Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier: +kmwthWgzO2rR+nWXcKYOdEdK/Z9VljxSDvjfhp3e4o=
Subject key identifier: A1:AB:82:D0:0E:CF:52:77:FB:3C:1E:7E:61:3E:A7:20:83:CA:E0:57
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 019673B0627C29CA20F0B6C70BF15B1DE10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number: 0421
Signing time: Sat 26 Apr 2025 20:01:01 +0000
Manifest this update: Sat 26 Apr 2025 20:01:01 +0000
Manifest next update: Sun 27 Apr 2025 20:01:01 +0000
Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: 4CUoAmHoO6feOpo4jzyKMBFOhcUDxjAHg0r3EpULhpI=)
2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:62:7c:29:ca:20:f0:b6:c7:0b:f1:5b:1d:e1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Apr 26 20:01:01 2025 GMT
Not After : Apr 27 20:01:01 2025 GMT
Subject: CN=a1ab82d00ecf5277fb3c1e7e613ea72083cae057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:a0:ef:73:a4:d3:d9:3e:73:31:5a:4f:ac:
28:2c:7d:d3:33:65:2b:52:6d:9f:54:95:79:82:32:
af:b9:6a:c1:a6:d6:25:b8:e8:59:bf:4e:c8:2d:f3:
e1:ca:1d:73:25:c5:68:c7:c4:92:dc:2f:65:65:47:
08:ea:92:67:51:08:98:d1:4b:c3:76:be:0b:58:f1:
d4:b4:56:5a:46:1c:0e:8c:91:98:be:42:00:7f:a6:
11:b8:46:51:30:61:09:1b:dd:9e:4a:cf:5b:e0:ec:
39:cb:50:9e:ee:f5:17:58:fb:a1:e8:44:11:b1:fb:
62:83:a8:29:30:ce:e8:50:fd:99:7e:88:f8:67:79:
9d:06:0e:44:ca:7a:c2:48:52:0e:2e:9d:53:bf:d2:
be:4a:eb:8e:72:d2:cb:07:71:e1:97:c1:4f:43:88:
0b:d2:08:67:09:24:ba:72:36:62:d7:f2:21:15:e9:
e8:3d:b0:a4:85:25:b9:f8:75:a4:f1:0e:d9:22:e8:
be:ba:ef:ad:f2:ab:ca:08:a5:fc:e0:93:23:f9:0a:
2e:44:4b:9b:b8:d0:ce:3c:49:50:95:b2:d8:86:03:
fd:ba:a8:93:a3:42:61:22:93:d1:9d:6d:98:58:5d:
ae:90:6d:c6:ed:7d:6a:33:6a:e4:cd:ca:b6:30:52:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:82:D0:0E:CF:52:77:FB:3C:1E:7E:61:3E:A7:20:83:CA:E0:57
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:15:c1:ac:15:dd:91:76:f2:a3:58:65:c1:df:08:c0:08:
c3:d3:44:c4:bf:c5:77:c1:81:88:9a:5d:9f:df:29:c8:eb:b0:
17:46:3d:a4:87:31:f3:c1:fe:ac:01:9d:82:90:5e:b8:8b:8c:
2d:e9:95:ef:a3:e2:e9:0b:a2:b4:0a:b9:ba:1c:a7:90:ac:ac:
ef:ea:ad:62:f5:e5:5b:02:f7:11:6f:7b:13:10:1a:e4:9f:5d:
32:9a:09:ed:7f:64:49:0f:de:3a:5e:81:44:26:2a:30:b7:60:
e7:76:28:e2:cf:4a:11:c2:e8:ba:81:25:8d:be:e0:41:5a:bd:
d3:07:37:77:3a:ea:0e:ff:69:59:41:f8:83:45:35:76:8e:d8:
20:38:50:15:46:38:6f:89:bc:a4:6e:87:03:ce:8f:f6:0a:e2:
86:21:4a:3d:28:84:87:44:32:e0:09:18:9e:4b:53:85:50:1f:
e7:9f:6c:4f:91:a2:6a:d9:0e:94:de:57:d9:f4:37:2e:fb:73:
87:f3:a0:7f:10:da:35:7e:06:7d:e8:eb:1a:41:a2:e3:96:4b:
e4:3a:19:3a:47:47:c4:c8:99:9c:b0:02:de:b4:94:ad:86:96:
be:6e:ae:f2:73:2a:22:f2:22:a5:24:ce:10:52:a9:e0:b5:68:
72:d7:15:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzsGJ8Kcog8LbHC/FbHeEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjc1N2RlOGZmY2RkMWZkOWFmNzhiNjQ1NTM2YmRhN2M3
NmMzMGUwHhcNMjUwNDI2MjAwMTAxWhcNMjUwNDI3MjAwMTAxWjAzMTEwLwYDVQQD
EyhhMWFiODJkMDBlY2Y1Mjc3ZmIzYzFlN2U2MTNlYTcyMDgzY2FlMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEOg73Ok09k+czFaT6woLH3TM2Ur
Um2fVJV5gjKvuWrBptYluOhZv07ILfPhyh1zJcVox8SS3C9lZUcI6pJnUQiY0UvD
dr4LWPHUtFZaRhwOjJGYvkIAf6YRuEZRMGEJG92eSs9b4Ow5y1Ce7vUXWPuh6EQR
sftig6gpMM7oUP2Zfoj4Z3mdBg5EynrCSFIOLp1Tv9K+SuuOctLLB3Hhl8FPQ4gL
0ghnCSS6cjZi1/IhFenoPbCkhSW5+HWk8Q7ZIui+uu+t8qvKCKX84JMj+QouREub
uNDOPElQlbLYhgP9uqiTo0JhIpPRnW2YWF2ukG3G7X1qM2rkzcq2MFKXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGrgtAOz1J3+zwefmE+pyCDyuBXMB8GA1UdIwQY
MBaAFIBnV96P/N0f2a94tkVTa9p8dsMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUt
OTYyMjA2YjE2ODZiLzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUtOTYyMjA2YjE2ODZi
LzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUewVwawV
3ZF28qNYZcHfCMAIw9NExL/Fd8GBiJpdn98pyOuwF0Y9pIcx88H+rAGdgpBeuIuM
LemV76Pi6QuitAq5uhynkKys7+qtYvXlWwL3EW97ExAa5J9dMpoJ7X9kSQ/eOl6B
RCYqMLdg53Yo4s9KEcLouoEljb7gQVq90wc3dzrqDv9pWUH4g0U1do7YIDhQFUY4
b4m8pG6HA86P9grihiFKPSiEh0Qy4AkYnktThVAf559sT5GiatkOlN5X2fQ3Lvtz
h/OgfxDaNX4GfejrGkGi45ZL5DoZOkdHxMiZnLAC3rSUrYaWvm6u8nMqIvIipSTO
EFKp4LVoctcVyg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:45:28 2025 by rpki-client