Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: BVSel8Unazz93Wrr0zMuKEDHja+nmHfh4uhaKAiD7Do=
Subject key identifier: 2D:B4:FE:42:43:B6:3F:9F:94:53:45:A3:81:1C:28:DE:2C:08:15:43
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 01960F7B7E68CEFF6016B1E7806DD7A71475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 14F4
Signing time: Mon 07 Apr 2025 09:01:13 +0000
Manifest this update: Mon 07 Apr 2025 09:01:13 +0000
Manifest next update: Tue 08 Apr 2025 09:01:13 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: OWvd8Rj4ilyYRAgFv5gDmI7wYmXzA8NXiSjUfm1ATpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:7e:68:ce:ff:60:16:b1:e7:80:6d:d7:a7:14:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Apr 7 09:01:13 2025 GMT
Not After : Apr 8 09:01:13 2025 GMT
Subject: CN=2db4fe4243b63f9f945345a3811c28de2c081543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:50:e6:19:48:bd:ed:da:50:c7:04:9f:23:
af:f5:ff:8d:d2:e7:e6:a7:2e:a8:65:ce:59:d1:77:
0e:c9:26:59:59:eb:48:85:88:b7:a2:ca:48:af:02:
8a:a6:89:34:4f:1d:25:b1:7e:f1:ca:cf:97:5a:60:
2f:4f:6d:c7:c8:bc:1b:bc:d1:a6:55:99:b4:46:dd:
3d:65:fa:c4:de:7f:f9:da:7a:e0:ab:d9:81:06:28:
16:ea:66:df:07:1b:4a:6f:b9:5e:87:c0:eb:bd:cc:
97:78:c8:6d:da:b4:ee:f1:a6:53:f6:b0:49:a3:f4:
f8:b3:d7:4f:ad:b7:6b:cb:d1:a9:4a:21:12:fa:da:
5f:f2:0f:72:9a:f1:f0:36:9c:c8:a6:aa:44:83:2e:
53:99:81:13:35:98:02:bc:46:d6:74:0d:ea:99:9a:
bb:b1:57:91:9a:a6:4f:71:b6:a6:fd:79:10:d4:ab:
fb:e7:1e:d7:e3:6e:f2:bd:84:ea:d1:48:4d:a2:2a:
5f:d6:fa:1e:6c:f6:3c:c4:70:78:3c:19:71:0c:85:
db:3c:1e:33:c6:bc:b2:c5:a7:4c:b0:c1:c3:a8:81:
65:0a:14:98:d9:f9:b6:e7:e4:2c:03:a5:28:c1:7a:
18:bb:c4:e4:4d:97:ad:62:6a:8b:f4:c4:36:15:17:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:FE:42:43:B6:3F:9F:94:53:45:A3:81:1C:28:DE:2C:08:15:43
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9f:6d:21:bd:0f:17:70:70:07:e1:9e:35:cd:ba:c0:b7:b7:
69:51:01:bd:51:8b:4d:5d:94:9c:cb:a1:fe:c5:50:ff:f5:48:
84:51:1e:82:c7:f4:2c:a8:b2:1f:b7:c6:ed:52:30:59:d8:6c:
fb:76:e8:af:80:40:f9:f3:7b:34:5e:e1:2e:52:a4:a9:37:d2:
2e:80:c0:99:d8:f2:e7:d5:a6:c3:22:57:b7:79:65:76:45:24:
2e:2c:f0:2e:90:29:70:61:a6:b7:29:f9:b7:a1:31:ae:41:61:
ca:05:82:fa:e8:24:4c:8e:76:94:0b:b5:f4:3a:27:a3:f0:78:
9c:f1:b9:c8:38:7c:22:ec:2e:9c:7f:ae:b1:dc:13:c6:cb:66:
53:94:7d:b5:7c:32:91:80:ea:3f:5a:c7:68:37:f8:9b:d0:30:
4c:fc:fd:6b:1f:78:e6:87:27:85:ef:75:28:b7:d9:2c:dc:73:
ba:0e:93:47:78:bc:1d:47:f4:73:d1:81:4e:6b:1c:54:bd:a8:
c5:35:bd:ca:37:cb:9f:82:28:b4:99:32:5e:a7:37:8d:ac:98:
90:48:18:d0:fb:3c:66:0c:e3:6c:83:dc:4a:32:68:bc:5b:a7:
30:a5:25:42:1a:c4:89:5d:0a:ed:5f:75:13:68:f6:4f:24:11:
43:95:e8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPe35ozv9gFrHngG3XpxR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2
MGMwNTQwHhcNMjUwNDA3MDkwMTEzWhcNMjUwNDA4MDkwMTEzWjAzMTEwLwYDVQQD
EygyZGI0ZmU0MjQzYjYzZjlmOTQ1MzQ1YTM4MTFjMjhkZTJjMDgxNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2JQ5hlIve3aUMcEnyOv9f+N0ufm
py6oZc5Z0XcOySZZWetIhYi3ospIrwKKpok0Tx0lsX7xys+XWmAvT23HyLwbvNGm
VZm0Rt09ZfrE3n/52nrgq9mBBigW6mbfBxtKb7leh8DrvcyXeMht2rTu8aZT9rBJ
o/T4s9dPrbdry9GpSiES+tpf8g9ymvHwNpzIpqpEgy5TmYETNZgCvEbWdA3qmZq7
sVeRmqZPcbam/XkQ1Kv75x7X427yvYTq0UhNoipf1voebPY8xHB4PBlxDIXbPB4z
xryyxadMsMHDqIFlChSY2fm25+QsA6UowXoYu8TkTZetYmqL9MQ2FRdukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC20/kJDtj+flFNFo4EcKN4sCBVDMB8GA1UdIwQY
MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt
YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1
LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ9tIb0P
F3BwB+GeNc26wLe3aVEBvVGLTV2UnMuh/sVQ//VIhFEegsf0LKiyH7fG7VIwWdhs
+3bor4BA+fN7NF7hLlKkqTfSLoDAmdjy59WmwyJXt3lldkUkLizwLpApcGGmtyn5
t6ExrkFhygWC+ugkTI52lAu19Dono/B4nPG5yDh8IuwunH+usdwTxstmU5R9tXwy
kYDqP1rHaDf4m9AwTPz9ax945ocnhe91KLfZLNxzug6TR3i8HUf0c9GBTmscVL2o
xTW9yjfLn4IotJkyXqc3jayYkEgY0Ps8ZgzjbIPcSjJovFunMKUlQhrEiV0K7V91
E2j2TyQRQ5Xoew==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:20:08 2025 by rpki-client