Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: 5aiP5ogLO4OJ6Nq1yB8eo6jiY4BOxVISj1Fqz+lXNEY=
Subject key identifier: 40:C4:57:48:FB:3A:0C:4F:84:AD:18:68:6C:08:AA:1E:7F:A3:B5:09
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01967FEB0146838975C1B22A5D237AE8A591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 05:00:29 +0000
Manifest this update: Tue 29 Apr 2025 05:00:29 +0000
Manifest next update: Wed 30 Apr 2025 05:00:29 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: N3B66QG+ruVmx13GiHl7oVfWpu7aT6swBc+ji67Tjvs=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:01:46:83:89:75:c1:b2:2a:5d:23:7a:e8:a5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Apr 29 05:00:29 2025 GMT
Not After : Apr 30 05:00:29 2025 GMT
Subject: CN=40c45748fb3a0c4f84ad18686c08aa1e7fa3b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:e4:23:f5:83:1b:23:52:b1:16:be:f6:37:
93:bc:81:6f:6a:25:39:24:d5:ff:49:c3:96:ed:15:
74:d4:9e:24:dc:7f:6b:c1:a6:2b:12:61:3f:5c:f3:
8c:f3:c5:0e:3b:20:d6:bb:d5:5f:9d:fd:3b:0d:06:
7f:5a:38:52:bf:38:5f:90:f7:ec:03:e6:2a:20:36:
c9:9c:f5:fd:6f:95:b7:42:1d:52:dd:b7:01:d9:5c:
b5:b3:a4:7f:3f:9d:d7:fb:c7:38:c3:bf:4f:51:ae:
5c:c8:32:2a:eb:1a:44:22:5b:32:67:92:62:41:f5:
dd:cd:bf:eb:47:25:5f:11:e4:10:7f:71:5c:07:43:
bc:81:07:9f:73:39:c1:33:c9:bd:db:99:7e:03:26:
c2:9f:f2:91:24:a3:7a:c2:84:c1:5d:e9:f2:6d:8e:
cd:16:df:2f:a4:f2:d8:de:db:7e:cb:52:9b:fc:22:
e5:8e:bb:12:48:7b:e3:59:f1:85:61:08:80:d6:66:
d5:b6:67:95:9c:b8:a2:13:1c:60:55:a0:c3:0b:65:
42:07:7a:3e:fb:07:8c:9a:2e:b7:71:4c:13:6a:57:
65:f3:4e:f4:36:5d:0d:9c:bd:0d:fa:57:01:c1:4a:
03:f7:fc:7e:61:44:98:39:85:31:d5:11:b5:fe:83:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:57:48:FB:3A:0C:4F:84:AD:18:68:6C:08:AA:1E:7F:A3:B5:09
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:8c:ae:7f:73:55:47:6c:c7:74:e2:98:68:89:06:ab:8d:
07:e6:22:2a:95:e6:03:cf:ca:09:7f:1b:b2:27:27:d1:e4:db:
1a:42:74:4d:0a:f9:eb:c1:7c:80:b3:fe:16:ae:0b:4c:e2:52:
f4:fe:a1:61:83:3f:42:33:8e:5c:1e:b2:46:c6:72:f3:9c:90:
c3:fa:a4:67:4d:4d:19:96:c6:b3:90:bc:3e:2b:3c:1a:f3:6a:
a3:5e:07:51:95:4c:4a:89:6d:f8:19:2a:8b:da:d0:92:55:38:
d6:85:2f:fa:2d:14:18:47:93:62:e6:01:ee:0a:23:cc:6a:3c:
01:f8:6c:9e:3f:ee:ec:99:00:13:bf:08:fc:1f:7c:33:b9:1b:
31:d5:d2:d8:fb:53:22:79:6c:ba:eb:fb:e4:fa:eb:6f:c5:85:
46:6e:4d:ae:5e:6a:58:a5:f8:36:27:cf:d6:dc:45:a7:37:b0:
1d:45:11:dd:e8:06:3f:95:83:f6:c3:5b:1f:98:43:0b:f9:95:
3e:bc:e4:61:7c:91:9d:f2:61:1a:44:26:23:06:cd:ad:4e:fa:
d9:b1:00:39:e4:37:77:c1:82:5f:2b:3b:26:15:67:ba:fb:bd:
2b:59:c0:38:20:7f:f8:ef:eb:a5:d8:74:9a:c9:49:34:ef:f8:
35:70:f0:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6wFGg4l1wbIqXSN66KWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjUwNDI5MDUwMDI5WhcNMjUwNDMwMDUwMDI5WjAzMTEwLwYDVQQD
Eyg0MGM0NTc0OGZiM2EwYzRmODRhZDE4Njg2YzA4YWExZTdmYTNiNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZfkI/WDGyNSsRa+9jeTvIFvaiU5
JNX/ScOW7RV01J4k3H9rwaYrEmE/XPOM88UOOyDWu9Vfnf07DQZ/WjhSvzhfkPfs
A+YqIDbJnPX9b5W3Qh1S3bcB2Vy1s6R/P53X+8c4w79PUa5cyDIq6xpEIlsyZ5Ji
QfXdzb/rRyVfEeQQf3FcB0O8gQefcznBM8m925l+AybCn/KRJKN6woTBXenybY7N
Ft8vpPLY3tt+y1Kb/CLljrsSSHvjWfGFYQiA1mbVtmeVnLiiExxgVaDDC2VCB3o+
+weMmi63cUwTaldl8070Nl0NnL0N+lcBwUoD9/x+YUSYOYUx1RG1/oOlLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDEV0j7OgxPhK0YaGwIqh5/o7UJMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEu2Mrn9z
VUdsx3TimGiJBquNB+YiKpXmA8/KCX8bsicn0eTbGkJ0TQr568F8gLP+Fq4LTOJS
9P6hYYM/QjOOXB6yRsZy85yQw/qkZ01NGZbGs5C8Pis8GvNqo14HUZVMSolt+Bkq
i9rQklU41oUv+i0UGEeTYuYB7gojzGo8Afhsnj/u7JkAE78I/B98M7kbMdXS2PtT
Inlsuuv75Prrb8WFRm5Nrl5qWKX4NifP1txFpzewHUUR3egGP5WD9sNbH5hDC/mV
PrzkYXyRnfJhGkQmIwbNrU762bEAOeQ3d8GCXys7JhVnuvu9K1nAOCB/+O/rpdh0
mslJNO/4NXDwFg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:46 2025 by rpki-client