Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: HhY/9dzFH4g7rUlDdiABoO3cPGWKMvh9t+oUkBvFay0=
Subject key identifier: AA:F8:B6:1C:EE:4C:4D:AE:FC:41:29:CE:94:21:DF:62:8D:A6:A5:EF
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 01967D8E93E6A1BFE602926B5A9D8D047F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 030C
Signing time: Mon 28 Apr 2025 18:00:18 +0000
Manifest this update: Mon 28 Apr 2025 18:00:18 +0000
Manifest next update: Tue 29 Apr 2025 18:00:18 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: phlpK4scoKLKmTZR9T0ExI6iBECL4pz1asWfkk5o7xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:93:e6:a1:bf:e6:02:92:6b:5a:9d:8d:04:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Apr 28 18:00:18 2025 GMT
Not After : Apr 29 18:00:18 2025 GMT
Subject: CN=aaf8b61cee4c4daefc4129ce9421df628da6a5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:86:c0:1a:e5:3f:c0:a8:cf:c6:ef:c5:a0:
c3:c3:43:28:3b:1a:63:95:da:d7:a9:10:10:32:25:
10:b1:5a:d3:3d:89:6e:a9:06:3b:4d:3d:fd:92:d2:
b0:ae:aa:1e:1a:4e:bb:09:13:d4:d1:28:c4:08:1a:
e8:75:58:bc:09:22:b4:0b:7a:46:5d:c9:f2:07:97:
e6:61:47:85:e1:80:1c:fa:f3:12:d5:9d:cd:44:80:
d3:4a:19:d3:48:25:0f:9e:f5:b6:98:21:1c:8d:71:
59:2b:6c:9b:da:34:fa:53:2d:87:fc:97:07:a9:93:
28:82:af:20:43:8e:3b:7f:20:57:3c:0c:05:87:41:
4d:39:51:31:ce:77:a1:cb:ad:6c:1c:24:31:08:08:
4a:96:6c:d8:cf:21:9a:ce:93:98:e5:2c:3e:37:e0:
f4:63:8b:fb:d4:54:d5:89:d2:1d:75:09:a7:5a:db:
c6:dc:ac:c8:8b:f2:43:51:5a:72:0d:87:09:6e:0f:
90:97:c9:1c:fa:6a:70:a2:a5:cb:cf:5b:20:78:b6:
58:b4:8b:47:b1:07:dc:e2:b2:03:75:e3:4a:3b:03:
fe:2c:b9:80:58:e1:49:0a:47:85:b4:76:ab:f1:eb:
90:3c:cb:46:a6:14:7f:32:75:1c:bb:b4:8f:f0:ae:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:B6:1C:EE:4C:4D:AE:FC:41:29:CE:94:21:DF:62:8D:A6:A5:EF
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9d:63:b8:ae:c3:c4:97:94:b5:e3:8a:25:3f:74:ff:7a:ce:
18:28:8e:b6:9c:aa:34:c8:24:0f:47:98:66:7b:55:a5:6c:8d:
c2:9d:53:df:aa:cf:26:49:5a:43:ac:5b:72:a7:a7:48:2e:6b:
44:eb:3c:81:8b:4c:e7:c7:e8:48:42:a2:9e:22:8f:37:2f:de:
ba:15:4e:e4:94:fe:94:df:3d:86:27:e1:81:ba:10:42:20:32:
d1:67:d5:f6:31:fb:8b:03:a9:fe:7d:9c:44:ef:6b:3e:98:26:
46:4c:72:f9:11:09:3f:dc:ee:e7:ba:26:f5:be:b4:cf:2f:2b:
41:0e:62:84:e7:1d:c6:29:c2:ac:32:0f:f4:f2:a1:12:32:93:
57:2e:cb:24:ad:cd:a0:01:25:f8:0d:07:e4:1c:1d:76:4d:61:
b2:eb:62:b0:f2:7b:d3:68:43:c8:2b:db:3d:64:41:27:69:24:
44:38:7d:3a:be:f7:99:c2:e5:91:f6:37:88:e8:2b:b4:10:ad:
e1:a3:6f:ba:59:c2:01:ed:b6:4c:ad:d1:d3:80:56:23:57:b8:
39:85:7b:30:b6:fc:54:d3:62:1d:0f:f1:51:88:98:4b:0b:be:
54:af:47:bd:ea:11:b3:bc:db:e5:e9:f4:56:a5:be:eb:7c:16:
43:47:a7:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jpPmob/mApJrWp2NBH84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmViOWFkZmMyZjY1NTEyMjA1YmQ0ODExMzI0YzlkN2Y2
YTAyMjIwHhcNMjUwNDI4MTgwMDE4WhcNMjUwNDI5MTgwMDE4WjAzMTEwLwYDVQQD
EyhhYWY4YjYxY2VlNGM0ZGFlZmM0MTI5Y2U5NDIxZGY2MjhkYTZhNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBWGwBrlP8Coz8bvxaDDw0MoOxpj
ldrXqRAQMiUQsVrTPYluqQY7TT39ktKwrqoeGk67CRPU0SjECBrodVi8CSK0C3pG
XcnyB5fmYUeF4YAc+vMS1Z3NRIDTShnTSCUPnvW2mCEcjXFZK2yb2jT6Uy2H/JcH
qZMogq8gQ447fyBXPAwFh0FNOVExznehy61sHCQxCAhKlmzYzyGazpOY5Sw+N+D0
Y4v71FTVidIddQmnWtvG3KzIi/JDUVpyDYcJbg+Ql8kc+mpwoqXLz1sgeLZYtItH
sQfc4rIDdeNKOwP+LLmAWOFJCkeFtHar8euQPMtGphR/MnUcu7SP8K4EHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr4thzuTE2u/EEpzpQh32KNpqXvMB8GA1UdIwQY
MBaAFIP+ua38L2VRIgW9SBEyTJ1/agIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEt
OTZlMGMxYzQ0NDgzLzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEtOTZlMGMxYzQ0NDgz
LzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJ1juK7D
xJeUteOKJT90/3rOGCiOtpyqNMgkD0eYZntVpWyNwp1T36rPJklaQ6xbcqenSC5r
ROs8gYtM58foSEKiniKPNy/euhVO5JT+lN89hifhgboQQiAy0WfV9jH7iwOp/n2c
RO9rPpgmRkxy+REJP9zu57om9b60zy8rQQ5ihOcdxinCrDIP9PKhEjKTVy7LJK3N
oAEl+A0H5Bwddk1hsutisPJ702hDyCvbPWRBJ2kkRDh9Or73mcLlkfY3iOgrtBCt
4aNvulnCAe22TK3R04BWI1e4OYV7MLb8VNNiHQ/xUYiYSwu+VK9HveoRs7zb5en0
VqW+63wWQ0enVQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:08 2025 by rpki-client