Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: AN1Nr0OWAJrwYoStQZLmHhhnEzNlFermxvgiCyPaKzA=
Subject key identifier: 33:FA:A2:B4:53:1B:CC:76:17:70:80:09:C0:7E:3F:01:44:8C:3A:75
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019693A8804C306386F08400D939357855F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0A1E
Signing time: Sat 03 May 2025 01:00:15 +0000
Manifest this update: Sat 03 May 2025 01:00:15 +0000
Manifest next update: Sun 04 May 2025 01:00:15 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: AqyUAqdBoDEJvmfioMKAQVLK83QL2qyxZIpKeUBrKW0=)
2: 73kskguN1VPO4tq3u0I-6VPbcl8.roa (hash: IOUFc++3ERmMqSZYKktHNh8ojKEPsIX8mty7/JMNR8c=)
3: pwFLoSIf9VUbET6QAXvLZY5rPr0.roa (hash: va4qzagh1XVOL80SDuYlOL0AHUwEGtmHAcyNr2+1pWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:a8:80:4c:30:63:86:f0:84:00:d9:39:35:78:55:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: May 3 01:00:15 2025 GMT
Not After : May 4 01:00:15 2025 GMT
Subject: CN=33faa2b4531bcc7617708009c07e3f01448c3a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:07:b0:37:3d:9f:34:a7:7e:20:80:f0:07:
ee:23:85:96:7f:22:3b:9b:3b:48:35:bc:f7:8a:7c:
9d:79:7f:82:d1:bf:74:77:11:95:e0:55:1a:91:7a:
4f:da:a2:d3:34:a8:1f:63:1f:fc:07:49:b8:16:44:
6d:86:9e:45:94:cb:81:ff:92:06:e3:a9:5d:1f:d1:
e3:39:db:4b:ad:77:bb:ee:d4:0e:ad:2e:2b:b6:b0:
8b:86:0c:11:c3:39:5a:7d:d4:b3:f4:0c:56:69:c2:
41:b7:a7:4f:7d:ec:fa:80:6b:9c:eb:a1:c0:aa:a7:
01:a3:03:76:fd:f5:3f:5c:4d:37:7e:a3:72:01:9b:
4c:26:0e:8e:7c:57:74:62:08:b0:20:e1:0b:a8:11:
fb:8a:f3:19:ac:a7:6a:22:49:9f:32:de:df:1e:3c:
85:45:c3:2b:25:8b:5b:04:61:35:d8:05:53:e5:6a:
7d:f6:cd:b8:10:9f:42:a4:7f:e4:a7:55:df:26:3b:
7e:cf:8a:df:36:b7:12:96:a9:66:3f:3e:7a:83:28:
85:47:a6:99:6b:bc:76:2a:d6:bc:d9:95:aa:d4:a0:
82:98:d7:6c:6c:73:1d:e4:bb:1e:0e:eb:f9:24:5c:
77:22:df:bf:1b:91:aa:f8:0c:f8:ea:27:a6:46:76:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:A2:B4:53:1B:CC:76:17:70:80:09:C0:7E:3F:01:44:8C:3A:75
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b0:18:f3:9b:9a:c6:85:9f:03:28:3f:a6:6a:7d:f1:f1:fb:
4b:02:6b:a1:88:dc:98:ab:3d:3c:0b:e6:ba:ed:cc:39:4b:93:
3b:98:46:29:fa:e3:81:5a:e7:e0:0f:a8:51:62:fd:2b:dc:ed:
99:47:7d:f1:4d:95:6d:a3:25:ff:89:47:8c:0d:34:f5:04:d4:
8a:46:36:d5:9e:76:7b:f6:eb:f1:1e:a3:51:61:93:ee:53:c7:
66:41:db:14:c9:af:37:ee:45:d9:4b:f1:46:48:5f:e1:df:c8:
35:0b:55:72:e3:43:43:f7:47:42:f5:a2:9f:b4:e9:80:b4:bc:
25:3b:c6:57:7e:70:ac:83:86:a4:61:3e:1f:91:f7:f0:69:98:
e6:4b:bf:d9:ab:23:f0:3e:a1:49:cf:84:eb:ca:cc:ae:e9:b5:
92:da:f8:7b:2a:45:ce:70:83:d8:a7:6e:da:6f:1d:da:1d:b7:
5a:b5:90:53:52:f2:32:8c:2c:2d:6a:d5:5f:57:ac:2d:91:ce:
17:fd:bd:5f:20:6b:97:00:44:64:84:75:ef:d8:af:ec:fd:5a:
ca:9c:43:92:95:a3:c5:fb:41:54:f3:16:4b:70:a2:3a:95:81:
78:ec:16:5e:dd:25:cd:e1:bf:be:65:f9:e4:43:3f:80:2b:d0:
79:98:56:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTqIBMMGOG8IQA2Tk1eFX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3
NDAwOTYwHhcNMjUwNTAzMDEwMDE1WhcNMjUwNTA0MDEwMDE1WjAzMTEwLwYDVQQD
EygzM2ZhYTJiNDUzMWJjYzc2MTc3MDgwMDljMDdlM2YwMTQ0OGMzYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7YHsDc9nzSnfiCA8AfuI4WWfyI7
mztINbz3inydeX+C0b90dxGV4FUakXpP2qLTNKgfYx/8B0m4FkRthp5FlMuB/5IG
46ldH9HjOdtLrXe77tQOrS4rtrCLhgwRwzlafdSz9AxWacJBt6dPfez6gGuc66HA
qqcBowN2/fU/XE03fqNyAZtMJg6OfFd0YgiwIOELqBH7ivMZrKdqIkmfMt7fHjyF
RcMrJYtbBGE12AVT5Wp99s24EJ9CpH/kp1XfJjt+z4rfNrcSlqlmPz56gyiFR6aZ
a7x2Kta82ZWq1KCCmNdsbHMd5LseDuv5JFx3It+/G5Gq+Az46iemRnaMHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP6orRTG8x2F3CACcB+PwFEjDp1MB8GA1UdIwQY
MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt
MTRlM2MyMDE3OTY5LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5
LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrAY85ua
xoWfAyg/pmp98fH7SwJroYjcmKs9PAvmuu3MOUuTO5hGKfrjgVrn4A+oUWL9K9zt
mUd98U2VbaMl/4lHjA009QTUikY21Z52e/br8R6jUWGT7lPHZkHbFMmvN+5F2Uvx
Rkhf4d/INQtVcuNDQ/dHQvWin7TpgLS8JTvGV35wrIOGpGE+H5H38GmY5ku/2asj
8D6hSc+E68rMrum1ktr4eypFznCD2Kdu2m8d2h23WrWQU1LyMowsLWrVX1esLZHO
F/29XyBrlwBEZIR179iv7P1aypxDkpWjxftBVPMWS3CiOpWBeOwWXt0lzeG/vmX5
5EM/gCvQeZhW4A==
-----END CERTIFICATE-----
Generated at Sat May 3 11:51:12 2025 by rpki-client