Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: DH2ILpaIw1urLcMT7CAqJ7JX18as3I0wR8KlwwNLONc=
Subject key identifier: AF:19:9E:36:B0:81:57:38:74:62:A0:FA:6E:6E:90:E1:84:61:40:69
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 01964669F2549B3D408F2450EAE3DB196DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 01:01:10 +0000
Manifest this update: Fri 18 Apr 2025 01:01:10 +0000
Manifest next update: Sat 19 Apr 2025 01:01:10 +0000
Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: d5e5C/rX/MMe5tGOB+RTK0Q+0u9JRXnHOfXNuiMQ+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:f2:54:9b:3d:40:8f:24:50:ea:e3:db:19:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Apr 18 01:01:10 2025 GMT
Not After : Apr 19 01:01:10 2025 GMT
Subject: CN=af199e36b08157387462a0fa6e6e90e184614069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:69:4c:dc:27:d1:03:88:08:0d:c8:66:fe:
b9:ef:f5:ce:20:1d:28:c9:eb:41:22:ce:8e:3c:3c:
23:46:82:c3:9a:27:f8:2d:10:11:65:61:a2:90:80:
ef:ce:e2:6d:8b:4b:10:f4:ea:95:49:c2:f0:fd:9b:
8c:0c:fe:b8:fa:ba:38:e2:f4:8c:9b:af:80:ce:e7:
2d:76:32:08:45:4c:7d:ed:75:79:87:94:76:b7:d6:
8a:b5:09:9a:90:96:86:65:e7:1a:92:73:6d:a6:8f:
40:75:7d:c9:c8:1a:21:75:bc:3b:2c:84:1c:e4:83:
d9:62:cb:e7:1c:b6:00:99:a8:51:33:2b:e9:e4:b8:
02:f9:84:c9:9b:43:4e:64:d8:86:45:34:cc:cb:99:
2d:4b:a5:c1:2f:b2:e1:3c:d3:d5:72:7f:4f:a2:44:
8b:ec:1e:e1:f9:db:00:56:db:de:e8:a6:bc:a8:92:
56:46:a9:4b:14:a5:3b:cb:27:b6:c4:96:ae:3d:f8:
a9:64:e6:b4:7d:96:ad:f7:60:3f:a2:7a:9d:04:73:
1b:17:ff:2b:5b:26:ab:88:1f:3f:88:80:04:ca:83:
89:55:d1:c0:a5:fc:24:e2:6d:4d:a4:06:83:c9:a3:
ba:b5:c1:a3:b1:d6:55:6e:e2:13:5b:fa:c7:0b:8a:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:9E:36:B0:81:57:38:74:62:A0:FA:6E:6E:90:E1:84:61:40:69
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:2f:bf:0a:7c:ce:c7:8c:e5:d7:1b:d4:5c:ca:e0:04:4e:
05:c7:52:16:a2:ae:6d:d6:fb:f7:4a:e6:34:df:14:31:bc:37:
02:3e:e1:4e:cd:ea:72:d6:4a:0b:c1:13:46:ff:89:2f:68:3b:
f5:1d:af:e7:cb:a2:fd:6e:b2:2d:4e:c2:63:71:6a:41:7b:34:
0c:1e:44:8e:1a:3b:d3:78:13:ee:9b:ca:c5:f9:32:c9:cc:c3:
c7:39:49:19:ce:04:bf:41:57:5d:c1:f1:04:67:67:1c:88:2c:
6a:75:eb:0e:4b:f5:86:e2:a8:30:7a:28:56:4f:3b:ee:65:a2:
46:81:14:ff:e5:e0:f0:16:47:14:ec:75:d7:a5:00:66:c5:41:
72:60:00:7c:99:c7:b9:be:41:ab:0b:77:88:eb:6f:0e:44:28:
f4:73:02:05:d5:6a:a2:67:fb:c4:99:6b:88:9e:10:a6:df:cf:
17:4d:be:39:d8:f3:06:01:b5:b1:ba:80:ab:8a:ee:ac:6d:8d:
e5:28:f5:eb:68:c1:a5:8f:db:82:fa:35:99:82:0a:13:07:5d:
03:e5:2e:ef:fc:76:ea:3d:bc:f7:3f:2a:cf:92:c1:ff:9a:7e:
e0:6b:7d:12:e2:fa:50:12:57:8a:09:cd:da:53:2a:fb:f3:92:
0d:c3:bb:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGafJUmz1AjyRQ6uPbGW2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4
MzAxNmMwHhcNMjUwNDE4MDEwMTEwWhcNMjUwNDE5MDEwMTEwWjAzMTEwLwYDVQQD
EyhhZjE5OWUzNmIwODE1NzM4NzQ2MmEwZmE2ZTZlOTBlMTg0NjE0MDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGZpTNwn0QOICA3IZv657/XOIB0o
yetBIs6OPDwjRoLDmif4LRARZWGikIDvzuJti0sQ9OqVScLw/ZuMDP64+ro44vSM
m6+AzuctdjIIRUx97XV5h5R2t9aKtQmakJaGZecaknNtpo9AdX3JyBohdbw7LIQc
5IPZYsvnHLYAmahRMyvp5LgC+YTJm0NOZNiGRTTMy5ktS6XBL7LhPNPVcn9PokSL
7B7h+dsAVtve6Ka8qJJWRqlLFKU7yye2xJauPfipZOa0fZat92A/onqdBHMbF/8r
WyariB8/iIAEyoOJVdHApfwk4m1NpAaDyaO6tcGjsdZVbuITW/rHC4raJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8ZnjawgVc4dGKg+m5ukOGEYUBpMB8GA1UdIwQY
MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt
YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5
LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9svvwp8
zseM5dcb1FzK4AROBcdSFqKubdb790rmNN8UMbw3Aj7hTs3qctZKC8ETRv+JL2g7
9R2v58ui/W6yLU7CY3FqQXs0DB5Ejho703gT7pvKxfkyyczDxzlJGc4Ev0FXXcHx
BGdnHIgsanXrDkv1huKoMHooVk877mWiRoEU/+Xg8BZHFOx116UAZsVBcmAAfJnH
ub5Bqwt3iOtvDkQo9HMCBdVqomf7xJlriJ4Qpt/PF02+OdjzBgG1sbqAq4rurG2N
5Sj162jBpY/bgvo1mYIKEwddA+Uu7/x26j289z8qz5LB/5p+4Gt9EuL6UBJXignN
2lMq+/OSDcO7AA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:29:01 2025 by rpki-client