Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File: g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier: +UZGVQ7KaMrASRyh7u7CqCi3SCJmww9yD2qsc8N0ry4=
Subject key identifier: 31:7F:E5:30:EF:B1:78:10:1F:53:BA:3D:CF:8A:76:82:BB:81:AE:61
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 0196526D9FF79CA5743211C0D3137F494B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 09:00:38 +0000
Manifest this update: Sun 20 Apr 2025 09:00:38 +0000
Manifest next update: Mon 21 Apr 2025 09:00:38 +0000
Files and hashes: 1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: QUNu1EWMLyukRcD0xpTwJdzHkh1aMDRdB9Gt/sHl36c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:9f:f7:9c:a5:74:32:11:c0:d3:13:7f:49:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Apr 20 09:00:38 2025 GMT
Not After : Apr 21 09:00:38 2025 GMT
Subject: CN=317fe530efb178101f53ba3dcf8a7682bb81ae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:46:c8:30:aa:3b:4c:14:28:d5:ed:18:84:f8:
51:90:22:5f:aa:1b:0e:4a:0c:79:f1:da:d7:03:cc:
73:52:de:22:7e:db:f7:d3:9f:c5:94:9a:8c:7d:0d:
db:99:13:32:e5:f6:95:6c:74:2e:41:9b:d1:ff:c8:
85:47:82:99:e8:70:db:77:d8:96:4f:4f:f5:1d:b1:
60:9d:8f:bd:08:3b:dc:f5:a9:dc:ef:d5:e6:ec:3f:
aa:7a:75:72:f1:81:01:25:44:e6:71:a3:3c:3d:96:
01:c7:e1:26:cf:46:02:c8:94:19:41:27:0b:9c:03:
60:74:ea:b6:4d:21:38:87:a4:a2:e9:16:3b:75:1d:
6a:ae:36:7b:09:54:e3:ae:03:8a:50:e2:b6:0e:13:
d1:1b:6d:1d:61:8e:89:71:0d:65:e1:04:c1:48:9a:
85:a6:4a:cd:5e:77:07:e2:31:6a:c4:b6:e5:78:ee:
f5:c2:32:7d:24:35:ab:65:6c:ef:11:bd:9c:5f:01:
53:84:93:f1:37:cc:a9:88:51:00:e9:92:c1:df:34:
d3:3c:d2:9a:ed:ae:78:a6:9e:80:d1:40:07:62:25:
c3:e9:10:4e:d5:d8:86:b6:4a:e7:64:73:fa:1e:48:
c7:64:b6:09:70:d4:49:a7:9e:b2:3a:1c:20:62:58:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:E5:30:EF:B1:78:10:1F:53:BA:3D:CF:8A:76:82:BB:81:AE:61
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:a0:ec:10:6e:d9:12:de:19:c9:f7:f1:95:9c:0f:3b:15:
bb:37:78:e3:e2:e5:06:f7:11:d7:77:ed:b9:f6:53:b2:d6:81:
46:6c:9e:a7:22:16:7c:74:fe:34:d2:78:b0:2b:da:08:fe:45:
79:e4:17:9c:73:34:f1:43:58:da:db:46:41:85:d2:d4:83:0c:
a4:20:44:98:c2:2e:fe:fd:88:56:8d:46:68:c0:1c:92:a3:79:
15:f8:8d:3f:13:2e:e7:db:da:96:30:c3:64:1e:3d:75:1b:5e:
5e:d6:f2:da:44:0a:9c:f8:1c:d3:3f:a3:b8:87:94:6e:06:4c:
67:9f:f3:f6:2b:a1:6f:d3:f5:10:5c:53:4a:07:b1:2c:80:95:
cb:e3:45:e1:32:eb:f3:f4:e5:cb:87:e5:cd:4c:9a:82:e6:d0:
18:1d:4b:2c:ce:70:45:0b:8e:e6:19:e0:1a:a4:1e:d0:b7:6b:
63:50:c5:24:44:82:c2:2d:71:59:66:77:bb:7d:3c:24:88:8e:
da:47:a0:d3:1d:af:f7:a4:48:3a:9f:f2:80:81:29:83:10:83:
86:25:8d:91:41:5b:8e:bb:17:49:dd:c3:ca:ea:cd:6d:91:d0:
94:01:c2:d9:fe:8a:61:69:1d:01:cf:af:52:c9:26:57:b5:ea:
a0:db:33:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbZ/3nKV0MhHA0xN/SUtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZGNlMzczYzE4Yjk0MGE5NzgzOTBiMjcyNzAwMjc5YjMy
ZmVlM2EwHhcNMjUwNDIwMDkwMDM4WhcNMjUwNDIxMDkwMDM4WjAzMTEwLwYDVQQD
EygzMTdmZTUzMGVmYjE3ODEwMWY1M2JhM2RjZjhhNzY4MmJiODFhZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/EbIMKo7TBQo1e0YhPhRkCJfqhsO
Sgx58drXA8xzUt4iftv305/FlJqMfQ3bmRMy5faVbHQuQZvR/8iFR4KZ6HDbd9iW
T0/1HbFgnY+9CDvc9anc79Xm7D+qenVy8YEBJUTmcaM8PZYBx+Emz0YCyJQZQScL
nANgdOq2TSE4h6Si6RY7dR1qrjZ7CVTjrgOKUOK2DhPRG20dYY6JcQ1l4QTBSJqF
pkrNXncH4jFqxLbleO71wjJ9JDWrZWzvEb2cXwFThJPxN8ypiFEA6ZLB3zTTPNKa
7a54pp6A0UAHYiXD6RBO1diGtkrnZHP6HkjHZLYJcNRJp56yOhwgYlgWewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF/5TDvsXgQH1O6Pc+KdoK7ga5hMB8GA1UdIwQY
MBaAFIPc43PBi5QKl4OQsnJwAnmzL+46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ODE1N2UtZDRmOC00ZjJkLWI5NmQt
MmQ2ZDU2ZDlmZjRlLzEvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80ODE1N2UtZDRmOC00ZjJkLWI5NmQtMmQ2ZDU2ZDlmZjRl
LzEvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkyg7BBu
2RLeGcn38ZWcDzsVuzd44+LlBvcR13ftufZTstaBRmyepyIWfHT+NNJ4sCvaCP5F
eeQXnHM08UNY2ttGQYXS1IMMpCBEmMIu/v2IVo1GaMAckqN5FfiNPxMu59valjDD
ZB49dRteXtby2kQKnPgc0z+juIeUbgZMZ5/z9iuhb9P1EFxTSgexLICVy+NF4TLr
8/Tly4flzUyagubQGB1LLM5wRQuO5hngGqQe0LdrY1DFJESCwi1xWWZ3u308JIiO
2keg0x2v96RIOp/ygIEpgxCDhiWNkUFbjrsXSd3DyurNbZHQlAHC2f6KYWkdAc+v
UskmV7XqoNszLA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:05 2025 by rpki-client