Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: m0vdoBNjKw4cuWq1JZ2xC5EgipYH2BM12b78UlDjXRw=
Subject key identifier: B6:22:A6:53:82:FA:F0:DA:11:C7:5E:6A:C9:15:EF:7E:4C:B7:38:DF
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01960FE986F8FD9C057E0527BF1D2DCC1D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 11:01:24 +0000
Manifest this update: Mon 07 Apr 2025 11:01:24 +0000
Manifest next update: Tue 08 Apr 2025 11:01:24 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: UmkO7vv+P6dq3wt7y35EElEI2t0W7Q2z13i/lTkJXcs=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:86:f8:fd:9c:05:7e:05:27:bf:1d:2d:cc:1d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Apr 7 11:01:24 2025 GMT
Not After : Apr 8 11:01:24 2025 GMT
Subject: CN=b622a65382faf0da11c75e6ac915ef7e4cb738df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:15:c0:26:2d:5d:ba:cd:c2:4c:45:76:ea:
9c:c0:69:d9:c9:a3:a1:e0:0b:73:3d:de:96:e1:a0:
27:d3:01:a3:57:41:79:06:01:06:f9:31:fa:2f:68:
86:f5:17:07:4e:e0:00:c7:e0:55:92:7e:cb:1f:97:
c3:20:92:a5:57:46:61:78:79:06:d6:fb:3c:23:9d:
f2:f0:a1:bf:f7:47:79:a4:cd:68:ed:c4:76:f2:56:
e9:95:37:7f:6b:44:ac:05:06:dd:1e:0d:ce:4e:f0:
8e:b8:55:9d:39:7e:58:6e:e9:fa:a1:06:80:cb:dc:
54:5a:50:ef:3f:fb:f6:3f:b1:06:a3:87:5b:8c:f0:
9e:5d:d8:53:e9:85:ee:96:64:0c:91:d0:f6:c9:b0:
5b:84:ff:e6:75:db:d4:b4:80:24:ae:89:1a:f4:51:
5d:69:b8:04:9a:d5:97:94:7e:84:20:32:7e:e2:f5:
be:e0:41:e5:35:0e:da:35:a0:96:17:c5:41:20:97:
d8:c9:79:85:75:e1:14:25:63:9e:eb:28:e6:31:36:
7e:b2:20:b5:83:cc:40:ae:f6:cb:2f:8b:04:b3:f8:
76:72:d3:40:f5:11:db:0f:e8:49:d0:2f:f2:18:eb:
94:9c:cb:cd:52:f0:49:94:9b:10:9c:7e:fe:c3:1d:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:A6:53:82:FA:F0:DA:11:C7:5E:6A:C9:15:EF:7E:4C:B7:38:DF
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c2:99:04:da:d5:dc:0b:83:d2:33:a0:b5:d2:d3:5b:ce:0b:
39:42:ab:c0:1e:e3:9e:a9:a7:86:61:c0:a9:5b:21:5c:d0:5d:
92:de:7a:2f:ad:0b:85:00:cf:21:1f:03:76:be:7f:1f:74:37:
d9:6b:70:82:76:6e:0f:5d:27:d4:79:57:9b:35:66:b3:2d:51:
18:ba:08:3c:eb:80:58:a2:4b:02:9f:8b:52:85:e7:34:6a:35:
c5:f6:fd:1f:35:7e:8c:36:aa:9d:7b:34:e6:3c:6c:46:6d:e2:
f0:74:c3:82:62:00:a8:4c:c9:ca:f1:d3:40:fe:81:0c:74:b8:
ee:1c:f7:3d:53:77:8d:d0:66:5e:5a:c2:87:fe:99:49:7a:02:
c5:67:84:3d:aa:51:3a:19:e6:14:c2:68:83:8e:8d:bd:d5:0a:
2a:ea:4f:50:19:73:a1:d1:f2:2a:a6:1f:07:48:7d:07:65:b4:
8d:42:eb:d5:ce:a7:5e:30:23:64:0a:20:ab:23:50:60:2a:fa:
9b:44:87:68:a7:06:b3:1c:e5:fd:8a:f8:b3:8a:8c:f5:49:22:
9b:5d:f0:48:50:a0:8b:c0:09:40:15:d0:3a:61:3d:56:ba:f0:
37:13:f6:88:8d:3c:53:2e:7b:07:2a:e6:31:d2:c0:9d:a9:08:
a2:9b:32:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYP6Yb4/ZwFfgUnvx0tzB0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjUwNDA3MTEwMTI0WhcNMjUwNDA4MTEwMTI0WjAzMTEwLwYDVQQD
EyhiNjIyYTY1MzgyZmFmMGRhMTFjNzVlNmFjOTE1ZWY3ZTRjYjczOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuoVwCYtXbrNwkxFduqcwGnZyaOh
4AtzPd6W4aAn0wGjV0F5BgEG+TH6L2iG9RcHTuAAx+BVkn7LH5fDIJKlV0ZheHkG
1vs8I53y8KG/90d5pM1o7cR28lbplTd/a0SsBQbdHg3OTvCOuFWdOX5Ybun6oQaA
y9xUWlDvP/v2P7EGo4dbjPCeXdhT6YXulmQMkdD2ybBbhP/mddvUtIAkroka9FFd
abgEmtWXlH6EIDJ+4vW+4EHlNQ7aNaCWF8VBIJfYyXmFdeEUJWOe6yjmMTZ+siC1
g8xArvbLL4sEs/h2ctNA9RHbD+hJ0C/yGOuUnMvNUvBJlJsQnH7+wx3dXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYiplOC+vDaEcdeaskV735MtzjfMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMKZBNrV
3AuD0jOgtdLTW84LOUKrwB7jnqmnhmHAqVshXNBdkt56L60LhQDPIR8Ddr5/H3Q3
2WtwgnZuD10n1HlXmzVmsy1RGLoIPOuAWKJLAp+LUoXnNGo1xfb9HzV+jDaqnXs0
5jxsRm3i8HTDgmIAqEzJyvHTQP6BDHS47hz3PVN3jdBmXlrCh/6ZSXoCxWeEPapR
OhnmFMJog46NvdUKKupPUBlzodHyKqYfB0h9B2W0jULr1c6nXjAjZAogqyNQYCr6
m0SHaKcGsxzl/Yr4s4qM9Ukim13wSFCgi8AJQBXQOmE9VrrwNxP2iI08Uy57Byrm
MdLAnakIopsylA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:42 2025 by rpki-client