Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: Au8QTUGpxKEZFh2aFIBwM/Igd5yXGEtHxaenSpyebbs=
Subject key identifier: 6C:6B:46:7F:82:AC:DB:A6:4A:60:77:D9:E5:D7:7B:F4:D2:F6:12:A2
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 0196789F8AABA761ED37FEA9B5B031AD12AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: DE
Signing time: Sun 27 Apr 2025 19:00:43 +0000
Manifest this update: Sun 27 Apr 2025 19:00:43 +0000
Manifest next update: Mon 28 Apr 2025 19:00:43 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: bN0NS1Z4fuOlE4DkX/1FqxZ9tqdQNZTuNnN2lbwY23c=)
2: oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa (hash: zclvRtzWTLzWr7SKBjsrPG4/869JCHe23hkSJVxmGco=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:8a:ab:a7:61:ed:37:fe:a9:b5:b0:31:ad:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Apr 27 19:00:43 2025 GMT
Not After : Apr 28 19:00:43 2025 GMT
Subject: CN=6c6b467f82acdba64a6077d9e5d77bf4d2f612a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:c5:68:09:d4:10:bd:97:82:08:27:ff:46:
23:db:86:0c:69:25:d1:56:37:e0:5b:00:9a:df:6d:
04:a3:be:5a:6d:9d:55:46:ac:ec:ec:a5:c1:eb:d2:
06:61:b5:52:5c:75:1e:b1:0e:15:ae:29:45:ed:d2:
04:27:24:c6:2b:e4:64:13:21:3e:3c:46:80:48:40:
e9:ec:99:28:e8:6d:67:94:b2:20:38:66:d3:31:bf:
e7:88:8f:8f:2b:52:7f:2a:b8:bc:b0:84:bc:24:c5:
1e:a6:b1:f4:bf:a5:28:cc:19:60:ff:f7:ea:7c:d2:
f6:2d:5c:6b:6b:ca:31:c6:7c:71:dd:d8:6d:4f:0e:
2c:de:a6:c3:a2:08:a2:13:8c:95:03:65:21:ec:ef:
78:a2:38:b4:97:f1:1a:a2:22:0c:f9:07:a8:47:37:
ab:45:f1:13:a9:b3:8b:48:b0:4d:ed:a4:b0:9a:23:
70:fb:20:e7:dc:ef:8e:d6:14:be:51:1b:10:f3:69:
50:9c:6b:3d:ff:74:76:2b:18:c2:1d:47:36:4f:a6:
c1:5d:91:7c:e9:1a:7c:d5:06:cc:47:1a:30:68:df:
31:4d:0e:5c:26:43:a6:e6:5f:f4:f6:3a:5b:2d:09:
0f:85:af:90:05:9a:53:62:7b:3a:fc:21:69:61:28:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:46:7F:82:AC:DB:A6:4A:60:77:D9:E5:D7:7B:F4:D2:F6:12:A2
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:41:66:c9:91:6a:0c:1d:f3:56:30:08:09:0c:a1:46:28:2e:
68:7d:4b:bc:9f:b1:fd:d3:db:e9:f5:ba:40:b9:da:a8:da:77:
37:01:dd:dd:88:4c:20:b1:8f:a7:e1:f5:2d:3a:d0:78:1b:14:
e9:3f:a4:a0:5a:fe:de:0c:7b:94:27:8f:8d:be:ef:9d:30:33:
ae:1c:40:8d:a7:42:4f:1e:07:cb:8c:f2:91:97:d9:f9:3f:e2:
4c:d6:c0:e0:52:a5:43:cc:e2:02:0e:2a:4d:58:4c:97:5a:31:
f0:e7:34:83:7a:aa:8e:2d:a1:c5:74:5e:b5:39:bd:3c:71:75:
15:86:36:03:02:9b:f2:cc:d8:56:2d:fe:12:39:c9:a0:76:6c:
36:6e:86:44:ff:23:3d:47:1e:1c:ae:a2:f5:9a:b3:15:aa:30:
c4:e3:bd:95:70:f0:97:64:ed:58:90:a3:73:3a:81:a6:38:6d:
d1:f9:b5:a9:1f:6b:2f:3a:2e:82:74:27:20:7a:8c:1c:18:23:
f4:69:dc:30:19:68:17:39:97:29:54:b2:68:7d:0a:be:c5:64:
61:29:dc:de:a5:73:7b:4d:e7:c6:6e:a3:f4:5e:0a:61:30:8c:
ae:e2:71:58:98:56:8a:6e:71:03:eb:8d:6e:ba:aa:d5:ab:1c:
5e:2d:be:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n4qrp2HtN/6ptbAxrRKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjJjZjgwN2E1NmI3NzFhNWY0MmNjMTg5YWYyZDYzMWVi
NWFhZWMwHhcNMjUwNDI3MTkwMDQzWhcNMjUwNDI4MTkwMDQzWjAzMTEwLwYDVQQD
Eyg2YzZiNDY3ZjgyYWNkYmE2NGE2MDc3ZDllNWQ3N2JmNGQyZjYxMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FrFaAnUEL2Xgggn/0Yj24YMaSXR
VjfgWwCa320Eo75abZ1VRqzs7KXB69IGYbVSXHUesQ4VrilF7dIEJyTGK+RkEyE+
PEaASEDp7Jko6G1nlLIgOGbTMb/niI+PK1J/Kri8sIS8JMUeprH0v6UozBlg//fq
fNL2LVxra8oxxnxx3dhtTw4s3qbDogiiE4yVA2Uh7O94oji0l/EaoiIM+QeoRzer
RfETqbOLSLBN7aSwmiNw+yDn3O+O1hS+URsQ82lQnGs9/3R2KxjCHUc2T6bBXZF8
6Rp81QbMRxowaN8xTQ5cJkOm5l/09jpbLQkPha+QBZpTYns6/CFpYSjRWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxrRn+CrNumSmB32eXXe/TS9hKiMB8GA1UdIwQY
MBaAFNBiz4B6VrdxpfQswYmvLWMetarsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQt
MWRkNWZhYTA2YjBhLzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQtMWRkNWZhYTA2YjBh
LzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkFmyZFq
DB3zVjAICQyhRiguaH1LvJ+x/dPb6fW6QLnaqNp3NwHd3YhMILGPp+H1LTrQeBsU
6T+koFr+3gx7lCePjb7vnTAzrhxAjadCTx4Hy4zykZfZ+T/iTNbA4FKlQ8ziAg4q
TVhMl1ox8Oc0g3qqji2hxXRetTm9PHF1FYY2AwKb8szYVi3+EjnJoHZsNm6GRP8j
PUceHK6i9ZqzFaowxOO9lXDwl2TtWJCjczqBpjht0fm1qR9rLzougnQnIHqMHBgj
9GncMBloFzmXKVSyaH0KvsVkYSnc3qVze03nxm6j9F4KYTCMruJxWJhWim5xA+uN
brqq1ascXi2+NA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:59:25 2025 by rpki-client