Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: dFZYBCLi2pfiZJJ9S8QZAXcaBXJ6kNS6m0R56g7GLxU=
Subject key identifier: 6A:65:5E:4C:4A:D7:96:B2:82:66:6C:51:97:9D:E7:E8:AE:95:41:F3
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01963D667080A088E88C60A6F32944D80358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 07:00:45 +0000
Manifest this update: Wed 16 Apr 2025 07:00:45 +0000
Manifest next update: Thu 17 Apr 2025 07:00:45 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: Sl2cOt4UT5/Q7NlrcnfRlzwZrx6mi12s9XMcAH/s8uM=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:70:80:a0:88:e8:8c:60:a6:f3:29:44:d8:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Apr 16 07:00:45 2025 GMT
Not After : Apr 17 07:00:45 2025 GMT
Subject: CN=6a655e4c4ad796b282666c51979de7e8ae9541f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:67:0c:4d:c5:c2:bf:a7:cc:14:cc:53:92:
59:21:4d:fb:7e:92:27:fa:20:7d:20:3f:06:e5:30:
de:ee:b1:fe:70:38:18:6e:d3:d0:42:fb:30:52:82:
cb:a8:52:ea:07:98:2c:bc:7b:08:da:0d:26:14:df:
4b:48:1f:ed:0c:bb:87:a7:81:40:9e:3c:a0:9d:23:
48:ba:59:92:e4:04:09:fe:e2:f3:41:9d:c8:b3:b1:
3a:98:85:85:cb:97:6c:5c:69:13:13:a5:e3:85:19:
2c:e6:dd:e2:8c:67:69:67:bd:a5:be:10:88:fd:7b:
83:2b:dd:d6:c6:87:60:47:0a:43:79:94:58:ea:f8:
ca:ce:1a:b8:2c:df:b8:b5:21:be:e7:08:69:8e:e1:
33:a7:34:54:da:61:a6:2d:f6:bb:c0:e1:67:9c:b6:
c8:32:e2:73:80:49:69:19:b5:cd:f9:63:75:15:8a:
aa:88:e5:8c:ed:b9:a5:40:fc:4f:8a:b1:5a:85:3a:
42:e5:71:0b:9c:15:7b:a9:40:89:cb:b0:1b:fe:68:
40:e5:f2:09:ac:7d:a1:85:2e:9a:46:cc:f7:e3:c5:
5c:05:aa:68:e2:94:0e:9a:e7:33:f9:54:f2:3d:50:
79:bc:af:bb:8b:e2:f3:52:8e:01:a3:1e:f3:2e:e5:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:65:5E:4C:4A:D7:96:B2:82:66:6C:51:97:9D:E7:E8:AE:95:41:F3
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9b:ca:6f:92:7b:56:c5:03:89:34:14:01:90:6b:40:24:2b:
aa:e0:1d:e2:ea:b2:b5:92:51:e5:75:23:b6:53:db:e6:53:44:
2b:45:e0:da:08:0b:bd:c7:08:2b:c5:b1:b4:85:e9:58:bc:32:
34:99:27:65:21:d2:0d:1e:e1:11:39:b4:c3:28:df:d5:d3:4d:
dd:bb:7d:68:9d:71:e1:fa:df:03:fc:af:28:2a:93:a1:e1:ef:
fc:8a:c0:b8:bd:bf:9e:6c:cd:5d:f2:11:9a:ce:fe:32:b0:83:
6e:42:8f:fa:33:30:51:27:05:03:35:01:4d:b3:9e:91:24:02:
e7:b5:66:5f:13:8c:0e:48:6c:e5:91:19:bd:4e:5d:90:f6:db:
ab:34:e9:62:9b:44:a2:13:5f:8a:77:95:b1:91:ec:0e:fe:3c:
6a:6d:ad:2a:f1:48:14:3e:ed:bc:1f:4d:6c:e9:21:c9:92:5a:
48:16:fa:37:84:b6:c4:81:18:ee:52:78:15:bb:10:a5:73:e9:
b2:28:9c:52:5e:a2:c2:74:a3:d7:cb:51:ec:c5:81:63:6a:29:
24:e3:48:52:27:ab:56:20:6c:be:f8:8e:0e:5d:4c:b5:e8:ff:
0e:f8:ae:a3:d3:0a:24:b1:34:13:4b:41:fa:18:64:c8:a1:44:
dc:18:4c:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY9ZnCAoIjojGCm8ylE2ANYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDQzZjIzOTM2NjIyODI0MTExZTg4NjVhNTAwMDIwNjdk
OTVhNjIwHhcNMjUwNDE2MDcwMDQ1WhcNMjUwNDE3MDcwMDQ1WjAzMTEwLwYDVQQD
Eyg2YTY1NWU0YzRhZDc5NmIyODI2NjZjNTE5NzlkZTdlOGFlOTU0MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWdnDE3Fwr+nzBTMU5JZIU37fpIn
+iB9ID8G5TDe7rH+cDgYbtPQQvswUoLLqFLqB5gsvHsI2g0mFN9LSB/tDLuHp4FA
njygnSNIulmS5AQJ/uLzQZ3Is7E6mIWFy5dsXGkTE6XjhRks5t3ijGdpZ72lvhCI
/XuDK93WxodgRwpDeZRY6vjKzhq4LN+4tSG+5whpjuEzpzRU2mGmLfa7wOFnnLbI
MuJzgElpGbXN+WN1FYqqiOWM7bmlQPxPirFahTpC5XELnBV7qUCJy7Ab/mhA5fIJ
rH2hhS6aRsz348VcBapo4pQOmucz+VTyPVB5vK+7i+LzUo4Box7zLuX58wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGplXkxK15aygmZsUZed5+iulUHzMB8GA1UdIwQY
MBaAFIAEPyOTZiKCQRHohlpQACBn2VpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgt
NjhjZGM2OTJhZDA5LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgtNjhjZGM2OTJhZDA5
LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppvKb5J7
VsUDiTQUAZBrQCQrquAd4uqytZJR5XUjtlPb5lNEK0Xg2ggLvccIK8WxtIXpWLwy
NJknZSHSDR7hETm0wyjf1dNN3bt9aJ1x4frfA/yvKCqToeHv/IrAuL2/nmzNXfIR
ms7+MrCDbkKP+jMwUScFAzUBTbOekSQC57VmXxOMDkhs5ZEZvU5dkPbbqzTpYptE
ohNfineVsZHsDv48am2tKvFIFD7tvB9NbOkhyZJaSBb6N4S2xIEY7lJ4FbsQpXPp
siicUl6iwnSj18tR7MWBY2opJONIUierViBsvviODl1Mtej/Dviuo9MKJLE0E0tB
+hhkyKFE3BhMnw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:24:25 2025 by rpki-client