Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: b6Mz2X2CYdC8cxGskfYPJD5XdFZeWd3V61vrAaZDaOE=
Subject key identifier: 26:D3:E9:13:8E:92:A9:1C:1C:2A:3B:5D:A8:BB:14:90:5E:F6:6A:06
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 0196857FD1AE47C5F7F5541FAFF00504BD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0C9B
Signing time: Wed 30 Apr 2025 07:01:08 +0000
Manifest this update: Wed 30 Apr 2025 07:01:08 +0000
Manifest next update: Thu 01 May 2025 07:01:08 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: cbE6WBv2U/Tk5HSU27hpoCioO1WVKtYRmwdbLJGPbdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:d1:ae:47:c5:f7:f5:54:1f:af:f0:05:04:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Apr 30 07:01:08 2025 GMT
Not After : May 1 07:01:08 2025 GMT
Subject: CN=26d3e9138e92a91c1c2a3b5da8bb14905ef66a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:13:a5:1f:de:d0:1c:8e:e5:fa:4a:9b:15:
3d:50:2e:6d:a5:99:c9:c8:8d:8a:e1:96:a7:46:68:
ad:01:9e:59:78:2b:be:75:96:85:c0:80:36:60:2c:
48:6f:12:3e:99:e6:0d:6b:42:53:cd:e8:61:4f:91:
d0:76:c0:43:c4:f8:bd:25:67:c0:90:5e:b5:82:13:
c3:a3:41:d0:c2:1f:83:1c:aa:f3:62:ce:ff:ff:74:
fb:f3:62:6b:88:9d:ff:f7:b2:9b:94:2c:5d:2b:b1:
d9:56:85:12:a9:b8:62:44:28:28:40:1d:fa:1b:23:
48:07:fa:71:68:30:90:9c:97:48:a3:a2:31:36:13:
40:55:42:97:86:b3:82:cc:20:1e:0b:05:0a:be:59:
ca:e9:43:be:74:ee:23:1a:e0:ef:45:8e:4f:36:2c:
95:ff:e0:e1:31:e6:9c:1e:f1:76:2f:d4:f7:32:4b:
22:50:23:94:24:8a:3d:16:d6:da:c8:c6:6c:dd:9d:
09:40:5e:dc:65:a6:e6:0a:cd:7d:ca:08:75:96:e5:
28:72:18:95:90:0b:2b:8f:cb:9e:55:3c:22:2a:8c:
c5:30:85:eb:27:91:3e:e8:7f:26:c4:b7:38:de:b5:
3e:41:d3:39:ea:39:30:c9:fc:b7:12:a7:65:f1:e8:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:E9:13:8E:92:A9:1C:1C:2A:3B:5D:A8:BB:14:90:5E:F6:6A:06
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f0:25:ca:69:a1:91:68:cd:f2:59:fd:27:2d:30:f4:e8:80:
67:80:e4:fc:85:83:ed:38:66:fa:65:63:ab:d4:9e:f7:7f:7a:
31:42:50:8c:5f:2c:5e:24:46:ca:d0:25:4e:54:b0:a9:c8:d2:
aa:03:6b:5b:53:ef:f1:bb:3a:e0:87:4e:a8:ed:60:03:6c:cc:
d7:88:db:a2:e1:66:eb:af:f3:0b:29:b8:66:b8:8d:ba:a5:df:
e5:2c:93:77:e5:06:bd:05:5f:d2:98:34:9b:d4:0c:39:8f:6c:
3b:b1:c3:fa:5b:78:70:3d:5f:1d:ff:e2:95:37:ef:17:3f:61:
22:fc:c3:09:f7:83:64:89:61:79:20:52:88:4e:83:7a:de:a1:
90:78:7c:32:73:67:8c:ed:f4:78:24:c5:85:17:ab:dc:4a:08:
84:08:b7:32:2d:b2:02:73:ba:49:83:77:d3:02:43:62:f4:9a:
1e:9d:17:8e:a1:95:77:9e:96:f0:0b:0b:95:f7:cd:80:7b:7f:
50:a7:a3:26:1f:be:79:55:19:9a:54:dc:59:6d:de:88:1f:de:
6d:d3:00:65:c4:eb:84:37:86:4e:10:37:83:48:11:9d:56:df:
96:c9:97:8f:db:3d:fa:be:23:80:d0:31:0a:6b:27:47:5d:a6:
cd:29:b2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFf9GuR8X39VQfr/AFBL2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0
ZTdkYjYwHhcNMjUwNDMwMDcwMTA4WhcNMjUwNTAxMDcwMTA4WjAzMTEwLwYDVQQD
EygyNmQzZTkxMzhlOTJhOTFjMWMyYTNiNWRhOGJiMTQ5MDVlZjY2YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ETpR/e0ByO5fpKmxU9UC5tpZnJ
yI2K4ZanRmitAZ5ZeCu+dZaFwIA2YCxIbxI+meYNa0JTzehhT5HQdsBDxPi9JWfA
kF61ghPDo0HQwh+DHKrzYs7//3T782JriJ3/97KblCxdK7HZVoUSqbhiRCgoQB36
GyNIB/pxaDCQnJdIo6IxNhNAVUKXhrOCzCAeCwUKvlnK6UO+dO4jGuDvRY5PNiyV
/+DhMeacHvF2L9T3MksiUCOUJIo9FtbayMZs3Z0JQF7cZabmCs19ygh1luUochiV
kAsrj8ueVTwiKozFMIXrJ5E+6H8mxLc43rU+QdM56jkwyfy3Eqdl8ehkawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbT6ROOkqkcHCo7Xai7FJBe9moGMB8GA1UdIwQY
MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt
MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi
LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufAlymmh
kWjN8ln9Jy0w9OiAZ4Dk/IWD7Thm+mVjq9Se9396MUJQjF8sXiRGytAlTlSwqcjS
qgNrW1Pv8bs64IdOqO1gA2zM14jbouFm66/zCym4ZriNuqXf5SyTd+UGvQVf0pg0
m9QMOY9sO7HD+lt4cD1fHf/ilTfvFz9hIvzDCfeDZIlheSBSiE6Det6hkHh8MnNn
jO30eCTFhRer3EoIhAi3Mi2yAnO6SYN30wJDYvSaHp0XjqGVd56W8AsLlffNgHt/
UKejJh++eVUZmlTcWW3eiB/ebdMAZcTrhDeGThA3g0gRnVbflsmXj9s9+r4jgNAx
CmsnR12mzSmy8g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:13 2025 by rpki-client