Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: ICueQ3bubpRzmMJbcXGSvIp0HtHvyz/bsQND/B+yefA=
Subject key identifier: AF:7C:E1:B0:C8:CF:3D:8A:55:5F:25:C4:A2:4E:5F:84:23:9F:89:B2
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 0196594B7544F4122BD9586D5C4A9DF6D4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 17:00:39 +0000
Manifest this update: Mon 21 Apr 2025 17:00:39 +0000
Manifest next update: Tue 22 Apr 2025 17:00:39 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: xWQWNPxhZi2QTP31G2shf3Ju/EhwaNV7dGOsFhYhiZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:75:44:f4:12:2b:d9:58:6d:5c:4a:9d:f6:d4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Apr 21 17:00:39 2025 GMT
Not After : Apr 22 17:00:39 2025 GMT
Subject: CN=af7ce1b0c8cf3d8a555f25c4a24e5f84239f89b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:01:14:1c:36:63:52:bb:44:68:90:d2:4f:
39:1d:ef:b8:c9:19:40:93:1e:e2:89:2a:d4:35:60:
f9:44:f9:ec:d5:77:19:20:1e:bf:e2:44:3a:22:11:
ff:61:4c:58:1e:3b:84:48:f7:66:a3:a5:48:ed:48:
46:67:a5:15:1c:f3:e4:aa:bf:9c:dd:96:7b:ea:e1:
c2:14:49:1b:20:c6:d6:e2:8a:27:b2:c0:96:c7:62:
46:5c:31:6f:20:8a:02:a3:d7:60:e9:d6:fd:d5:46:
9d:32:99:78:d4:7d:30:1d:6b:a7:c5:bd:00:a8:7f:
ac:bb:cf:ba:80:23:4d:af:56:c1:7d:06:3f:17:7d:
5e:3e:2a:a7:59:91:ca:09:7d:2d:f3:f0:c1:e7:fc:
66:8f:69:91:d9:ca:cb:30:5c:39:33:25:02:b3:7a:
44:c7:cc:43:76:0c:46:cb:66:24:d9:4b:f0:76:72:
a4:06:4d:01:74:c6:c1:6a:61:5d:0a:1c:7e:99:5c:
ac:b5:30:eb:4f:65:cc:32:3c:a4:a3:49:a8:7a:c3:
3a:e6:d4:8b:f1:45:74:80:89:fc:6e:e1:b9:c5:54:
ff:bb:a6:59:cd:2a:52:59:c8:59:c8:f5:bb:11:ba:
93:a8:1f:a0:02:2b:59:f6:a7:b7:03:37:f9:3e:71:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:E1:B0:C8:CF:3D:8A:55:5F:25:C4:A2:4E:5F:84:23:9F:89:B2
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:32:76:c3:24:46:fc:b1:ab:c5:7f:c6:2d:b1:34:c6:45:44:
54:95:8f:ab:9a:28:c9:b9:b2:8c:44:5c:59:ca:ab:58:50:62:
4e:07:63:07:b3:08:6b:f5:49:b8:7a:ab:20:b1:88:2f:bb:99:
e2:09:e9:8c:38:0c:f5:08:0b:2e:62:b1:cb:4a:f1:dd:33:90:
5a:06:c0:a5:66:48:c6:30:f3:25:ec:d9:29:25:b5:c3:87:bd:
0f:47:f9:74:a8:1d:f2:58:17:8f:95:22:b5:a6:12:af:45:ca:
e7:71:25:cc:04:b2:3b:32:27:74:0b:ff:56:b9:bc:3b:86:a7:
9e:98:43:95:66:8e:16:f7:93:27:1d:cc:79:c8:4e:33:49:4b:
55:c7:eb:94:1d:7e:1c:a0:ed:b3:0b:9c:9d:c2:82:e7:f6:cf:
2b:87:79:12:dc:9d:ad:75:68:66:fc:84:1d:d2:6b:0e:66:4e:
50:b2:01:6c:92:eb:c1:06:c8:59:aa:45:d4:e9:37:83:54:62:
01:d0:f7:f5:c1:b8:2b:65:1e:32:40:9f:90:4c:3e:0b:52:24:
73:63:2c:10:42:4b:08:ca:ea:0f:80:43:be:6c:bc:28:36:5b:
79:66:05:2a:7c:11:9f:f0:0e:f4:75:d6:89:da:2e:9b:01:c8:
22:f1:5e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZS3VE9BIr2VhtXEqd9tSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNmNjODYwMzM1M2Q3MzJlNGIxY2NiYTdlYWNhMGI2Y2Vl
NGM0Y2YwHhcNMjUwNDIxMTcwMDM5WhcNMjUwNDIyMTcwMDM5WjAzMTEwLwYDVQQD
EyhhZjdjZTFiMGM4Y2YzZDhhNTU1ZjI1YzRhMjRlNWY4NDIzOWY4OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlsBFBw2Y1K7RGiQ0k85He+4yRlA
kx7iiSrUNWD5RPns1XcZIB6/4kQ6IhH/YUxYHjuESPdmo6VI7UhGZ6UVHPPkqr+c
3ZZ76uHCFEkbIMbW4oonssCWx2JGXDFvIIoCo9dg6db91UadMpl41H0wHWunxb0A
qH+su8+6gCNNr1bBfQY/F31ePiqnWZHKCX0t8/DB5/xmj2mR2crLMFw5MyUCs3pE
x8xDdgxGy2Yk2UvwdnKkBk0BdMbBamFdChx+mVystTDrT2XMMjyko0moesM65tSL
8UV0gIn8buG5xVT/u6ZZzSpSWchZyPW7EbqTqB+gAitZ9qe3Azf5PnH2+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK984bDIzz2KVV8lxKJOX4Qjn4myMB8GA1UdIwQY
MBaAFKxsyGAzU9cy5LHMun6soLbO5MTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt
MjcxYTE1NWVlYjkyLzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky
LzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzJ2wyRG
/LGrxX/GLbE0xkVEVJWPq5ooybmyjERcWcqrWFBiTgdjB7MIa/VJuHqrILGIL7uZ
4gnpjDgM9QgLLmKxy0rx3TOQWgbApWZIxjDzJezZKSW1w4e9D0f5dKgd8lgXj5Ui
taYSr0XK53ElzASyOzIndAv/Vrm8O4annphDlWaOFveTJx3MechOM0lLVcfrlB1+
HKDtswucncKC5/bPK4d5EtydrXVoZvyEHdJrDmZOULIBbJLrwQbIWapF1Ok3g1Ri
AdD39cG4K2UeMkCfkEw+C1Ikc2MsEEJLCMrqD4BDvmy8KDZbeWYFKnwRn/AO9HXW
idoumwHIIvFekA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:07 2025 by rpki-client