Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: 8pwc3fAjLd2fMDbXOwmriLY5IqkUfsy+4PiipJpr9KE=
Subject key identifier: 30:87:CC:76:25:86:81:E3:2B:10:50:F6:1F:E0:78:0B:5F:F2:38:52
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 01958F60F38A359FAE419456F97D58996DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 12:00:50 +0000
Manifest this update: Thu 13 Mar 2025 12:00:50 +0000
Manifest next update: Fri 14 Mar 2025 12:00:50 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: qM1fY7ynL3/fF26BHebLs70ua+ys65hwdoKtZZfH6/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:60:f3:8a:35:9f:ae:41:94:56:f9:7d:58:99:6d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Mar 13 12:00:50 2025 GMT
Not After : Mar 14 12:00:50 2025 GMT
Subject: CN=3087cc76258681e32b1050f61fe0780b5ff23852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:98:5e:ba:0e:5f:81:a2:3f:fe:7e:25:b1:
39:e7:a4:99:1b:c7:f0:1e:94:42:1c:6a:b6:e9:75:
c2:87:ac:81:71:ea:40:07:ab:bf:9e:9f:28:53:39:
bc:8c:89:d5:dc:70:6b:5f:54:9d:92:c9:be:fc:75:
da:4e:67:27:e3:25:c4:d3:a5:b5:2b:69:d2:b3:f3:
9f:25:e7:af:45:b0:58:99:82:1a:44:0d:14:f8:3a:
6d:93:00:1e:d0:ad:ae:2e:3c:72:2e:08:b3:60:97:
1a:e4:11:7e:d6:1e:37:33:6a:98:83:7c:6e:4a:73:
1e:d7:76:c7:6a:d0:a8:b5:ba:a0:65:03:2f:9f:56:
9f:6f:a0:9b:3e:dd:24:77:c3:ae:e0:5f:0e:56:33:
91:bd:3c:73:af:d6:55:01:a8:cb:43:a5:10:55:a3:
4a:50:36:07:1b:10:4d:c1:bc:13:aa:b2:fe:a3:fe:
57:86:3c:72:9f:6c:11:65:93:3f:ba:94:4f:cc:25:
b1:22:42:0f:a3:2b:c4:5b:ad:8f:65:f3:d6:36:20:
de:df:29:a5:6a:e2:61:e6:b5:53:56:91:9e:ff:3a:
ad:09:81:a7:51:15:75:15:90:c0:f0:79:9d:f7:e0:
cd:0a:9d:2c:96:18:b0:a7:a8:de:6e:09:5d:83:ee:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:CC:76:25:86:81:E3:2B:10:50:F6:1F:E0:78:0B:5F:F2:38:52
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:24:90:59:d0:b7:e8:7e:01:85:25:78:df:f1:d9:36:90:
ee:4d:a6:92:99:43:a7:02:c5:48:b6:80:81:8a:df:59:f3:df:
00:3a:2d:18:31:3a:d6:2d:67:57:87:23:e6:38:48:33:88:10:
c8:6a:9e:20:8f:70:5b:39:ff:ef:21:9a:f2:41:08:94:a6:09:
ed:cf:e8:c4:bd:e8:ab:41:88:23:67:96:57:61:cf:e4:6f:3c:
f1:63:3c:10:6e:02:5c:fa:98:1d:3f:e6:56:72:d5:f4:8d:52:
79:79:fd:b3:fa:71:ea:63:ea:a5:b0:f6:bb:31:a6:a3:ad:92:
94:3a:e0:9b:65:3a:bf:f3:8b:5b:cb:47:ea:92:20:75:2d:10:
37:17:6c:b3:ae:e7:63:1d:c8:09:68:3c:1f:20:1b:ca:ae:82:
94:3b:22:62:36:0a:94:8b:f1:f6:65:7e:ff:08:6d:25:a0:30:
1b:db:e7:a4:84:ef:dc:98:43:e3:d2:86:21:2b:7d:73:69:83:
92:04:8b:25:a4:2b:37:28:ce:e6:95:de:6a:f3:c2:7f:af:37:
ea:0d:af:a5:18:6e:93:a9:af:56:1f:45:fb:c2:9d:3d:e1:ef:
66:65:fb:68:c0:0b:88:3d:de:22:a9:a9:91:5d:fc:29:1b:f6:
5a:3b:51:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPYPOKNZ+uQZRW+X1YmW3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2
Yjc2MjYwHhcNMjUwMzEzMTIwMDUwWhcNMjUwMzE0MTIwMDUwWjAzMTEwLwYDVQQD
EygzMDg3Y2M3NjI1ODY4MWUzMmIxMDUwZjYxZmUwNzgwYjVmZjIzODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbeYXroOX4GiP/5+JbE556SZG8fw
HpRCHGq26XXCh6yBcepAB6u/np8oUzm8jInV3HBrX1Sdksm+/HXaTmcn4yXE06W1
K2nSs/OfJeevRbBYmYIaRA0U+DptkwAe0K2uLjxyLgizYJca5BF+1h43M2qYg3xu
SnMe13bHatCotbqgZQMvn1afb6CbPt0kd8Ou4F8OVjORvTxzr9ZVAajLQ6UQVaNK
UDYHGxBNwbwTqrL+o/5Xhjxyn2wRZZM/upRPzCWxIkIPoyvEW62PZfPWNiDe3yml
auJh5rVTVpGe/zqtCYGnURV1FZDA8Hmd9+DNCp0slhiwp6jebgldg+4BaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCHzHYlhoHjKxBQ9h/geAtf8jhSMB8GA1UdIwQY
MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt
YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh
LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA54kkFnQ
t+h+AYUleN/x2TaQ7k2mkplDpwLFSLaAgYrfWfPfADotGDE61i1nV4cj5jhIM4gQ
yGqeII9wWzn/7yGa8kEIlKYJ7c/oxL3oq0GII2eWV2HP5G888WM8EG4CXPqYHT/m
VnLV9I1SeXn9s/px6mPqpbD2uzGmo62SlDrgm2U6v/OLW8tH6pIgdS0QNxdss67n
Yx3ICWg8HyAbyq6ClDsiYjYKlIvx9mV+/whtJaAwG9vnpITv3JhD49KGISt9c2mD
kgSLJaQrNyjO5pXeavPCf6836g2vpRhuk6mvVh9F+8KdPeHvZmX7aMALiD3eIqmp
kV38KRv2WjtRdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:18 2025 by rpki-client