Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: DhRF9/Xy0/fTzO8Yze+bj2wk6xbInqXQsl/FzxoS3P4=
Subject key identifier: 7E:AD:68:63:A9:9C:2C:E6:74:B1:B2:55:F3:44:2D:32:B6:BA:E7:2B
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019610FBA856B461B1F5167179AE4D8DCC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 0FBA
Signing time: Mon 07 Apr 2025 16:00:50 +0000
Manifest this update: Mon 07 Apr 2025 16:00:50 +0000
Manifest next update: Tue 08 Apr 2025 16:00:50 +0000
Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: b1KVy+mA5tJBp4NSULG+lB0nnFDw9Ix/jBKI2NVZyAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:a8:56:b4:61:b1:f5:16:71:79:ae:4d:8d:cc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Apr 7 16:00:50 2025 GMT
Not After : Apr 8 16:00:50 2025 GMT
Subject: CN=7ead6863a99c2ce674b1b255f3442d32b6bae72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:03:a9:17:ef:2c:3a:5f:3f:04:73:74:be:
d2:2f:c9:96:ae:00:7b:cc:f8:da:0e:d2:5d:8c:50:
a1:1e:31:a5:19:56:6f:b6:be:1c:74:b3:4e:62:f5:
b2:ef:c3:98:37:ef:4b:0b:c9:84:8c:72:f4:34:51:
0e:c6:c7:ec:80:7a:2e:76:4f:0a:2f:3a:f2:fd:8a:
88:c9:be:5b:12:7a:18:71:e9:47:4a:56:7a:2c:57:
bd:27:99:cf:68:20:a0:d7:b9:24:46:fe:37:17:40:
27:4e:55:44:6c:85:56:a8:31:d3:b2:a5:95:47:dd:
e8:9a:87:c6:a2:80:83:60:57:29:62:bb:ff:90:ce:
cc:03:a8:59:28:ab:d0:98:23:52:02:8a:8c:0b:59:
22:ee:9f:e0:7a:e4:d8:7d:cb:1a:f2:dc:fd:32:e4:
25:be:49:99:9f:e9:c7:8b:95:68:95:82:c3:6c:cb:
ab:d0:e4:83:23:59:8c:a3:8a:74:0f:45:1a:4c:e4:
30:1f:03:75:f9:44:44:3d:2d:92:df:78:59:7d:1c:
e7:67:d4:88:ec:b9:e0:53:24:04:83:55:60:96:41:
2c:7c:00:29:a2:cd:e4:b1:b0:16:1b:ad:b8:b8:81:
82:b2:3c:ef:d7:70:93:4e:78:7a:d0:81:87:87:40:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AD:68:63:A9:9C:2C:E6:74:B1:B2:55:F3:44:2D:32:B6:BA:E7:2B
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:05:fb:35:8e:23:6e:d4:e5:0f:b7:94:fe:ca:80:88:37:
31:b9:19:3a:13:b1:b1:37:fa:74:c9:59:0e:30:5c:3c:8c:a3:
cb:1b:8e:39:d5:b6:85:38:bc:df:e6:af:da:37:f2:23:a1:a4:
6e:49:f3:3f:a2:50:70:63:d6:f6:dd:02:a8:bb:b2:d1:31:56:
94:d5:f3:f4:79:63:4b:e2:cf:29:93:ff:aa:37:6f:8e:17:b0:
01:c0:04:ee:b4:37:dd:f1:f5:4f:5c:31:1b:d0:31:53:47:74:
59:61:87:13:b9:89:c3:eb:13:a1:73:3b:a0:00:f3:f5:42:80:
d5:4a:17:6e:60:73:99:49:75:9c:36:83:2c:85:7b:89:2b:d3:
dd:92:0d:d6:f5:c9:49:7f:50:a9:53:f6:f7:73:1a:f0:8a:d2:
30:fa:0d:b6:45:e8:23:da:be:a7:81:d3:84:4e:64:67:8b:ab:
69:07:3b:d2:52:d4:dc:15:ed:10:3a:54:a4:38:72:63:29:88:
3a:56:c3:24:85:d9:09:22:b2:5b:b9:3a:f0:ec:b1:6a:52:a4:
1d:2a:40:72:a1:b2:8e:d1:30:42:70:5c:6c:64:11:a2:2f:9a:
1d:e4:ee:55:50:24:6d:97:86:d3:69:98:f0:a6:9c:94:c3:3b:
7c:87:56:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQ+6hWtGGx9RZxea5Njcx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzdkOGYzOWUzZjhmYjY2MzhmNzA4M2FiOWYxNmMwNDdk
MGQzNjQwHhcNMjUwNDA3MTYwMDUwWhcNMjUwNDA4MTYwMDUwWjAzMTEwLwYDVQQD
Eyg3ZWFkNjg2M2E5OWMyY2U2NzRiMWIyNTVmMzQ0MmQzMmI2YmFlNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFYDqRfvLDpfPwRzdL7SL8mWrgB7
zPjaDtJdjFChHjGlGVZvtr4cdLNOYvWy78OYN+9LC8mEjHL0NFEOxsfsgHoudk8K
Lzry/YqIyb5bEnoYcelHSlZ6LFe9J5nPaCCg17kkRv43F0AnTlVEbIVWqDHTsqWV
R93omofGooCDYFcpYrv/kM7MA6hZKKvQmCNSAoqMC1ki7p/geuTYfcsa8tz9MuQl
vkmZn+nHi5VolYLDbMur0OSDI1mMo4p0D0UaTOQwHwN1+UREPS2S33hZfRznZ9SI
7LngUyQEg1VglkEsfAApos3ksbAWG624uIGCsjzv13CTTnh60IGHh0BHawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6taGOpnCzmdLGyVfNELTK2uucrMB8GA1UdIwQY
MBaAFIJ32POeP4+2Y49wg6ufFsBH0NNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTkt
NTc3ZGExMmUzNjQ4LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTktNTc3ZGExMmUzNjQ4
LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdwF+zWO
I27U5Q+3lP7KgIg3MbkZOhOxsTf6dMlZDjBcPIyjyxuOOdW2hTi83+av2jfyI6Gk
bknzP6JQcGPW9t0CqLuy0TFWlNXz9HljS+LPKZP/qjdvjhewAcAE7rQ33fH1T1wx
G9AxU0d0WWGHE7mJw+sToXM7oADz9UKA1UoXbmBzmUl1nDaDLIV7iSvT3ZIN1vXJ
SX9QqVP293Ma8IrSMPoNtkXoI9q+p4HThE5kZ4uraQc70lLU3BXtEDpUpDhyYymI
OlbDJIXZCSKyW7k68OyxalKkHSpAcqGyjtEwQnBcbGQRoi+aHeTuVVAkbZeG02mY
8KaclMM7fIdW1g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:14:48 2025 by rpki-client