Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: raR4r+2lggU7FVo16cfB6X2oWNXiDjxy9MQmMCLYAzI=
Subject key identifier: 38:10:10:AC:BA:CD:43:6B:9D:CE:D0:5C:56:B7:73:82:08:36:62:27
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 01964CA2AA7D73F562300F099E68F824860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0CF6
Signing time: Sat 19 Apr 2025 06:00:50 +0000
Manifest this update: Sat 19 Apr 2025 06:00:50 +0000
Manifest next update: Sun 20 Apr 2025 06:00:50 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: ytMgs6NZwGmrA+1e4iO7Tcywi2AQRPVw4P590IQr8aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:aa:7d:73:f5:62:30:0f:09:9e:68:f8:24:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Apr 19 06:00:50 2025 GMT
Not After : Apr 20 06:00:50 2025 GMT
Subject: CN=381010acbacd436b9dced05c56b7738208366227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:c7:6b:e3:7d:c6:da:58:cd:22:6d:ad:04:
7a:6c:7e:36:d8:80:f4:54:25:99:9d:d3:94:7d:b3:
8c:c6:df:5a:1a:90:32:7e:1f:ca:20:ea:7f:e5:94:
c9:54:ac:2d:14:67:02:a7:38:eb:61:f9:2d:af:2d:
03:63:5d:08:12:71:ab:a3:29:ea:62:88:24:89:b2:
9a:7e:84:b4:1a:73:ec:bd:9e:58:45:56:0a:61:e6:
f5:dc:60:be:29:31:e5:06:97:1f:74:e2:6a:48:f7:
c5:8a:e4:f3:b1:2c:ac:48:84:7c:64:13:a5:e4:90:
65:f9:93:c1:aa:b6:e3:7b:e6:41:02:35:f9:1e:64:
d4:a7:57:dd:e1:89:55:2f:f4:91:31:53:92:d4:19:
e6:dc:62:d6:f1:80:76:52:3d:5b:99:86:ce:2f:f7:
e9:69:77:c1:ca:96:cc:4c:dc:f1:8c:45:a7:eb:b9:
c1:f9:6f:cc:6c:9e:5d:1e:f3:52:d8:db:2e:4d:7a:
cf:15:61:76:33:85:6b:2b:7c:82:ed:ef:a6:3a:75:
ee:bc:25:79:a4:a4:ce:35:77:96:65:52:02:96:7b:
0c:fd:ee:11:4d:39:22:85:88:ca:e9:fc:13:b3:80:
c2:47:9e:72:6a:18:f1:83:be:24:cc:9e:81:43:2b:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:10:AC:BA:CD:43:6B:9D:CE:D0:5C:56:B7:73:82:08:36:62:27
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:4a:bb:73:82:0d:3c:80:a6:cf:e2:ed:44:ed:9d:42:ba:
27:ed:4a:43:d6:62:17:a0:b1:99:f2:43:a5:29:e8:a1:8b:fb:
e8:20:e6:a6:36:fb:0a:6a:ee:29:4e:79:e9:bb:2b:7c:d1:bc:
80:27:ce:9d:31:4b:db:41:f6:c1:d9:59:cf:7b:d1:e1:52:98:
b8:0b:68:fc:47:35:6e:f4:2c:82:bf:4e:e7:8e:33:13:2f:7a:
50:9d:84:55:fa:39:c0:00:b4:e7:15:65:6e:ca:39:e3:4d:35:
56:7c:aa:f3:8b:3c:dd:dd:54:fe:d3:37:4e:9b:b9:2b:d3:20:
14:a6:06:e5:ea:c2:5a:49:86:46:68:3f:df:7a:b3:38:5b:25:
3b:a5:d9:52:7b:6c:73:c4:2d:13:3c:18:3c:be:78:bb:59:47:
79:35:f3:f1:b0:94:cc:9a:52:14:a7:4c:5b:3e:39:ad:35:f8:
c3:36:4b:fb:b9:36:1a:c4:b8:42:48:42:84:e5:b9:50:be:a6:
5d:1a:25:2b:9b:f3:b1:6b:ff:84:a9:27:d2:35:f9:e4:00:63:
f3:2e:1d:56:02:9a:5a:85:e4:3f:1e:e6:bc:88:c5:3c:58:5f:
b6:5c:e3:4f:14:bc:7c:1a:9a:15:bf:bd:8c:7f:82:26:21:95:
a6:b2:3b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoqp9c/ViMA8Jnmj4JIYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm
ZGUwNmEwHhcNMjUwNDE5MDYwMDUwWhcNMjUwNDIwMDYwMDUwWjAzMTEwLwYDVQQD
EygzODEwMTBhY2JhY2Q0MzZiOWRjZWQwNWM1NmI3NzM4MjA4MzY2MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x3Ha+N9xtpYzSJtrQR6bH422ID0
VCWZndOUfbOMxt9aGpAyfh/KIOp/5ZTJVKwtFGcCpzjrYfktry0DY10IEnGroynq
YogkibKafoS0GnPsvZ5YRVYKYeb13GC+KTHlBpcfdOJqSPfFiuTzsSysSIR8ZBOl
5JBl+ZPBqrbje+ZBAjX5HmTUp1fd4YlVL/SRMVOS1Bnm3GLW8YB2Uj1bmYbOL/fp
aXfBypbMTNzxjEWn67nB+W/MbJ5dHvNS2NsuTXrPFWF2M4VrK3yC7e+mOnXuvCV5
pKTONXeWZVIClnsM/e4RTTkihYjK6fwTs4DCR55yahjxg74kzJ6BQyvGmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgQEKy6zUNrnc7QXFa3c4IINmInMB8GA1UdIwQY
MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt
ZmFmZDE0OTZhZTU5LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5
LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuxKu3OC
DTyAps/i7UTtnUK6J+1KQ9ZiF6CxmfJDpSnooYv76CDmpjb7CmruKU556bsrfNG8
gCfOnTFL20H2wdlZz3vR4VKYuAto/Ec1bvQsgr9O544zEy96UJ2EVfo5wAC05xVl
bso54001Vnyq84s83d1U/tM3Tpu5K9MgFKYG5erCWkmGRmg/33qzOFslO6XZUnts
c8QtEzwYPL54u1lHeTXz8bCUzJpSFKdMWz45rTX4wzZL+7k2GsS4QkhChOW5UL6m
XRolK5vzsWv/hKkn0jX55ABj8y4dVgKaWoXkPx7mvIjFPFhftlzjTxS8fBqaFb+9
jH+CJiGVprI7IQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:49 2025 by rpki-client