Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: jteZa0E5Y1pB5MPXN7m+zJk8f/dVtM+siV4y/15m8XU=
Subject key identifier: D4:14:03:DA:75:18:21:B1:CF:BD:F9:08:7B:CD:7F:6C:06:66:06:8A
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0196488E8BFF8D7E9AB855B5DDECEA3B160C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1527
Signing time: Fri 18 Apr 2025 11:00:23 +0000
Manifest this update: Fri 18 Apr 2025 11:00:23 +0000
Manifest next update: Sat 19 Apr 2025 11:00:23 +0000
Files and hashes: 1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: 06g1PbnVxl4xUOV6qU9JqAhes8M6mPjm25bPs/zGMfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:8b:ff:8d:7e:9a:b8:55:b5:dd:ec:ea:3b:16:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Apr 18 11:00:23 2025 GMT
Not After : Apr 19 11:00:23 2025 GMT
Subject: CN=d41403da751821b1cfbdf9087bcd7f6c0666068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:6a:40:94:9d:0f:f5:ac:2f:31:c8:f1:47:
f9:8b:c5:e6:d6:6a:1b:54:bf:c8:18:97:89:82:02:
1a:3a:d3:e2:40:b0:7a:cb:23:a1:be:2a:2c:86:a5:
f7:35:cc:2c:a0:dd:c2:2a:4c:35:ed:da:74:eb:7d:
cb:8c:72:c4:7e:7e:82:69:93:82:54:cd:b7:fe:33:
99:b3:f3:17:26:5d:55:e4:02:1a:59:ed:09:f0:40:
67:bf:13:9b:c5:a0:fb:b4:3c:ad:48:7a:9c:f7:a0:
08:2d:86:25:5d:cd:90:0d:83:1c:ae:86:44:b3:b1:
ee:92:db:fa:25:ca:f8:c0:06:43:d3:84:89:5a:53:
6e:c2:d8:d3:29:9b:be:30:72:b2:30:f9:49:47:3c:
a7:60:56:7d:99:78:c9:ba:58:0d:f3:46:59:a3:43:
4d:b9:d5:4c:9e:45:4c:25:22:b0:e6:ad:f7:53:90:
89:ce:5e:74:ca:bd:83:ff:19:44:0f:93:63:4f:56:
6f:89:3f:d0:b4:9a:2b:92:82:99:05:fa:e5:25:c1:
4b:48:86:87:e0:c0:82:1d:5d:4b:3c:fc:3a:58:73:
a8:95:87:b8:18:8d:52:e4:cf:d4:7e:9f:c9:d8:3a:
70:bd:e6:c8:5e:2f:15:3c:79:43:de:cb:f6:0c:3b:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:03:DA:75:18:21:B1:CF:BD:F9:08:7B:CD:7F:6C:06:66:06:8A
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:32:2a:17:b2:1b:e6:77:ae:95:b6:f6:3d:ae:73:9e:d8:
35:2d:cd:1a:0f:5a:f7:16:e0:38:26:67:f7:55:7e:fa:e1:74:
22:95:da:37:d3:c8:cf:de:2a:0b:2b:de:a4:59:37:5a:c5:de:
d8:15:8e:6c:17:c4:44:b0:f4:d8:04:c6:7d:2a:fa:46:91:ef:
e1:14:69:9b:b9:34:49:75:3b:b9:87:58:59:92:76:50:40:8d:
e5:66:8b:3f:e2:37:1b:f3:52:f9:f8:11:05:29:62:1f:87:01:
e3:03:25:52:40:ac:c7:b7:76:f0:ed:18:48:06:0a:14:ea:b7:
18:d5:a3:07:4b:ab:f8:7e:59:d0:df:29:4e:bf:23:85:5a:30:
f7:2d:6d:40:94:b1:0c:cc:ef:d4:eb:7a:de:4d:75:73:23:8c:
1d:89:0c:bc:28:12:c2:72:d8:32:8d:aa:85:69:c6:23:6e:cb:
dc:3f:14:f6:39:e9:a1:d0:4d:ff:23:0a:48:db:29:fe:5e:85:
fc:a5:62:62:0d:be:a7:ef:0c:d4:30:f2:6a:2e:2d:82:14:c0:
ea:ab:16:14:74:d1:46:af:42:11:e7:cd:f5:be:f7:65:91:37:
76:5e:96:c9:9a:a4:d7:61:da:2e:32:fc:bc:5a:8a:a8:9f:f6:
42:d7:fb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIjov/jX6auFW13ezqOxYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm
OWQxNTUwHhcNMjUwNDE4MTEwMDIzWhcNMjUwNDE5MTEwMDIzWjAzMTEwLwYDVQQD
EyhkNDE0MDNkYTc1MTgyMWIxY2ZiZGY5MDg3YmNkN2Y2YzA2NjYwNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/tqQJSdD/WsLzHI8Uf5i8Xm1mob
VL/IGJeJggIaOtPiQLB6yyOhvioshqX3NcwsoN3CKkw17dp0633LjHLEfn6CaZOC
VM23/jOZs/MXJl1V5AIaWe0J8EBnvxObxaD7tDytSHqc96AILYYlXc2QDYMcroZE
s7Huktv6Jcr4wAZD04SJWlNuwtjTKZu+MHKyMPlJRzynYFZ9mXjJulgN80ZZo0NN
udVMnkVMJSKw5q33U5CJzl50yr2D/xlED5NjT1ZviT/QtJorkoKZBfrlJcFLSIaH
4MCCHV1LPPw6WHOolYe4GI1S5M/Ufp/J2DpwvebIXi8VPHlD3sv2DDsM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQUA9p1GCGxz735CHvNf2wGZgaKMB8GA1UdIwQY
MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt
NDdkOThlNTg1NDVhLzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh
LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1gyKhey
G+Z3rpW29j2uc57YNS3NGg9a9xbgOCZn91V++uF0IpXaN9PIz94qCyvepFk3WsXe
2BWObBfERLD02ATGfSr6RpHv4RRpm7k0SXU7uYdYWZJ2UECN5WaLP+I3G/NS+fgR
BSliH4cB4wMlUkCsx7d28O0YSAYKFOq3GNWjB0ur+H5Z0N8pTr8jhVow9y1tQJSx
DMzv1Ot63k11cyOMHYkMvCgSwnLYMo2qhWnGI27L3D8U9jnpodBN/yMKSNsp/l6F
/KViYg2+p+8M1DDyai4tghTA6qsWFHTRRq9CEefN9b73ZZE3dl6WyZqk12HaLjL8
vFqKqJ/2Qtf71A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:07:22 2025 by rpki-client