Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: 9d9kbavii3ET2kjgmjvMukkz1Idai1AfsS31EPB6g3U=
Subject key identifier: 97:19:75:35:23:F8:D6:7E:E7:12:FB:97:4C:67:F4:99:D0:F4:8D:9A
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 019642FA9020EE01B3F5ADD1AD3E3BA7E86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 14B6
Signing time: Thu 17 Apr 2025 09:00:39 +0000
Manifest this update: Thu 17 Apr 2025 09:00:39 +0000
Manifest next update: Fri 18 Apr 2025 09:00:39 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: i1VUPeHKhTBTW2Ibzy2xN8G/0QYuKowMtg+4dnaBlaw=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:90:20:ee:01:b3:f5:ad:d1:ad:3e:3b:a7:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Apr 17 09:00:39 2025 GMT
Not After : Apr 18 09:00:39 2025 GMT
Subject: CN=9719753523f8d67ee712fb974c67f499d0f48d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:30:e4:1f:24:b3:e4:0a:2a:cb:b1:c3:44:
1a:e7:6d:77:96:95:2a:59:fe:3d:0f:7f:96:ce:b8:
5e:b3:3b:09:fb:7f:59:bd:f3:fe:ee:a0:99:c9:04:
30:64:18:1d:e4:da:e1:a5:0c:39:16:c1:c7:33:af:
6a:da:20:52:13:0d:4f:7d:ba:21:ea:86:6d:de:05:
0f:12:0d:fa:76:96:6f:37:84:99:c3:8f:54:4b:2b:
7c:67:d8:34:12:0f:ee:c3:d8:9f:21:c2:72:41:8d:
20:14:0b:96:8a:f7:64:27:4c:42:a6:a9:6f:d0:c8:
b5:00:ac:8d:5d:58:bc:f8:90:04:3f:13:df:6c:45:
c6:44:69:f7:36:48:85:1c:cf:0d:09:c1:bd:bd:ee:
30:cd:c0:75:d2:cf:09:aa:2f:7b:e8:5d:93:bc:fd:
c2:a2:41:aa:ec:5f:19:20:45:c0:79:73:42:2d:6e:
f1:2b:3b:80:18:c9:00:ef:b9:3f:16:74:cd:35:c8:
66:86:98:27:af:ae:8f:89:f6:0f:97:f9:75:58:36:
44:a5:2a:66:29:47:9b:63:31:04:07:02:e6:c7:ef:
cb:8a:3b:37:c5:0f:65:01:02:48:b4:b1:bb:36:fe:
63:07:57:c5:3e:c6:38:19:65:c3:53:a5:cd:c8:fc:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:75:35:23:F8:D6:7E:E7:12:FB:97:4C:67:F4:99:D0:F4:8D:9A
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e2:0b:e6:e6:6d:6f:d8:93:c8:11:9c:4a:dc:bf:1d:a8:6e:
ee:ad:5b:9a:c5:58:f5:ae:75:d1:6d:d6:0a:62:37:14:e5:e4:
b3:fa:ea:12:89:e7:98:7a:da:4d:fe:c3:1b:76:95:14:87:ab:
6c:fc:80:a9:3f:7e:6c:fa:c7:68:f2:19:b0:a5:53:a6:2a:5e:
c5:28:fc:d2:0d:27:26:87:d7:bf:f3:6b:76:b6:79:23:70:ac:
b6:93:dd:9b:2a:e1:7d:5a:15:94:d3:56:17:68:43:7e:52:99:
d5:18:f9:13:20:67:01:ed:ad:ad:d9:87:3a:5c:7a:72:bb:a9:
f1:07:e3:9f:c9:8a:79:d5:3b:b0:1b:73:e8:c8:28:36:94:cc:
0c:45:5e:1c:c5:9b:aa:05:83:c3:a8:67:a2:30:2e:4f:f2:91:
5e:35:62:03:bf:fd:8b:a0:b6:c6:e8:a3:ef:51:48:6a:ba:cc:
e8:ea:6d:3e:af:96:e1:47:e1:59:cb:6c:22:69:23:fa:78:71:
2e:b4:35:e8:39:ee:07:d7:94:46:dd:52:50:cf:ba:63:34:7e:
ae:20:1d:07:df:fc:7e:3c:8f:04:c9:8f:8a:6d:a1:d5:31:45:
be:53:80:6a:93:0f:69:42:90:9a:46:54:2f:74:98:2f:c0:98:
85:8f:5a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZC+pAg7gGz9a3RrT47p+huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjZhZjQyNWFiM2QzOWQ3MzM3YzJiMTI1ZDM5NTkzYWQ5
MWMxZDEwHhcNMjUwNDE3MDkwMDM5WhcNMjUwNDE4MDkwMDM5WjAzMTEwLwYDVQQD
Eyg5NzE5NzUzNTIzZjhkNjdlZTcxMmZiOTc0YzY3ZjQ5OWQwZjQ4ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHEw5B8ks+QKKsuxw0Qa5213lpUq
Wf49D3+WzrheszsJ+39ZvfP+7qCZyQQwZBgd5NrhpQw5FsHHM69q2iBSEw1Pfboh
6oZt3gUPEg36dpZvN4SZw49USyt8Z9g0Eg/uw9ifIcJyQY0gFAuWivdkJ0xCpqlv
0Mi1AKyNXVi8+JAEPxPfbEXGRGn3NkiFHM8NCcG9ve4wzcB10s8Jqi976F2TvP3C
okGq7F8ZIEXAeXNCLW7xKzuAGMkA77k/FnTNNchmhpgnr66PifYPl/l1WDZEpSpm
KUebYzEEBwLmx+/Lijs3xQ9lAQJItLG7Nv5jB1fFPsY4GWXDU6XNyPyqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcZdTUj+NZ+5xL7l0xn9JnQ9I2aMB8GA1UdIwQY
MBaAFAhmr0Jas9OdczfCsSXTlZOtkcHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMt
YjdlYjEyOTk4YjM1LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMtYjdlYjEyOTk4YjM1
LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguIL5uZt
b9iTyBGcSty/Hahu7q1bmsVY9a510W3WCmI3FOXks/rqEonnmHraTf7DG3aVFIer
bPyAqT9+bPrHaPIZsKVTpipexSj80g0nJofXv/NrdrZ5I3CstpPdmyrhfVoVlNNW
F2hDflKZ1Rj5EyBnAe2trdmHOlx6crup8Qfjn8mKedU7sBtz6MgoNpTMDEVeHMWb
qgWDw6hnojAuT/KRXjViA7/9i6C2xuij71FIarrM6OptPq+W4UfhWctsImkj+nhx
LrQ16DnuB9eURt1SUM+6YzR+riAdB9/8fjyPBMmPim2h1TFFvlOAapMPaUKQmkZU
L3SYL8CYhY9aJw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:08:39 2025 by rpki-client