Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: 1quJBE2ascYn5gsvP2NlSOt0bRXEyxLpF7EQiK24ges=
Subject key identifier: 7C:42:F7:F5:60:C9:5E:BD:28:CA:3A:DB:C2:CF:D9:D7:75:37:B1:3A
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 01960F7B4EF741CCEEF4A65AC1E27E911FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 09:01:01 +0000
Manifest this update: Mon 07 Apr 2025 09:01:01 +0000
Manifest next update: Tue 08 Apr 2025 09:01:01 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: RTOAjTU71I5yPZKeSSHfG5xwCLss2a2GXFuYUW2wh7s=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:4e:f7:41:cc:ee:f4:a6:5a:c1:e2:7e:91:1f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Apr 7 09:01:01 2025 GMT
Not After : Apr 8 09:01:01 2025 GMT
Subject: CN=7c42f7f560c95ebd28ca3adbc2cfd9d77537b13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:f4:3e:6d:e4:b0:ed:fb:0f:53:c8:b6:dd:
2c:f0:dd:f3:d1:2a:23:c2:7f:e1:37:6e:e2:ca:49:
75:f5:7a:e1:d7:aa:7f:61:c0:62:f0:7e:20:77:41:
4f:5f:4e:ab:18:b1:6d:68:ca:9e:11:9e:c6:0e:97:
87:05:f2:44:1d:c4:b9:4d:44:f0:94:99:1f:92:9c:
5d:71:71:4a:3d:8d:ac:4d:1d:68:d1:53:d7:d9:aa:
f9:22:a9:0c:8d:1a:07:8e:00:72:bb:40:2c:fd:44:
b2:fe:8c:30:c4:e1:7f:a9:29:79:44:b6:03:00:90:
53:44:f5:3a:f6:b8:b7:a1:a4:de:db:bb:ca:ad:c0:
89:2f:28:84:b1:46:c6:93:ef:14:e5:47:0b:4f:44:
3b:10:a4:6f:89:c1:c2:45:7a:59:94:a8:75:8f:5b:
0b:0c:f8:cf:da:9b:31:4a:d4:b7:21:aa:1a:f3:9a:
11:c9:f2:01:33:fb:c4:1e:01:a3:84:97:be:ea:91:
e2:29:26:ea:00:3b:fa:01:ee:60:63:6b:c8:94:09:
e6:4a:e8:9f:2f:50:48:c8:23:e1:e9:83:eb:13:f7:
6c:fd:bc:62:48:a0:59:17:8d:1b:1a:bc:a4:ee:89:
cf:98:a7:e4:d9:41:e2:8a:35:56:c4:91:60:d4:94:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:F7:F5:60:C9:5E:BD:28:CA:3A:DB:C2:CF:D9:D7:75:37:B1:3A
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:8c:ff:1d:4d:90:bf:5c:a3:3e:93:cc:35:f3:05:14:c8:
e6:69:5c:3b:4f:64:d9:97:d8:5a:27:13:70:21:34:0f:db:22:
15:40:a4:ca:a8:8b:04:50:2e:6e:9b:39:13:ad:49:fa:8e:ef:
09:50:c5:45:f7:cf:2b:70:2a:d2:fe:8f:57:07:c3:02:24:11:
4e:e0:0f:59:47:a0:ce:53:ec:bb:d7:03:b6:d1:91:bf:ef:7b:
a6:4f:db:81:ba:08:c7:c7:ae:bf:79:45:ba:58:53:7b:d9:b1:
dc:34:35:99:f7:c8:52:d0:65:12:92:00:e4:a2:10:fe:55:2b:
08:d7:08:13:b0:bb:96:bf:77:eb:c2:1b:d2:34:15:39:3d:66:
39:60:bb:a8:0c:1f:71:8b:33:c5:59:70:fb:cd:15:10:da:b1:
51:94:d7:18:56:47:ef:36:05:73:c4:0e:43:25:c2:cf:b7:47:
9f:3f:7c:bc:59:a2:4f:54:89:e0:85:79:94:c1:48:03:04:32:
60:29:46:dc:98:39:27:c8:c3:e9:78:cb:a2:7b:45:32:65:57:
d8:02:d7:71:01:67:aa:f8:06:10:f7:16:0f:b8:be:c4:01:ca:
af:86:f0:db:1f:b4:74:8f:c9:ca:0f:36:0b:a0:b4:ca:2f:a1:
7c:1e:17:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPe073Qczu9KZaweJ+kR/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw
MDY3ODAwHhcNMjUwNDA3MDkwMTAxWhcNMjUwNDA4MDkwMTAxWjAzMTEwLwYDVQQD
Eyg3YzQyZjdmNTYwYzk1ZWJkMjhjYTNhZGJjMmNmZDlkNzc1MzdiMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxT0Pm3ksO37D1PItt0s8N3z0Soj
wn/hN27iykl19Xrh16p/YcBi8H4gd0FPX06rGLFtaMqeEZ7GDpeHBfJEHcS5TUTw
lJkfkpxdcXFKPY2sTR1o0VPX2ar5IqkMjRoHjgByu0As/USy/owwxOF/qSl5RLYD
AJBTRPU69ri3oaTe27vKrcCJLyiEsUbGk+8U5UcLT0Q7EKRvicHCRXpZlKh1j1sL
DPjP2psxStS3Iaoa85oRyfIBM/vEHgGjhJe+6pHiKSbqADv6Ae5gY2vIlAnmSuif
L1BIyCPh6YPrE/ds/bxiSKBZF40bGryk7onPmKfk2UHiijVWxJFg1JQXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxC9/VgyV69KMo628LP2dd1N7E6MB8GA1UdIwQY
MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt
MjM5ODcwNGFiNTBjLzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj
LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6iM/x1N
kL9coz6TzDXzBRTI5mlcO09k2ZfYWicTcCE0D9siFUCkyqiLBFAubps5E61J+o7v
CVDFRffPK3Aq0v6PVwfDAiQRTuAPWUegzlPsu9cDttGRv+97pk/bgboIx8euv3lF
ulhTe9mx3DQ1mffIUtBlEpIA5KIQ/lUrCNcIE7C7lr9368Ib0jQVOT1mOWC7qAwf
cYszxVlw+80VENqxUZTXGFZH7zYFc8QOQyXCz7dHnz98vFmiT1SJ4IV5lMFIAwQy
YClG3Jg5J8jD6XjLontFMmVX2ALXcQFnqvgGEPcWD7i+xAHKr4bw2x+0dI/Jyg82
C6C0yi+hfB4Xkg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:27:59 2025 by rpki-client