Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: Z753fM7xtcjVKwQhaJztejeajEeXrQqVTfA6twH8aYc=
Subject key identifier: 92:B7:01:82:AC:77:6E:45:A6:A4:E5:51:2D:5F:95:2F:5F:95:CB:DB
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 01965492D839C2A4EF90D6E416A50B85D3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 19:00:31 +0000
Manifest this update: Sun 20 Apr 2025 19:00:31 +0000
Manifest next update: Mon 21 Apr 2025 19:00:31 +0000
Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: EHQjjg/hdJ49EhqFQS+QJ5hBoBxskT50Sid/neXcP60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d8:39:c2:a4:ef:90:d6:e4:16:a5:0b:85:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Apr 20 19:00:31 2025 GMT
Not After : Apr 21 19:00:31 2025 GMT
Subject: CN=92b70182ac776e45a6a4e5512d5f952f5f95cbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:19:db:1c:2d:ca:6e:15:bf:06:cc:e9:fa:
92:eb:52:50:1c:83:34:64:cc:52:2b:af:3d:1c:d1:
2d:66:fc:72:6e:52:58:c1:84:90:a6:83:f6:b2:3e:
6f:29:a0:98:22:2c:ae:69:05:99:96:84:5e:36:7d:
74:12:d0:b2:83:fc:e6:ba:ad:cc:8f:9a:5e:d2:f0:
6a:08:39:b7:f6:e7:9a:6b:3c:30:12:bc:30:d0:d0:
da:e5:60:a1:00:99:36:1f:bb:59:45:1c:42:73:03:
4d:42:8d:81:f5:44:71:0f:73:b3:3b:71:eb:65:c1:
2a:c9:37:c8:d5:d6:4f:64:96:83:0c:ec:a1:83:97:
62:5b:28:96:e6:4a:98:d2:9b:01:ee:4f:2b:83:a9:
d1:91:ce:4c:91:a8:e1:d1:e3:b8:d9:8e:4f:c5:cf:
ed:21:68:10:9a:d7:82:74:82:57:6c:6f:6a:98:81:
8e:a7:99:43:a1:d4:36:bd:ef:60:9a:ae:68:f8:b5:
c5:d1:a5:87:dd:ed:c7:9c:c1:50:30:c9:e2:d6:8d:
2e:2c:8b:79:40:eb:e5:a5:9d:95:a7:40:d4:84:17:
15:d5:bc:ac:f8:ba:d8:ad:f0:44:47:be:d1:5b:34:
80:3e:de:18:8f:91:e0:7f:9b:1e:b6:84:03:d0:9c:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:01:82:AC:77:6E:45:A6:A4:E5:51:2D:5F:95:2F:5F:95:CB:DB
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5b:f8:45:77:62:36:30:10:0c:1f:a6:13:52:d2:5c:aa:f7:
88:8e:96:b6:43:65:ae:37:9b:a2:e0:53:b4:ee:f6:7b:ff:c6:
88:4a:ea:39:04:5e:15:82:45:85:67:18:11:4d:bd:7c:c8:7d:
e8:da:24:63:f0:7e:c3:76:f1:7a:b2:de:7f:d9:66:b4:6c:60:
77:5e:fe:e0:b0:50:04:36:7e:48:67:f8:1b:6b:4e:35:53:90:
a2:aa:3f:c5:05:ac:0a:70:ea:8e:fa:4b:35:15:1f:1e:ce:d7:
fe:af:45:91:40:05:2f:02:54:98:75:08:2d:78:6d:9d:9c:8b:
45:64:d4:a6:cb:ce:5e:7d:0c:25:7a:d9:80:93:95:25:48:8d:
22:70:a0:57:a6:ac:62:dd:f3:b4:5e:d8:43:99:a1:2f:c2:f2:
87:65:46:b1:94:d0:77:23:70:92:4c:4d:f6:31:9e:b4:f7:01:
ab:a0:69:e5:c0:e3:e2:7c:dc:e3:0c:0f:83:6e:b6:03:5d:8c:
82:90:75:6f:c6:75:66:1f:f8:aa:43:2a:11:b6:68:f9:23:00:
92:fa:27:f5:47:c0:92:b2:14:e6:a1:3d:d2:ca:52:a9:73:ac:
2e:66:70:c7:51:fa:35:d0:e0:5a:bd:bc:a7:d7:b6:b9:9f:ff:
5f:bf:c9:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUktg5wqTvkNbkFqULhdPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzBkNmZjNjNkMTc3N2VlZGNkOGY0NmE1NTkzNjE3YzYz
MTlkZTYwHhcNMjUwNDIwMTkwMDMxWhcNMjUwNDIxMTkwMDMxWjAzMTEwLwYDVQQD
Eyg5MmI3MDE4MmFjNzc2ZTQ1YTZhNGU1NTEyZDVmOTUyZjVmOTVjYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUcZ2xwtym4VvwbM6fqS61JQHIM0
ZMxSK689HNEtZvxyblJYwYSQpoP2sj5vKaCYIiyuaQWZloReNn10EtCyg/zmuq3M
j5pe0vBqCDm39ueaazwwErww0NDa5WChAJk2H7tZRRxCcwNNQo2B9URxD3OzO3Hr
ZcEqyTfI1dZPZJaDDOyhg5diWyiW5kqY0psB7k8rg6nRkc5Mkajh0eO42Y5Pxc/t
IWgQmteCdIJXbG9qmIGOp5lDodQ2ve9gmq5o+LXF0aWH3e3HnMFQMMni1o0uLIt5
QOvlpZ2Vp0DUhBcV1bys+LrYrfBER77RWzSAPt4Yj5Hgf5setoQD0Jwb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK3AYKsd25FpqTlUS1flS9flcvbMB8GA1UdIwQY
MBaAFL9w1vxj0Xd+7c2PRqVZNhfGMZ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAt
Mzk0MGQxMzViMjhiLzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAtMzk0MGQxMzViMjhi
LzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFv4RXdi
NjAQDB+mE1LSXKr3iI6WtkNlrjebouBTtO72e//GiErqOQReFYJFhWcYEU29fMh9
6NokY/B+w3bxerLef9lmtGxgd17+4LBQBDZ+SGf4G2tONVOQoqo/xQWsCnDqjvpL
NRUfHs7X/q9FkUAFLwJUmHUILXhtnZyLRWTUpsvOXn0MJXrZgJOVJUiNInCgV6as
Yt3ztF7YQ5mhL8Lyh2VGsZTQdyNwkkxN9jGetPcBq6Bp5cDj4nzc4wwPg262A12M
gpB1b8Z1Zh/4qkMqEbZo+SMAkvon9UfAkrIU5qE90spSqXOsLmZwx1H6NdDgWr28
p9e2uZ//X7/JLA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:46 2025 by rpki-client