Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: +RwgpUXzp2RxpXyjuKQfylp5axXBeXWlyip9jQd5BJQ=
Subject key identifier: 34:6A:EB:80:D1:D7:CB:76:D5:ED:42:6D:8F:C7:7A:74:23:EF:4F:2C
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01967868AAA75514E50F715E062721878685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 18:00:47 +0000
Manifest this update: Sun 27 Apr 2025 18:00:47 +0000
Manifest next update: Mon 28 Apr 2025 18:00:47 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: tbh3yr2zJe02UhVtxnTgfYIqaweapYIYNnBH1ndO6NQ=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:aa:a7:55:14:e5:0f:71:5e:06:27:21:87:86:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Apr 27 18:00:47 2025 GMT
Not After : Apr 28 18:00:47 2025 GMT
Subject: CN=346aeb80d1d7cb76d5ed426d8fc77a7423ef4f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:6f:e8:67:64:80:a5:53:8c:04:b2:c0:14:
fd:37:35:32:c5:06:0d:6f:e7:e5:a5:70:82:bf:90:
4e:cf:f4:e4:59:dc:6f:1f:e5:73:2b:a0:6a:1e:40:
08:23:bc:33:2a:56:02:f1:63:28:be:bc:2a:9f:1c:
30:cb:f7:8d:05:9a:1c:6e:5a:20:36:c1:d7:3f:fa:
0c:57:e3:0c:d2:ca:86:fa:81:7a:b5:a1:37:b9:2a:
da:e2:d1:59:cc:f3:79:3e:8c:6f:a3:bb:8d:30:3e:
1f:1b:6b:26:cb:ca:86:ce:0d:72:2b:cf:a7:af:cb:
95:b7:c3:9c:f9:12:71:49:2a:60:d5:06:65:85:e8:
b4:da:95:17:45:9c:aa:93:39:6c:91:f6:d2:82:1e:
80:f5:92:7e:ad:09:51:c9:dd:f8:d9:7f:df:76:8c:
72:ea:e6:b7:6f:b8:2f:fc:9c:88:94:53:f7:f6:3e:
91:75:95:63:a1:d8:90:0a:4e:04:d6:18:61:e6:dc:
be:33:e7:fd:81:ab:a4:23:8a:35:09:d2:d4:d8:e5:
c8:78:a4:3c:76:4a:be:4c:f4:a4:73:e9:26:89:68:
50:6b:ec:5e:20:a8:3f:86:24:4a:46:3e:90:60:1f:
c4:14:12:10:d2:6c:25:5d:95:0f:bb:99:82:8f:2f:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:EB:80:D1:D7:CB:76:D5:ED:42:6D:8F:C7:7A:74:23:EF:4F:2C
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b9:a8:6d:b4:54:5e:0a:7c:9a:e3:1e:28:f0:6b:da:a7:81:
d6:65:e5:b6:59:65:69:d3:29:09:b3:5f:9e:66:30:42:a3:b1:
03:dc:4f:49:f4:c1:a2:53:65:81:d0:d5:89:77:f3:7c:64:4a:
b2:19:6c:97:d0:2d:9f:13:a5:77:31:56:62:18:5d:63:c2:24:
23:68:f9:4c:37:c3:f5:d7:cb:af:35:ed:cc:c8:52:8b:14:80:
3c:75:b5:d3:b1:4f:d8:db:a0:2e:d7:e9:38:60:b0:4a:de:60:
91:c0:ac:94:e3:85:71:40:55:e0:af:21:75:45:8a:53:fb:18:
58:e7:4f:17:1a:1f:ae:42:6c:6e:fc:1f:5e:ee:0c:51:bf:54:
4b:e1:a3:38:96:ec:38:9f:bb:fe:c3:22:62:b8:12:68:68:80:
92:3e:65:4e:b0:a3:21:b3:e3:97:7d:9c:e6:5f:bd:e2:17:eb:
f2:1a:30:09:c5:3e:43:f3:af:19:5b:48:7c:1c:8f:e6:00:35:
53:e9:a9:e2:9c:d9:33:c3:c3:13:5e:28:bb:d9:6a:3d:66:1e:
6e:72:aa:01:6f:6f:b6:9d:72:53:a9:0c:8d:a2:62:4d:21:07:
96:4d:a7:8e:37:5e:4f:b1:04:cc:92:5b:2b:a8:ed:6c:69:ca:
3c:55:68:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aKqnVRTlD3FeBichh4aFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk
ZTdjNTEwHhcNMjUwNDI3MTgwMDQ3WhcNMjUwNDI4MTgwMDQ3WjAzMTEwLwYDVQQD
EygzNDZhZWI4MGQxZDdjYjc2ZDVlZDQyNmQ4ZmM3N2E3NDIzZWY0ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEpv6GdkgKVTjASywBT9NzUyxQYN
b+flpXCCv5BOz/TkWdxvH+VzK6BqHkAII7wzKlYC8WMovrwqnxwwy/eNBZocblog
NsHXP/oMV+MM0sqG+oF6taE3uSra4tFZzPN5Poxvo7uNMD4fG2smy8qGzg1yK8+n
r8uVt8Oc+RJxSSpg1QZlhei02pUXRZyqkzlskfbSgh6A9ZJ+rQlRyd342X/fdoxy
6ua3b7gv/JyIlFP39j6RdZVjodiQCk4E1hhh5ty+M+f9gaukI4o1CdLU2OXIeKQ8
dkq+TPSkc+kmiWhQa+xeIKg/hiRKRj6QYB/EFBIQ0mwlXZUPu5mCjy/dEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRq64DR18t21e1CbY/HenQj708sMB8GA1UdIwQY
MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt
NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5
LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAormobbRU
Xgp8muMeKPBr2qeB1mXltllladMpCbNfnmYwQqOxA9xPSfTBolNlgdDViXfzfGRK
shlsl9AtnxOldzFWYhhdY8IkI2j5TDfD9dfLrzXtzMhSixSAPHW107FP2NugLtfp
OGCwSt5gkcCslOOFcUBV4K8hdUWKU/sYWOdPFxofrkJsbvwfXu4MUb9US+GjOJbs
OJ+7/sMiYrgSaGiAkj5lTrCjIbPjl32c5l+94hfr8howCcU+Q/OvGVtIfByP5gA1
U+mp4pzZM8PDE14ou9lqPWYebnKqAW9vtp1yU6kMjaJiTSEHlk2njjdeT7EEzJJb
K6jtbGnKPFVoEQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:16 2025 by rpki-client