Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: s7qWD49SRkjRf9KfInXXU50AfHSyJ8yl2InBIWk9y90=
Subject key identifier: DE:5E:E0:A4:CE:B5:ED:FB:A0:DA:F4:EA:5F:5E:10:4F:97:DA:A7:67
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 019652002442DAF985F7D665D7827003D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: CA
Signing time: Sun 20 Apr 2025 07:01:03 +0000
Manifest this update: Sun 20 Apr 2025 07:01:03 +0000
Manifest next update: Mon 21 Apr 2025 07:01:03 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: ORJ9k/FDsdSMQAwRD+m0Miz3lQMxAu9NDF/jSnzlpZU=)
2: oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa (hash: zclvRtzWTLzWr7SKBjsrPG4/869JCHe23hkSJVxmGco=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:24:42:da:f9:85:f7:d6:65:d7:82:70:03:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Apr 20 07:01:03 2025 GMT
Not After : Apr 21 07:01:03 2025 GMT
Subject: CN=de5ee0a4ceb5edfba0daf4ea5f5e104f97daa767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:09:54:ef:68:1c:2c:82:5f:9e:13:91:d6:
a8:31:49:9f:4e:fe:33:fe:e3:d6:38:ac:8f:56:6f:
00:d2:ba:3b:83:e5:97:3e:5d:70:11:bc:68:c3:ae:
b5:40:7a:1a:32:a8:55:09:55:61:74:a3:63:e4:20:
b4:b9:c5:6f:b4:70:d7:2d:67:a8:5a:d0:26:b3:9b:
8b:3c:a7:13:98:16:c9:f1:84:df:f8:7e:c3:81:55:
b1:29:f5:7e:83:ee:42:25:d1:e6:b7:cb:43:78:af:
17:e2:7d:96:75:33:8e:8c:8d:3c:c0:ea:8e:5d:0b:
5f:bd:f7:df:c8:e1:7b:cc:37:3e:20:79:fc:9f:39:
c5:c5:19:b8:21:d6:66:9f:f2:d8:a9:65:6a:17:e2:
e7:7d:65:81:e9:44:4c:c5:99:ab:a3:11:d0:66:a3:
cf:22:f5:96:05:ae:75:f5:7a:ab:e0:d6:f5:66:05:
a2:54:94:56:12:75:f2:2a:30:09:2f:87:ed:e0:84:
d7:20:2f:92:97:9b:81:51:9f:94:74:2d:60:16:d3:
e6:1f:95:14:a5:46:3d:12:9c:46:e3:f3:dd:30:c3:
47:b9:16:ff:7f:d8:c4:81:e3:b8:28:2c:11:d6:c9:
05:1d:a6:fe:15:b9:66:1a:8d:24:eb:96:2a:89:72:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:E0:A4:CE:B5:ED:FB:A0:DA:F4:EA:5F:5E:10:4F:97:DA:A7:67
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f4:70:35:bd:55:59:33:b8:27:34:a6:15:2a:5f:8c:18:c1:
8e:6a:9e:4e:83:7a:80:12:82:17:40:37:5c:fa:c9:87:a0:66:
e9:0b:a6:12:ab:33:8e:b8:fe:bc:73:05:a1:b4:7d:2d:b0:e8:
1a:51:f4:b9:b1:ff:15:25:25:80:0d:94:86:d1:cf:12:c4:c2:
42:67:67:47:dd:97:4e:0d:3e:1f:e8:fb:30:0b:ea:92:19:cc:
2e:91:0b:4d:57:48:cc:8d:3e:19:ed:0a:2e:24:87:ed:26:71:
a9:63:bb:8f:e9:86:a3:ea:45:72:d6:91:e0:f3:0d:cd:bd:5c:
9a:43:8f:85:db:56:67:65:3d:67:0c:a7:be:b4:2f:eb:ff:8c:
15:d7:13:cc:e4:52:f8:d0:42:3e:ca:fe:93:d1:de:2d:71:a0:
7d:92:a9:c7:6c:88:5c:9c:e1:bf:97:83:8f:71:72:7c:79:c8:
f8:be:d6:78:da:37:e4:10:6c:51:ad:a2:c5:36:a8:7a:ef:9e:
b0:78:bb:a1:cf:df:f4:21:e1:7b:69:4b:58:bc:3b:32:ed:31:
02:27:be:92:5c:a0:af:d5:4e:38:a1:de:d0:37:f7:24:94:0c:
1f:86:1b:3c:05:ca:76:17:24:6e:99:f8:80:f0:ea:63:1e:3f:
4f:a5:f9:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSACRC2vmF99Zl14JwA9beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjJjZjgwN2E1NmI3NzFhNWY0MmNjMTg5YWYyZDYzMWVi
NWFhZWMwHhcNMjUwNDIwMDcwMTAzWhcNMjUwNDIxMDcwMTAzWjAzMTEwLwYDVQQD
EyhkZTVlZTBhNGNlYjVlZGZiYTBkYWY0ZWE1ZjVlMTA0Zjk3ZGFhNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXQJVO9oHCyCX54TkdaoMUmfTv4z
/uPWOKyPVm8A0ro7g+WXPl1wEbxow661QHoaMqhVCVVhdKNj5CC0ucVvtHDXLWeo
WtAms5uLPKcTmBbJ8YTf+H7DgVWxKfV+g+5CJdHmt8tDeK8X4n2WdTOOjI08wOqO
XQtfvfffyOF7zDc+IHn8nznFxRm4IdZmn/LYqWVqF+LnfWWB6URMxZmroxHQZqPP
IvWWBa519Xqr4Nb1ZgWiVJRWEnXyKjAJL4ft4ITXIC+Sl5uBUZ+UdC1gFtPmH5UU
pUY9EpxG4/PdMMNHuRb/f9jEgeO4KCwR1skFHab+FblmGo0k65YqiXI9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5e4KTOte37oNr06l9eEE+X2qdnMB8GA1UdIwQY
MBaAFNBiz4B6VrdxpfQswYmvLWMetarsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQt
MWRkNWZhYTA2YjBhLzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQtMWRkNWZhYTA2YjBh
LzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/RwNb1V
WTO4JzSmFSpfjBjBjmqeToN6gBKCF0A3XPrJh6Bm6QumEqszjrj+vHMFobR9LbDo
GlH0ubH/FSUlgA2UhtHPEsTCQmdnR92XTg0+H+j7MAvqkhnMLpELTVdIzI0+Ge0K
LiSH7SZxqWO7j+mGo+pFctaR4PMNzb1cmkOPhdtWZ2U9ZwynvrQv6/+MFdcTzORS
+NBCPsr+k9HeLXGgfZKpx2yIXJzhv5eDj3FyfHnI+L7WeNo35BBsUa2ixTaoeu+e
sHi7oc/f9CHhe2lLWLw7Mu0xAie+klygr9VOOKHe0Df3JJQMH4YbPAXKdhckbpn4
gPDqYx4/T6X5Dg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:20:56 2025 by rpki-client