Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: AcSwpG/L8wUW+TTDRGMvk6TtbDXmbnQqrYoX+qVDSjE=
Subject key identifier: AD:87:D0:82:30:C8:8E:B4:32:1D:7E:D3:7B:59:A7:39:06:02:34:6E
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 01958C96EC423F8AE6BB4D1C9BE993EE8844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 03CD
Signing time: Wed 12 Mar 2025 23:00:55 +0000
Manifest this update: Wed 12 Mar 2025 23:00:55 +0000
Manifest next update: Thu 13 Mar 2025 23:00:55 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: GawAuhqAOb9bZL4ClYZVYgrzYdPU6NcMkiKLjJZkAR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:ec:42:3f:8a:e6:bb:4d:1c:9b:e9:93:ee:88:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Mar 12 23:00:55 2025 GMT
Not After : Mar 13 23:00:55 2025 GMT
Subject: CN=ad87d08230c88eb4321d7ed37b59a7390602346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:87:89:ef:27:14:38:fe:a3:5b:0e:a2:e3:
1f:80:c2:04:4b:dd:c0:50:f8:c4:e7:dd:da:7b:92:
b7:c7:15:97:42:30:d0:63:87:ea:39:cb:66:a1:73:
d4:ac:82:d9:bf:69:37:dd:1b:99:59:3e:56:3f:c0:
f8:0f:4a:7b:51:57:92:19:f2:be:20:65:c1:f0:c9:
81:69:8d:57:22:d1:1c:31:8d:82:ad:ed:ab:1c:d7:
d9:84:fd:41:22:66:7a:d5:6e:e7:75:ab:cd:a3:64:
db:a0:33:23:58:ce:a3:68:00:4e:e1:02:21:15:99:
3a:9e:18:94:d8:ff:2a:27:4e:4e:03:94:6d:a8:41:
cb:c8:ec:5a:a3:e0:fd:fc:fe:27:00:bd:5d:6a:b9:
3b:2a:20:21:f8:1a:2a:a0:ad:7a:58:06:04:45:10:
e4:f5:f3:b9:44:9d:32:21:a7:b8:55:58:f2:43:c9:
af:08:5b:b2:fb:15:ed:a2:61:7f:61:7e:93:87:47:
f8:a5:71:5e:d0:1f:96:2b:25:f3:42:ce:b0:e1:74:
55:93:36:1b:b2:e1:ad:4e:37:36:04:fa:4a:4a:c8:
bb:cd:bb:d4:d3:d7:2e:fc:8a:12:b0:d0:e4:fa:bf:
ce:0a:16:c9:8d:89:05:7b:7f:c3:c2:9a:47:11:37:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:D0:82:30:C8:8E:B4:32:1D:7E:D3:7B:59:A7:39:06:02:34:6E
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:3c:8c:84:24:81:8e:6a:e9:86:52:81:eb:f6:e3:b9:e2:
f6:6e:ef:69:af:06:9d:ea:ea:64:be:2d:b1:a0:1e:e1:50:5c:
99:43:0d:50:3e:c5:ef:c8:0e:e3:3d:b3:fa:7e:d4:f2:65:0f:
c4:e1:f3:76:b9:08:d2:14:bf:bc:76:25:8f:24:b9:54:bd:9e:
85:30:3a:b6:51:f5:16:70:64:a2:c0:55:31:6e:f2:49:be:3d:
79:73:20:bf:db:af:cd:61:77:12:24:bd:22:b5:4f:04:0b:5f:
a9:9b:29:0c:20:c2:56:48:a0:ca:b0:c9:12:f0:f8:14:19:9b:
72:04:86:5e:ce:c9:f8:4c:d0:2b:ca:28:a5:64:11:50:29:7b:
24:78:1e:cf:f0:a9:bf:08:f2:03:34:a7:12:b9:2d:4f:60:f1:
8a:a8:73:9c:9a:5d:a3:73:74:cd:c9:ed:d5:06:9a:c6:72:01:
51:ec:d6:6d:98:ed:8c:2c:80:b2:c3:5e:e7:b6:07:b6:39:dd:
92:1d:29:d7:b4:b1:92:02:78:23:eb:ec:6a:fa:f1:fe:c1:aa:
51:61:a7:4d:84:de:b5:51:d5:d5:5e:94:8f:75:93:ae:98:4e:
29:89:18:b6:2e:09:fd:b6:ee:c6:8f:63:25:9b:38:11:0b:f1:
51:40:40:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMluxCP4rmu00cm+mT7ohEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz
ZTVmNzAwHhcNMjUwMzEyMjMwMDU1WhcNMjUwMzEzMjMwMDU1WjAzMTEwLwYDVQQD
EyhhZDg3ZDA4MjMwYzg4ZWI0MzIxZDdlZDM3YjU5YTczOTA2MDIzNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbiHie8nFDj+o1sOouMfgMIES93A
UPjE593ae5K3xxWXQjDQY4fqOctmoXPUrILZv2k33RuZWT5WP8D4D0p7UVeSGfK+
IGXB8MmBaY1XItEcMY2Cre2rHNfZhP1BImZ61W7ndavNo2TboDMjWM6jaABO4QIh
FZk6nhiU2P8qJ05OA5RtqEHLyOxao+D9/P4nAL1dark7KiAh+BoqoK16WAYERRDk
9fO5RJ0yIae4VVjyQ8mvCFuy+xXtomF/YX6Th0f4pXFe0B+WKyXzQs6w4XRVkzYb
suGtTjc2BPpKSsi7zbvU09cu/IoSsNDk+r/OChbJjYkFe3/DwppHETcpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2H0IIwyI60Mh1+03tZpzkGAjRuMB8GA1UdIwQY
MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt
NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1
LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNo8jIQk
gY5q6YZSgev247ni9m7vaa8GnerqZL4tsaAe4VBcmUMNUD7F78gO4z2z+n7U8mUP
xOHzdrkI0hS/vHYljyS5VL2ehTA6tlH1FnBkosBVMW7ySb49eXMgv9uvzWF3EiS9
IrVPBAtfqZspDCDCVkigyrDJEvD4FBmbcgSGXs7J+EzQK8oopWQRUCl7JHgez/Cp
vwjyAzSnErktT2DxiqhznJpdo3N0zcnt1QaaxnIBUezWbZjtjCyAssNe57YHtjnd
kh0p17SxkgJ4I+vsavrx/sGqUWGnTYTetVHV1V6Uj3WTrphOKYkYti4J/bbuxo9j
JZs4EQvxUUBAgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:25 2025 by rpki-client