Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: 9NR6m7FLV/gaQTBDjGMEaXm6kf1ajGAHlTVH8/O+7c0=
Subject key identifier: B8:CA:D7:00:5F:49:0E:FB:42:ED:4E:6D:92:79:2C:A7:61:22:D9:47
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 01964F6C7EF4C7AABC5F009A36C610BD7537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 1490
Signing time: Sat 19 Apr 2025 19:00:32 +0000
Manifest this update: Sat 19 Apr 2025 19:00:32 +0000
Manifest next update: Sun 20 Apr 2025 19:00:32 +0000
Files and hashes: 1: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (hash: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: Cx4nIlmiF/VIJO3wY9wIVBn8WMDENW00NEi29F8DLAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:7e:f4:c7:aa:bc:5f:00:9a:36:c6:10:bd:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Apr 19 19:00:32 2025 GMT
Not After : Apr 20 19:00:32 2025 GMT
Subject: CN=b8cad7005f490efb42ed4e6d92792ca76122d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:9b:df:0e:92:9d:ed:ee:51:1f:79:f1:47:
52:e9:e2:fe:f1:4c:19:a1:c1:cd:e7:cd:d7:cd:83:
99:b8:43:8a:7b:6d:6d:f5:a8:a8:92:68:48:90:58:
8d:fd:a8:67:ed:06:3d:c7:1b:be:fa:e5:7e:98:af:
66:cc:a1:68:a6:83:a2:3e:f4:a0:83:62:bb:0f:a8:
77:40:c2:16:be:a1:5d:8b:b1:e8:25:e9:be:99:02:
17:f3:90:e0:8c:9f:50:7a:bb:36:5b:a8:37:59:6a:
11:ac:4c:f6:9b:e7:ae:a4:99:70:b1:ec:c6:37:c8:
b3:1d:3f:21:b9:76:d6:f1:f3:e7:e4:18:83:58:01:
8a:2b:21:41:54:fb:88:b6:84:60:f8:78:e0:85:d6:
9a:94:74:03:b2:11:81:ed:2f:b9:28:b7:d0:52:e6:
fd:91:e0:07:e1:18:ca:e5:d8:a4:72:ab:bc:b7:76:
9f:ef:7c:06:da:97:da:46:f7:f0:68:d2:d6:4d:5b:
10:ea:cc:7d:21:f6:68:5b:4f:21:57:b4:d1:4e:25:
7c:f8:87:d9:e5:8e:ce:f5:23:42:3e:2d:6b:ed:2a:
64:05:bc:4c:b1:56:36:88:41:ce:ee:a8:67:e0:9a:
0b:65:ea:6e:ce:83:7d:90:d3:ac:16:14:4e:1e:b3:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:D7:00:5F:49:0E:FB:42:ED:4E:6D:92:79:2C:A7:61:22:D9:47
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:a3:9e:68:59:3f:49:5a:60:86:3a:1e:2b:6c:cc:3d:b8:
d0:c6:f9:0f:22:12:cb:e0:73:55:b4:61:49:7c:c2:d3:02:e7:
b8:36:49:c8:06:68:d8:43:62:34:8c:87:a4:34:37:d6:48:de:
e6:4e:13:af:15:26:71:fe:45:4f:a1:98:b6:13:1c:0a:47:e8:
16:93:47:89:0a:e0:15:aa:34:d3:ae:dc:62:59:6b:d4:d9:13:
72:2b:71:78:61:52:6c:c5:88:ce:e2:4d:f2:15:be:ae:a5:e2:
97:81:11:00:20:a9:e8:e4:de:ec:ea:2a:b7:01:57:9b:c8:88:
30:c9:98:0e:9e:e2:58:8e:3f:b8:a4:ad:6f:97:9b:80:e4:13:
50:87:52:a9:04:bc:a8:0c:41:b7:fe:21:98:73:7f:f5:b7:2d:
2c:c6:23:3e:ad:7d:c3:fc:d9:59:e9:06:bc:8e:fb:a3:9e:f6:
dd:8a:2a:62:5a:1c:21:bb:76:a0:7b:06:ed:e9:de:21:55:50:
17:35:02:80:a5:12:49:b0:44:7f:cf:e3:89:f3:2a:70:81:ae:
10:f8:d6:0a:86:5b:5f:22:c7:2b:7a:50:08:f5:bb:48:c2:fb:
69:01:93:c8:32:5c:96:d9:28:7e:df:b7:11:b4:8b:2c:88:85:
ea:84:e6:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbH70x6q8XwCaNsYQvXU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDY3YTg0NDA5Y2VkYmEwMjJlZWIwMzViZDhhZDYyMGQ2
ODNlYTcwHhcNMjUwNDE5MTkwMDMyWhcNMjUwNDIwMTkwMDMyWjAzMTEwLwYDVQQD
EyhiOGNhZDcwMDVmNDkwZWZiNDJlZDRlNmQ5Mjc5MmNhNzYxMjJkOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYOb3w6Sne3uUR958UdS6eL+8UwZ
ocHN583XzYOZuEOKe21t9aiokmhIkFiN/ahn7QY9xxu++uV+mK9mzKFopoOiPvSg
g2K7D6h3QMIWvqFdi7HoJem+mQIX85DgjJ9Qers2W6g3WWoRrEz2m+eupJlwsezG
N8izHT8huXbW8fPn5BiDWAGKKyFBVPuItoRg+HjghdaalHQDshGB7S+5KLfQUub9
keAH4RjK5dikcqu8t3af73wG2pfaRvfwaNLWTVsQ6sx9IfZoW08hV7TRTiV8+IfZ
5Y7O9SNCPi1r7SpkBbxMsVY2iEHO7qhn4JoLZepuzoN9kNOsFhROHrNXhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjK1wBfSQ77Qu1ObZJ5LKdhItlHMB8GA1UdIwQY
MBaAFIDWeoRAnO26Ai7rA1vYrWINaD6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUt
NmViM2FhNmEyMWFmLzEvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUtNmViM2FhNmEyMWFm
LzEvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWGjnmhZ
P0laYIY6HitszD240Mb5DyISy+BzVbRhSXzC0wLnuDZJyAZo2ENiNIyHpDQ31kje
5k4TrxUmcf5FT6GYthMcCkfoFpNHiQrgFao0067cYllr1NkTcitxeGFSbMWIzuJN
8hW+rqXil4ERACCp6OTe7OoqtwFXm8iIMMmYDp7iWI4/uKStb5ebgOQTUIdSqQS8
qAxBt/4hmHN/9bctLMYjPq19w/zZWekGvI77o5723YoqYlocIbt2oHsG7eneIVVQ
FzUCgKUSSbBEf8/jifMqcIGuEPjWCoZbXyLHK3pQCPW7SML7aQGTyDJcltkoft+3
EbSLLIiF6oTmww==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:11 2025 by rpki-client