Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: uRyONnCd/QTLdRCBAiMft7BjJM6gz4gTGAIK/3y4seM=
Subject key identifier: AC:9E:CC:0A:E0:D7:E4:B0:8E:DD:3F:84:AA:F7:05:6E:60:F6:AB:02
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 019674C25162045AE2A8D1B541D014BCAB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 11A6
Signing time: Sun 27 Apr 2025 01:00:13 +0000
Manifest this update: Sun 27 Apr 2025 01:00:13 +0000
Manifest next update: Mon 28 Apr 2025 01:00:13 +0000
Files and hashes: 1: 15Cc0rkgOAAGUx8rhsWE0wocji4.roa (hash: w5RcK6dKOaSgSCjKMtRrWFYt+lmDT9Fb/OPGmzxAWAs=)
2: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (hash: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=)
3: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: HswVIb/DQwyQaoaJejn366qrmdL+uYWwGNT31Yk87no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:51:62:04:5a:e2:a8:d1:b5:41:d0:14:bc:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Apr 27 01:00:13 2025 GMT
Not After : Apr 28 01:00:13 2025 GMT
Subject: CN=ac9ecc0ae0d7e4b08edd3f84aaf7056e60f6ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:43:65:ea:b2:72:81:c2:74:31:61:48:2b:
f5:fa:28:d7:93:c5:50:8b:e8:27:72:f8:70:04:94:
2f:c9:0f:10:15:f4:25:f7:fd:35:25:9d:d3:ef:97:
0e:95:1e:2e:8c:d7:59:b2:b2:23:bf:01:1c:06:1c:
9f:e6:74:63:67:72:c1:9a:d4:c3:19:24:c9:84:8e:
a9:49:4c:d1:e9:a7:83:f3:41:75:87:7a:63:25:ef:
5a:78:5d:12:7e:d8:2e:83:cd:fa:4c:84:79:e9:da:
a7:df:79:bd:f3:08:4c:0a:e5:9d:ce:d0:70:3d:ef:
bb:82:a7:94:66:c8:24:da:aa:66:99:2f:3a:c0:59:
3e:f2:a9:e0:b9:ce:9c:40:7c:18:25:5d:64:9c:80:
5f:e3:f9:97:65:83:0b:14:47:1b:78:fa:95:b5:8d:
f5:04:16:c5:f7:00:e7:aa:fc:d6:25:97:03:26:1c:
76:7e:fe:b2:b2:bd:c0:99:64:c5:e2:27:9c:a3:27:
85:e5:d5:dd:01:50:c2:e0:66:bd:e9:97:b1:46:87:
78:11:5d:34:4b:16:db:5c:a2:8b:5f:23:45:a9:cd:
95:78:fd:61:e2:a6:de:f2:07:23:27:23:a5:88:cb:
26:8c:27:be:05:b5:e3:be:f4:62:3f:19:46:c0:d6:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:CC:0A:E0:D7:E4:B0:8E:DD:3F:84:AA:F7:05:6E:60:F6:AB:02
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3c:e8:29:18:2f:21:71:44:b1:04:09:6d:6c:08:37:e5:80:
4b:6b:4e:32:46:87:6a:9e:86:87:aa:69:3b:f2:87:5d:31:fe:
3b:64:77:00:d0:7c:17:80:9e:d6:e3:a6:95:e2:ba:09:0d:34:
b2:af:96:6e:86:c5:db:0e:1d:a1:47:b3:1a:a2:78:cb:42:75:
d4:75:3a:17:29:8e:87:74:ae:e0:5c:5c:b5:69:05:6f:fd:09:
71:12:0d:07:f2:da:42:80:e3:79:6f:bc:3b:35:1b:95:d6:5c:
bc:02:57:5c:41:3f:e2:69:04:48:c4:ea:20:da:32:1b:36:19:
1c:90:8c:bc:c6:b1:bc:62:3a:3b:65:5e:d6:1d:81:99:8f:4c:
96:16:2e:97:e9:90:bc:48:a4:23:97:b0:aa:6c:bc:fd:4d:16:
a1:f9:a6:5c:c1:16:90:4f:57:b9:d7:40:fb:e3:96:9f:89:74:
7f:fa:95:68:a8:a2:64:67:8e:56:28:c8:bc:be:b0:82:cf:0f:
82:65:9a:ce:9f:51:3e:ad:8a:56:b8:89:dc:d7:a8:19:9a:a8:
c5:36:57:d5:eb:3d:b7:f1:9b:03:f6:e4:78:87:1a:b9:54:cb:
77:de:9e:d5:0e:1d:5b:bc:3c:b6:e4:e8:81:16:50:54:87:b9:
f8:84:5c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wlFiBFriqNG1QdAUvKsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUwNDI3MDEwMDEzWhcNMjUwNDI4MDEwMDEzWjAzMTEwLwYDVQQD
EyhhYzllY2MwYWUwZDdlNGIwOGVkZDNmODRhYWY3MDU2ZTYwZjZhYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkxDZeqycoHCdDFhSCv1+ijXk8VQ
i+gncvhwBJQvyQ8QFfQl9/01JZ3T75cOlR4ujNdZsrIjvwEcBhyf5nRjZ3LBmtTD
GSTJhI6pSUzR6aeD80F1h3pjJe9aeF0Sftgug836TIR56dqn33m98whMCuWdztBw
Pe+7gqeUZsgk2qpmmS86wFk+8qnguc6cQHwYJV1knIBf4/mXZYMLFEcbePqVtY31
BBbF9wDnqvzWJZcDJhx2fv6ysr3AmWTF4iecoyeF5dXdAVDC4Ga96ZexRod4EV00
SxbbXKKLXyNFqc2VeP1h4qbe8gcjJyOliMsmjCe+BbXjvvRiPxlGwNbF6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyezArg1+Swjt0/hKr3BW5g9qsCMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzzoKRgv
IXFEsQQJbWwIN+WAS2tOMkaHap6Gh6ppO/KHXTH+O2R3ANB8F4Ce1uOmleK6CQ00
sq+WbobF2w4doUezGqJ4y0J11HU6FymOh3Su4FxctWkFb/0JcRINB/LaQoDjeW+8
OzUbldZcvAJXXEE/4mkESMTqINoyGzYZHJCMvMaxvGI6O2Ve1h2BmY9MlhYul+mQ
vEikI5ewqmy8/U0WofmmXMEWkE9XuddA++OWn4l0f/qVaKiiZGeOVijIvL6wgs8P
gmWazp9RPq2KVriJ3NeoGZqoxTZX1es9t/GbA/bkeIcauVTLd96e1Q4dW7w8tuTo
gRZQVIe5+IRcCQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:09 2025 by rpki-client