Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: N9jqJT7PJ0FMM3XrqOCVSkmrkHMMLz0Dktd1qJLXnHg=
Subject key identifier: 8A:D0:74:AA:A6:B6:27:39:02:F7:96:38:55:B8:0D:B2:DD:B9:38:BE
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019650ED03A2A49CD020A7563AB00473B4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 011B
Signing time: Sun 20 Apr 2025 02:00:32 +0000
Manifest this update: Sun 20 Apr 2025 02:00:32 +0000
Manifest next update: Mon 21 Apr 2025 02:00:32 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: +vmfXteckcpmeX9Geme266liInB/3pmEatQ2fQ6A5TE=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:03:a2:a4:9c:d0:20:a7:56:3a:b0:04:73:b4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Apr 20 02:00:32 2025 GMT
Not After : Apr 21 02:00:32 2025 GMT
Subject: CN=8ad074aaa6b6273902f7963855b80db2ddb938be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:4b:6a:6e:01:68:39:41:5b:a6:2a:eb:fa:
ff:9a:1d:2c:34:aa:05:dd:48:fd:02:d2:0c:00:a0:
95:97:02:31:01:49:6f:48:c7:ef:0a:96:a5:99:8a:
aa:6f:c3:60:c2:c5:ab:a8:7a:48:9c:c7:19:d9:eb:
eb:fb:df:1f:a3:11:ce:a7:13:2a:fc:20:5b:30:72:
cc:be:9f:35:95:29:9b:0b:f6:2c:1d:51:79:a9:d4:
2d:f3:ba:65:a4:ee:4a:dc:5b:86:25:55:ae:76:c5:
8b:83:36:29:6f:70:80:8b:10:e4:85:96:c0:e4:f9:
e2:4a:c9:61:db:74:a1:73:8f:1a:f3:c2:28:5c:7c:
96:df:b3:11:f8:2d:ac:44:c0:77:8e:b9:91:f2:6e:
08:55:d3:2d:25:22:42:48:9c:4c:5c:f9:26:8b:9e:
3e:ff:79:42:8c:32:77:bd:0f:ad:bd:95:fa:6f:20:
f2:57:c5:61:11:11:ab:ea:4f:29:91:65:78:14:15:
cd:64:2b:ec:83:e0:a0:80:62:07:65:c9:89:80:bd:
48:d7:a4:1f:51:a7:c6:47:7d:86:18:21:1c:1a:cc:
cc:b8:26:0b:aa:d1:a1:82:18:db:0f:7a:57:ac:6f:
ce:d8:27:2a:10:46:bd:1c:ef:13:c1:e7:70:b7:29:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:74:AA:A6:B6:27:39:02:F7:96:38:55:B8:0D:B2:DD:B9:38:BE
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ac:51:15:88:69:ff:71:fc:e9:e7:22:6e:c0:e8:8e:7b:22:
0a:12:65:c4:91:56:08:6e:15:20:17:ac:5e:e7:ca:e4:ad:e8:
66:3a:f0:78:1e:6a:51:7b:a8:8f:2a:7b:fd:ab:5d:20:9a:13:
88:8f:30:77:fe:63:e4:c1:b6:69:00:ca:e9:7d:b1:f7:9e:ad:
40:e7:9e:a3:29:6d:a2:f7:3c:a4:fe:75:2a:38:88:57:bb:b9:
28:c2:11:2c:e6:05:96:78:eb:bd:c8:4b:25:bb:6d:2f:b8:f3:
a9:9f:f3:8e:ba:31:5e:d6:2b:cc:b3:87:ac:ff:70:70:e2:e7:
6a:89:62:65:94:01:68:69:20:2d:9f:1e:07:4e:2b:f8:e1:34:
f3:cd:c7:78:46:24:ba:89:66:26:d5:9f:07:a9:6e:0f:35:af:
3f:72:60:d0:c6:b7:ff:3c:1f:60:3f:ec:95:42:b6:56:fa:a4:
97:1f:6e:ad:0c:87:bb:b5:4f:b6:f8:b1:c6:10:de:a4:3d:a1:
5e:4f:f2:27:89:d5:31:0e:84:d2:e0:1c:14:a2:78:80:97:10:
a4:61:92:e9:df:8f:9d:0d:62:5a:12:73:7d:5c:c0:5e:99:8a:
14:b5:f0:1c:a0:c4:45:de:63:d9:58:79:cd:ac:a7:ed:52:f0:
35:b1:64:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQ7QOipJzQIKdWOrAEc7TcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh
MjQzZTkwHhcNMjUwNDIwMDIwMDMyWhcNMjUwNDIxMDIwMDMyWjAzMTEwLwYDVQQD
Eyg4YWQwNzRhYWE2YjYyNzM5MDJmNzk2Mzg1NWI4MGRiMmRkYjkzOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumtLam4BaDlBW6Yq6/r/mh0sNKoF
3Uj9AtIMAKCVlwIxAUlvSMfvCpalmYqqb8NgwsWrqHpInMcZ2evr+98foxHOpxMq
/CBbMHLMvp81lSmbC/YsHVF5qdQt87plpO5K3FuGJVWudsWLgzYpb3CAixDkhZbA
5PniSslh23Shc48a88IoXHyW37MR+C2sRMB3jrmR8m4IVdMtJSJCSJxMXPkmi54+
/3lCjDJ3vQ+tvZX6byDyV8VhERGr6k8pkWV4FBXNZCvsg+CggGIHZcmJgL1I16Qf
UafGR32GGCEcGszMuCYLqtGhghjbD3pXrG/O2CcqEEa9HO8Twedwtyl5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrQdKqmtic5AveWOFW4DbLduTi+MB8GA1UdIwQY
MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt
ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi
LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKxRFYhp
/3H86ecibsDojnsiChJlxJFWCG4VIBesXufK5K3oZjrweB5qUXuojyp7/atdIJoT
iI8wd/5j5MG2aQDK6X2x956tQOeeoyltovc8pP51KjiIV7u5KMIRLOYFlnjrvchL
JbttL7jzqZ/zjroxXtYrzLOHrP9wcOLnaoliZZQBaGkgLZ8eB04r+OE0883HeEYk
uolmJtWfB6luDzWvP3Jg0Ma3/zwfYD/slUK2Vvqklx9urQyHu7VPtvixxhDepD2h
Xk/yJ4nVMQ6E0uAcFKJ4gJcQpGGS6d+PnQ1iWhJzfVzAXpmKFLXwHKDERd5j2Vh5
zayn7VLwNbFk2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:27 2025 by rpki-client