Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: vxMvBmAGRsZmMRhZJaHb1uJvXwSq4BZa0eUh7bpv750=
Subject key identifier: FA:56:22:5D:EC:E8:2E:F0:65:C9:16:AC:C1:23:4F:39:74:73:8D:BB
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 01962A17882A703C11EF7F1E8E5D133ACCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1217
Signing time: Sat 12 Apr 2025 13:01:47 +0000
Manifest this update: Sat 12 Apr 2025 13:01:47 +0000
Manifest next update: Sun 13 Apr 2025 13:01:47 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: 2+VAbm46jvb2gWGEuj4RijQm5zk7gGM/Ok28RcrrgRk=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:88:2a:70:3c:11:ef:7f:1e:8e:5d:13:3a:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Apr 12 13:01:47 2025 GMT
Not After : Apr 13 13:01:47 2025 GMT
Subject: CN=fa56225dece82ef065c916acc1234f3974738dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:2e:9b:b4:35:5a:09:77:72:61:8e:2f:e0:
96:99:17:a0:7a:e8:0a:0a:c0:31:cc:a9:ee:60:4e:
7f:58:0d:88:6d:16:6f:4d:a8:74:52:77:98:c7:3e:
f3:d0:f3:ec:5e:b6:f6:d5:c6:e6:a9:98:87:7a:98:
ac:ae:24:d8:49:32:4c:c2:3f:07:b6:1c:e4:92:e3:
2b:01:c5:01:80:59:c5:b0:7a:79:01:a8:6b:0e:9e:
6b:20:ff:4b:17:6c:4e:85:1e:83:34:2f:21:8c:ff:
45:4e:f0:fb:91:c1:3b:e4:a0:4d:c5:b0:cb:85:60:
3e:78:6a:0a:ba:b5:90:4b:db:eb:5a:d6:c5:eb:1c:
6d:95:8c:ed:b0:5d:8f:ba:39:e0:29:e5:ef:25:4d:
52:ab:26:85:0b:f9:a6:12:2c:ed:88:d1:b4:64:db:
a8:32:78:28:33:f7:6d:41:63:1d:8e:b7:4e:30:69:
7b:a1:17:93:d8:62:8a:5d:04:64:9e:7e:28:eb:ef:
c2:37:04:94:54:20:5b:2e:4f:f9:46:fd:ad:3f:1d:
e7:db:24:fc:de:c0:2a:c5:73:48:2c:0c:44:12:16:
e0:e8:e8:8e:3c:bc:5e:a6:e0:25:e0:ec:44:85:46:
d7:64:80:24:ed:fa:18:c7:ba:af:ff:4d:1c:1b:65:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:22:5D:EC:E8:2E:F0:65:C9:16:AC:C1:23:4F:39:74:73:8D:BB
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1b:7f:9a:9d:d7:fd:b6:a6:80:07:89:64:62:b6:5a:c3:6a:
19:b4:32:c2:bc:5c:02:7a:7a:06:39:4d:06:84:46:fd:4a:cf:
08:bc:8c:c3:c2:0c:9a:d0:0e:b8:50:a3:29:61:3c:72:0b:6c:
b1:84:cc:c6:fe:6a:b4:f0:37:05:fe:d9:ff:4b:54:7c:01:3e:
56:7c:df:89:52:61:86:2e:d2:3f:93:5e:4f:a9:bc:0e:27:4b:
c6:80:77:ce:50:f9:e7:7b:b5:43:1f:c8:55:9f:7a:6c:ed:32:
ad:63:96:bb:66:7d:26:c1:ee:aa:af:7e:5a:b5:87:d3:59:bf:
d6:70:d6:0a:f9:8f:c3:95:b2:13:86:58:83:8c:d6:d6:e1:07:
4b:c0:e9:09:bc:b8:f8:04:00:77:a3:96:97:30:2f:8a:9e:1a:
d0:66:dc:6c:c0:5f:c3:9f:45:37:ef:fc:f8:7e:9f:9f:57:ef:
59:73:0f:fc:90:f4:6b:82:36:9e:cd:2c:72:73:e5:45:f7:d0:
e3:87:50:67:7e:4b:30:e6:30:fb:d1:8b:19:ee:af:90:19:d0:
8e:69:87:da:db:d1:24:31:7a:92:ca:50:53:d4:73:6e:e3:ea:
aa:e3:fe:e0:2b:07:32:fd:c8:5e:59:b6:44:b5:8c:69:04:00:
77:a0:76:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqF4gqcDwR738ejl0TOsymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwNDEyMTMwMTQ3WhcNMjUwNDEzMTMwMTQ3WjAzMTEwLwYDVQQD
EyhmYTU2MjI1ZGVjZTgyZWYwNjVjOTE2YWNjMTIzNGYzOTc0NzM4ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2oum7Q1Wgl3cmGOL+CWmRegeugK
CsAxzKnuYE5/WA2IbRZvTah0UneYxz7z0PPsXrb21cbmqZiHepisriTYSTJMwj8H
thzkkuMrAcUBgFnFsHp5AahrDp5rIP9LF2xOhR6DNC8hjP9FTvD7kcE75KBNxbDL
hWA+eGoKurWQS9vrWtbF6xxtlYztsF2PujngKeXvJU1SqyaFC/mmEiztiNG0ZNuo
MngoM/dtQWMdjrdOMGl7oReT2GKKXQRknn4o6+/CNwSUVCBbLk/5Rv2tPx3n2yT8
3sAqxXNILAxEEhbg6OiOPLxepuAl4OxEhUbXZIAk7foYx7qv/00cG2Ui2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpWIl3s6C7wZckWrMEjTzl0c427MB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbht/mp3X
/bamgAeJZGK2WsNqGbQywrxcAnp6BjlNBoRG/UrPCLyMw8IMmtAOuFCjKWE8cgts
sYTMxv5qtPA3Bf7Z/0tUfAE+VnzfiVJhhi7SP5NeT6m8DidLxoB3zlD553u1Qx/I
VZ96bO0yrWOWu2Z9JsHuqq9+WrWH01m/1nDWCvmPw5WyE4ZYg4zW1uEHS8DpCby4
+AQAd6OWlzAvip4a0GbcbMBfw59FN+/8+H6fn1fvWXMP/JD0a4I2ns0scnPlRffQ
44dQZ35LMOYw+9GLGe6vkBnQjmmH2tvRJDF6kspQU9RzbuPqquP+4CsHMv3IXlm2
RLWMaQQAd6B22Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:26 2025 by rpki-client