4:6f:9c:d7:a9:75:
04:a9:45:3b:48:82:5d:46:84:ac:61:59:87:6b:6f:c0:6f:43:
e3:0e:15:a7:bf:fc:cd:c7:2e:93:d7:0b:39:26:08:5a:93:78:
eb:73:c1:0d:39:e6:df:4b:ae:2e:e0:de:ee:fc:4e:9e:19:fe:
6b:58:0c:06:38:9b:fd:e6:94:c1:36:12:ed:41:0c:6c:d1:71:
a0:4a:85:58:2a:d9:cd:18:34:50:58:4e:45:f4:05:06:9b:7d:
4a:18:60:12:51:52:42:ea:b7:98:cc:45:7c:92:7f:fa:f5:88:
b3:15:73:49:12:56:29:5e:7d:30:aa:29:6b:cc:4a:a1:23:db:
d1:13:35:c0:84:3f:20:08:ec:fb:aa:41:fa:c8:46:61:fe:b3:
34:24:60:4f:b2:50:c9:96:63:0f:ec:cd:a5:15:83:37:56:1f:
d4:ed:c1:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYMsVjLBZ6hoGLsrCc0mI9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTM4NDliZmYzMzdkZjhiOGIwYmQxYWUyNTJlZTYxMTlk
OGE2MWYwHhcNMjUwNDA2MjAwMTExWhcNMjUwNDA3MjAwMTExWjAzMTEwLwYDVQQD
EyhjZjNmM2FjODg4OWFhZjk1ZDVjMjQzZGNkYWQ3MzAwOTRmZWIxOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPOGGWd/YEo4tQ5FWljGOjCwCQ1R
kd0XoQzSrKZ/LpW5/0HMYtxES0Ht0TyfNq8XUdJf6QZ5Oc4JYbPh0PbqLFkoZvEV
dhM0cp7rCvP/A8By8336E/VmIUFJx0YkwH4jpCjPkg7o+sHSXI1mYw8BjVw73AWX
/GKACfAuZATzT6kTNEJIKu5OHcGrmdIhhpfM0FkjIu3qg4kBfVWN86x/g0WzUQ+Y
EpcDTOJl2g5Ry8sLglAgvs2xY2JZTYP1iXGteaLPlCcOYmWrNxEcMURyKokseyRC
/GS/HHTbTdK7MtoNA4jZdY5jmylGQm0eznpUf1ehTvpbNDCoiWvn0bNRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8/OsiImq+V1cJD3NrXMAlP6xiiMB8GA1UdIwQY
MBaAFBqThJv/M334uLC9GuJS7mEZ2KYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjkt
NDNlNjdkNWQwYTg1LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjktNDNlNjdkNWQwYTg1
LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3rXnIuu
Ja21NyyeVo27H7COf8BW+WiP7D7TCuSEHeJQQocqM7Awamj8fVOCah1xOx4uJwIV
MthncK7YSdeGBdcd5hooBgLzpoxNmp+DPARvib5ktG+c16l1BKlFO0iCXUaErGFZ
h2tvwG9D4w4Vp7/8zccuk9cLOSYIWpN463PBDTnm30uuLuDe7vxOnhn+a1gMBjib
/eaUwTYS7UEMbNFxoEqFWCrZzRg0UFhORfQFBpt9ShhgElFSQuq3mMxFfJJ/+vWI
sxVzSRJWKV59MKopa8xKoSPb0RM1wIQ/IAjs+6pB+shGYf6zNCRgT7JQyZZjD+zN
pRWDN1Yf1O3BMQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:50:26 2025 by rpki-client