Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: 87gi51AT4B/WTES+ARIz0nXvFOk3QnSbhFUplAk9vVc=
Subject key identifier: 7D:71:08:D9:8F:8F:7A:A0:D1:D1:59:77:3F:3A:D4:BC:45:6F:55:0D
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01962A17268D4F88E8117095C5BC9E534653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 08A4
Signing time: Sat 12 Apr 2025 13:01:22 +0000
Manifest this update: Sat 12 Apr 2025 13:01:22 +0000
Manifest next update: Sun 13 Apr 2025 13:01:22 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: dofUG4Eqf2CBJmrmnS1Fqy5JA7z4jbh2FDckkp/aDmk=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:26:8d:4f:88:e8:11:70:95:c5:bc:9e:53:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Apr 12 13:01:22 2025 GMT
Not After : Apr 13 13:01:22 2025 GMT
Subject: CN=7d7108d98f8f7aa0d1d159773f3ad4bc456f550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:ad:e7:20:04:fd:10:99:67:c6:0b:ac:c6:
16:89:9f:95:99:98:25:c8:34:2a:84:15:1a:11:45:
04:75:81:24:c8:13:f1:20:24:98:91:e6:d0:68:85:
cb:51:ff:08:f0:c1:6d:f8:7b:0b:8e:72:2a:a7:fa:
15:b7:a4:45:3b:bf:c6:15:cb:0d:80:83:d6:ba:fa:
de:ca:55:5c:fd:43:ae:71:33:bd:60:0a:8c:7d:66:
07:eb:b9:f6:3f:e1:9a:a5:fa:87:ab:3e:c8:f4:76:
3f:c9:83:44:60:49:a0:4b:a8:36:bd:ad:7d:8c:ec:
3e:ff:e7:9d:e0:9f:22:d9:57:32:61:80:fe:93:a9:
eb:5d:6d:7d:fb:23:8f:06:78:17:c3:f5:4a:2f:44:
87:61:25:0d:47:2a:2f:e0:51:d3:1c:78:8d:a0:b8:
f9:95:7e:8e:ee:dd:db:28:fd:4a:a3:73:df:7c:cc:
8b:51:f3:b6:aa:38:87:a4:15:1a:82:5c:43:bc:d0:
ab:f1:42:ef:c9:87:2f:4d:94:72:7f:b2:37:22:76:
dd:ce:a4:81:8e:09:e8:09:b8:12:0e:a1:91:4b:2f:
1b:a0:78:01:53:af:bf:fd:67:4b:5c:29:8e:68:3f:
7a:b6:24:82:90:6b:8c:db:96:51:4f:13:67:fe:0d:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:71:08:D9:8F:8F:7A:A0:D1:D1:59:77:3F:3A:D4:BC:45:6F:55:0D
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:24:b5:a9:17:42:2c:70:26:83:87:ca:31:0d:dd:e7:86:ba:
cf:a9:90:ed:1d:a6:0b:9c:26:cc:f2:5e:82:42:fb:96:58:6b:
c0:da:da:ce:d7:04:d4:2a:2a:f0:63:f9:f9:1c:fb:ed:57:16:
e6:be:a5:a5:5c:e1:0e:1e:1f:f9:63:80:c7:15:c1:75:9c:2a:
3f:35:4c:c7:6c:04:3a:71:af:ff:76:cb:30:06:75:6f:97:af:
96:ad:e3:df:9d:dd:1d:1b:68:ee:19:39:12:cf:61:8e:c9:5f:
5f:4f:f3:08:e7:05:47:a5:08:c0:02:4e:fc:87:75:b4:0a:65:
fa:d9:ab:92:ff:f2:5f:18:eb:c4:70:69:ca:ac:ff:84:51:3c:
05:70:16:09:30:f7:ef:12:25:92:68:34:8b:d1:f2:34:33:9b:
bc:5b:5e:ec:e3:c5:f6:46:01:69:2f:27:5a:9f:b4:47:45:5a:
a9:b3:7e:cb:a0:06:44:87:d0:04:18:a1:37:d3:00:cd:21:d3:
24:86:17:37:0c:1f:d0:e2:8f:b8:b2:33:99:97:9e:1e:fb:c2:
15:e2:1c:b8:ee:56:b6:44:ba:1a:de:9f:69:87:93:3e:84:de:
e7:13:a9:cf:51:4b:c7:23:76:28:8d:89:31:d3:49:e0:d5:8c:
f8:20:e0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqFyaNT4joEXCVxbyeU0ZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjUwNDEyMTMwMTIyWhcNMjUwNDEzMTMwMTIyWjAzMTEwLwYDVQQD
Eyg3ZDcxMDhkOThmOGY3YWEwZDFkMTU5NzczZjNhZDRiYzQ1NmY1NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjmt5yAE/RCZZ8YLrMYWiZ+VmZgl
yDQqhBUaEUUEdYEkyBPxICSYkebQaIXLUf8I8MFt+HsLjnIqp/oVt6RFO7/GFcsN
gIPWuvreylVc/UOucTO9YAqMfWYH67n2P+GapfqHqz7I9HY/yYNEYEmgS6g2va19
jOw+/+ed4J8i2VcyYYD+k6nrXW19+yOPBngXw/VKL0SHYSUNRyov4FHTHHiNoLj5
lX6O7t3bKP1Ko3PffMyLUfO2qjiHpBUaglxDvNCr8ULvyYcvTZRyf7I3InbdzqSB
jgnoCbgSDqGRSy8boHgBU6+//WdLXCmOaD96tiSCkGuM25ZRTxNn/g3ArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1xCNmPj3qg0dFZdz861LxFb1UNMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSS1qRdC
LHAmg4fKMQ3d54a6z6mQ7R2mC5wmzPJegkL7llhrwNraztcE1Coq8GP5+Rz77VcW
5r6lpVzhDh4f+WOAxxXBdZwqPzVMx2wEOnGv/3bLMAZ1b5evlq3j353dHRto7hk5
Es9hjslfX0/zCOcFR6UIwAJO/Id1tApl+tmrkv/yXxjrxHBpyqz/hFE8BXAWCTD3
7xIlkmg0i9HyNDObvFte7OPF9kYBaS8nWp+0R0VaqbN+y6AGRIfQBBihN9MAzSHT
JIYXNwwf0OKPuLIzmZeeHvvCFeIcuO5WtkS6Gt6faYeTPoTe5xOpz1FLxyN2KI2J
MdNJ4NWM+CDgIg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:43:11 2025 by rpki-client