Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: RaI00WD03OT5zqkix3jnYGOfPWPkAwoDiS5e+NkCJTs=
Subject key identifier: BD:BD:55:01:64:B2:33:85:77:3A:A4:D7:99:10:13:2B:96:B2:15:DD
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 01967F46673EE20288A5AA6FDD76B56A9F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 0133
Signing time: Tue 29 Apr 2025 02:00:42 +0000
Manifest this update: Tue 29 Apr 2025 02:00:42 +0000
Manifest next update: Wed 30 Apr 2025 02:00:42 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: +g/bNiUgbOZqpGL9vVnhM2kt8ok4pdHwJ8xqVGPzQ+w=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:67:3e:e2:02:88:a5:aa:6f:dd:76:b5:6a:9f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Apr 29 02:00:42 2025 GMT
Not After : Apr 30 02:00:42 2025 GMT
Subject: CN=bdbd550164b23385773aa4d79910132b96b215dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:e2:2d:0b:fe:b4:34:00:f1:77:9d:df:c8:
d4:bc:09:c5:a0:3d:3e:0e:c7:8f:cf:44:e6:f4:e7:
c1:dd:cc:38:a3:8d:f3:c3:f8:88:6d:b7:30:b7:1e:
66:be:71:eb:05:64:cb:81:c3:d5:45:cf:81:7a:0e:
c6:68:6d:48:75:22:b4:6e:83:5d:7f:48:b5:2f:46:
63:be:12:67:98:90:fa:11:f0:d8:5f:17:74:f7:ef:
73:25:c4:6d:39:e3:2b:7e:c5:37:68:59:87:c2:5e:
32:72:fc:dc:cf:88:fb:2a:3c:80:6d:b2:6e:dd:37:
83:4b:02:03:39:12:46:80:f5:16:de:fa:ec:7d:b8:
b5:6e:b9:48:0b:48:c4:b1:8b:37:84:40:9e:5d:71:
9e:e1:25:95:d3:e4:43:52:9b:53:78:87:96:ff:da:
e6:25:86:b6:eb:cb:4b:28:92:10:09:44:3e:b2:a2:
7d:a1:7b:20:99:e3:19:9d:db:d2:17:a5:53:b3:3b:
3c:94:f9:ec:53:cd:1b:5b:8d:30:e4:f8:a8:32:32:
cc:9e:f6:2b:13:cb:43:34:4e:29:11:7f:d7:7c:f5:
dd:b7:0f:8e:52:c9:d7:96:7d:35:6d:f9:0f:a3:cb:
73:e5:53:3c:3a:7e:99:d7:01:ab:cb:15:6e:ab:5f:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:55:01:64:B2:33:85:77:3A:A4:D7:99:10:13:2B:96:B2:15:DD
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:65:7c:20:18:bb:ed:8b:ff:36:13:a2:40:1a:ce:27:fc:f4:
6c:20:2b:0f:4e:f3:f3:99:d8:ea:dd:3b:ab:21:83:7d:19:ed:
9c:77:25:f8:23:7f:30:da:91:8b:2d:63:05:94:ab:33:73:c1:
e8:e0:cd:7a:20:a9:40:78:d9:69:81:45:58:ad:be:aa:2b:d9:
76:c9:f4:88:08:ca:7e:d3:7e:3b:f2:41:7b:8f:13:8e:d2:92:
8f:df:a7:b5:26:68:3e:9d:7f:b8:30:a1:f9:27:06:5c:0f:51:
c4:a0:d3:e5:71:c7:b4:52:b7:56:7f:e4:1d:fd:5b:3e:0f:6d:
7c:b6:2f:92:68:12:55:55:54:0b:d8:e0:87:d0:24:f7:61:60:
22:f5:cf:f9:14:1f:08:39:f3:81:32:19:b3:a8:c9:2e:cb:ab:
cf:41:4c:8e:b4:09:e2:5c:95:ee:3f:c5:9f:7c:96:6c:c0:3b:
4b:25:cc:26:67:37:4d:5c:8f:a9:e4:71:3d:f9:30:5e:38:1d:
08:4a:84:5e:ab:a4:dd:00:2d:a8:b9:11:8d:36:2e:0f:3a:50:
0a:56:85:d8:11:58:dd:53:dd:a9:8d:5d:be:ff:e1:29:64:2d:
b2:ee:84:9d:13:1c:c5:02:29:1a:83:38:0c:53:a9:06:eb:99:
dc:e0:03:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/Rmc+4gKIpapv3Xa1ap8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh
MjQzZTkwHhcNMjUwNDI5MDIwMDQyWhcNMjUwNDMwMDIwMDQyWjAzMTEwLwYDVQQD
EyhiZGJkNTUwMTY0YjIzMzg1NzczYWE0ZDc5OTEwMTMyYjk2YjIxNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NziLQv+tDQA8Xed38jUvAnFoD0+
DsePz0Tm9OfB3cw4o43zw/iIbbcwtx5mvnHrBWTLgcPVRc+Beg7GaG1IdSK0boNd
f0i1L0ZjvhJnmJD6EfDYXxd09+9zJcRtOeMrfsU3aFmHwl4ycvzcz4j7KjyAbbJu
3TeDSwIDORJGgPUW3vrsfbi1brlIC0jEsYs3hECeXXGe4SWV0+RDUptTeIeW/9rm
JYa268tLKJIQCUQ+sqJ9oXsgmeMZndvSF6VTszs8lPnsU80bW40w5PioMjLMnvYr
E8tDNE4pEX/XfPXdtw+OUsnXln01bfkPo8tz5VM8On6Z1wGryxVuq18xxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL29VQFksjOFdzqk15kQEyuWshXdMB8GA1UdIwQY
MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt
ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi
LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGV8IBi7
7Yv/NhOiQBrOJ/z0bCArD07z85nY6t07qyGDfRntnHcl+CN/MNqRiy1jBZSrM3PB
6ODNeiCpQHjZaYFFWK2+qivZdsn0iAjKftN+O/JBe48TjtKSj9+ntSZoPp1/uDCh
+ScGXA9RxKDT5XHHtFK3Vn/kHf1bPg9tfLYvkmgSVVVUC9jgh9Ak92FgIvXP+RQf
CDnzgTIZs6jJLsurz0FMjrQJ4lyV7j/Fn3yWbMA7SyXMJmc3TVyPqeRxPfkwXjgd
CEqEXquk3QAtqLkRjTYuDzpQClaF2BFY3VPdqY1dvv/hKWQtsu6EnRMcxQIpGoM4
DFOpBuuZ3OADUA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:13:34 2025 by rpki-client