Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: RlkgIsrFh7jX8Wdb3IMqIs7I/lu8xCXL5AwQLUh/lCs=
Subject key identifier: 35:4E:6D:72:27:55:F1:85:9A:7B:BE:80:85:FA:6E:C4:BA:16:D4:2A
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 01965C8369C04E9FFEEBF51DF2DD1041D62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 08:00:38 +0000
Manifest this update: Tue 22 Apr 2025 08:00:38 +0000
Manifest next update: Wed 23 Apr 2025 08:00:38 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: Kuy1zIv1eOQnSag6tn5y/x/gpsOZUyx3iBZqQhi8OWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:69:c0:4e:9f:fe:eb:f5:1d:f2:dd:10:41:d6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Apr 22 08:00:38 2025 GMT
Not After : Apr 23 08:00:38 2025 GMT
Subject: CN=354e6d722755f1859a7bbe8085fa6ec4ba16d42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:38:00:dc:55:32:90:d5:97:1a:a2:b3:a2:
ad:4e:5e:76:2f:fd:c8:bf:d8:c1:8e:68:7e:c0:d9:
d7:b0:17:65:92:f7:28:c0:28:15:43:58:3c:3c:e3:
73:42:bb:aa:b9:55:9e:00:76:bc:59:b3:6a:35:1c:
79:23:b1:18:ab:94:1f:09:d7:53:bb:9a:52:68:07:
f8:d2:ef:90:ed:97:4f:bd:86:4c:98:b3:22:be:6e:
18:de:f8:0a:35:bc:a8:03:d2:ca:f8:e5:92:8c:fe:
0b:83:02:8c:f1:f8:1c:6a:0b:78:50:5d:fa:ae:a4:
70:ed:ba:80:7c:95:ac:24:d0:63:5a:ef:db:b4:b0:
24:48:0e:c6:54:ff:cb:f4:71:c3:09:6c:f8:f7:cb:
9e:6e:6f:77:f4:78:f3:8f:ec:7f:c7:ac:de:d0:2a:
dc:7f:8c:80:84:64:24:42:e5:b4:46:2d:82:38:00:
74:81:e5:e7:1c:cf:ee:cc:5d:7c:8b:07:7b:20:50:
f0:15:2f:91:93:1c:fe:33:5c:09:2b:e1:0e:33:4b:
cf:48:3a:19:04:c4:ee:79:b6:99:62:80:a9:02:d9:
85:0e:62:a2:a4:f3:28:ac:11:c4:92:94:b3:0f:9c:
50:48:bd:48:2d:ed:3c:7e:2d:ab:77:22:b4:ed:85:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:6D:72:27:55:F1:85:9A:7B:BE:80:85:FA:6E:C4:BA:16:D4:2A
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:ac:28:f9:14:01:44:32:d7:87:43:d0:c5:e0:00:dd:ba:
73:67:67:49:85:e2:50:f5:bc:22:f2:f8:49:a2:91:8f:0b:1c:
fc:f8:75:22:40:70:80:02:7f:bf:6d:d3:f8:b9:c8:7a:02:99:
e6:ce:f4:56:78:d9:eb:6e:16:d0:6c:d8:c5:1d:dd:ff:80:22:
55:df:b3:63:95:a2:3a:10:fc:95:6f:80:6d:cd:26:61:b8:fc:
6d:e6:66:51:73:90:27:59:bc:8e:fd:f5:6c:5c:bd:34:e0:9b:
f4:ad:c0:ac:9e:2a:47:94:2b:fd:c5:9a:27:4e:62:15:80:89:
4f:b6:e2:5f:0e:34:5e:8e:35:a9:5c:e9:08:78:8e:89:0a:ae:
17:64:67:98:67:c2:1a:61:50:72:89:26:65:b6:99:39:42:fb:
e4:08:63:ba:9f:b0:ad:1b:24:8b:9a:af:77:4a:03:ac:de:f0:
4d:0a:e9:19:66:0b:2b:19:fc:f6:8a:75:76:1f:a1:7e:28:34:
74:6c:94:bd:d3:3c:cf:5b:e0:c4:a3:bd:d5:fd:47:f6:a4:57:
c1:ac:48:87:0e:71:12:ec:68:f1:2b:26:8b:8b:95:cb:86:7a:
59:6e:21:76:2f:9e:a9:4f:9c:30:53:a0:d9:df:94:26:c0:04:
e2:62:4d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg2nATp/+6/Ud8t0QQdYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy
YmZkZTYwHhcNMjUwNDIyMDgwMDM4WhcNMjUwNDIzMDgwMDM4WjAzMTEwLwYDVQQD
EygzNTRlNmQ3MjI3NTVmMTg1OWE3YmJlODA4NWZhNmVjNGJhMTZkNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vc4ANxVMpDVlxqis6KtTl52L/3I
v9jBjmh+wNnXsBdlkvcowCgVQ1g8PONzQruquVWeAHa8WbNqNRx5I7EYq5QfCddT
u5pSaAf40u+Q7ZdPvYZMmLMivm4Y3vgKNbyoA9LK+OWSjP4LgwKM8fgcagt4UF36
rqRw7bqAfJWsJNBjWu/btLAkSA7GVP/L9HHDCWz498uebm939Hjzj+x/x6ze0Crc
f4yAhGQkQuW0Ri2COAB0geXnHM/uzF18iwd7IFDwFS+Rkxz+M1wJK+EOM0vPSDoZ
BMTuebaZYoCpAtmFDmKipPMorBHEkpSzD5xQSL1ILe08fi2rdyK07YWjXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVObXInVfGFmnu+gIX6bsS6FtQqMB8GA1UdIwQY
MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt
MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz
LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/ysKPkU
AUQy14dD0MXgAN26c2dnSYXiUPW8IvL4SaKRjwsc/Ph1IkBwgAJ/v23T+LnIegKZ
5s70VnjZ624W0GzYxR3d/4AiVd+zY5WiOhD8lW+Abc0mYbj8beZmUXOQJ1m8jv31
bFy9NOCb9K3ArJ4qR5Qr/cWaJ05iFYCJT7biXw40Xo41qVzpCHiOiQquF2RnmGfC
GmFQcokmZbaZOUL75Ahjup+wrRski5qvd0oDrN7wTQrpGWYLKxn89op1dh+hfig0
dGyUvdM8z1vgxKO91f1H9qRXwaxIhw5xEuxo8Ssmi4uVy4Z6WW4hdi+eqU+cMFOg
2d+UJsAE4mJNtg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:12:05 2025 by rpki-client