Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: G+cZfr1fR3Fx4Gly8I3NkZ3TmYafdxw0VQpDTgRUtd0=
Subject key identifier: 11:25:2C:79:5D:CF:3D:44:93:0D:94:9B:10:3A:14:8F:83:67:A5:13
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 0196748B979EE2C8DD07813F429DF9AAFC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0214
Signing time: Sun 27 Apr 2025 00:00:27 +0000
Manifest this update: Sun 27 Apr 2025 00:00:27 +0000
Manifest next update: Mon 28 Apr 2025 00:00:27 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: L4hahCqqHdA4Dpso6zq966LpA7sTTyv3E6tQCUDsyBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:97:9e:e2:c8:dd:07:81:3f:42:9d:f9:aa:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Apr 27 00:00:27 2025 GMT
Not After : Apr 28 00:00:27 2025 GMT
Subject: CN=11252c795dcf3d44930d949b103a148f8367a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:25:9b:a7:4d:5d:19:de:70:27:da:4a:6d:
7e:42:45:a7:a2:15:f0:b9:8a:4b:de:c8:50:1a:f5:
8d:40:44:82:62:9e:9e:6d:6f:7d:d8:95:9f:1e:6b:
00:c8:33:94:25:50:a8:68:1b:7c:26:99:43:09:7b:
a5:d1:35:11:8f:9e:96:d4:51:4a:2d:4e:de:22:f6:
cd:43:63:47:61:60:0c:08:6e:96:a2:db:3a:3b:e4:
7c:e2:68:5b:36:d2:1c:23:78:51:b5:f3:15:c6:6e:
ee:2f:52:37:7a:5d:96:c0:c3:3f:ab:c3:5b:8f:f1:
f7:47:37:fd:7d:9f:e3:11:24:77:2c:0d:88:2e:ce:
7c:69:a2:24:c7:75:2c:92:c4:02:52:55:7f:df:96:
77:87:98:a3:60:21:9d:db:6f:12:4b:9c:bf:c6:a5:
27:93:a6:f3:28:58:48:0c:ff:5c:f3:c2:7a:92:1b:
d8:18:3b:ea:5f:0a:e5:23:3a:a1:0d:0a:3c:4e:cf:
93:8d:c9:63:99:e4:ea:ec:0a:d1:31:d8:8f:d6:e1:
81:04:82:99:48:b9:7d:38:90:db:68:d0:8e:5a:1e:
5c:10:61:38:58:c2:0c:36:98:f3:8a:cd:fa:ee:52:
b3:66:bb:57:08:03:fe:59:5f:61:c9:5b:0c:a5:64:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:2C:79:5D:CF:3D:44:93:0D:94:9B:10:3A:14:8F:83:67:A5:13
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:56:9a:a3:99:43:58:84:b4:24:e3:22:87:95:ae:23:35:
b3:71:a3:5d:58:ce:e3:fb:ef:10:71:e3:46:ca:89:68:c5:b2:
be:fd:fd:bb:94:22:b8:ab:02:f5:ce:2f:2a:0b:57:b5:d7:61:
23:6f:d4:c4:b8:b9:eb:38:04:88:d4:15:d8:6f:0d:ed:23:37:
43:41:b4:fe:2c:e6:fe:cc:a5:2d:5a:c5:cb:51:bf:69:53:f4:
f1:f9:91:ab:5f:9d:09:23:08:94:c6:08:c2:ba:aa:bb:d5:ad:
a6:f0:06:99:b7:bd:12:1c:c5:0b:8e:03:d9:b2:28:a5:a8:48:
39:28:e1:06:ed:9a:1b:76:37:2c:99:52:75:ea:b6:7d:59:1c:
0a:4e:6f:99:46:b9:38:4c:d7:71:05:86:79:54:68:fd:e8:9d:
fe:c2:8b:11:d3:c3:c3:3e:75:90:de:51:83:35:1f:1e:56:39:
74:5f:99:81:a5:d4:71:af:59:21:4d:b4:c5:83:ac:6e:df:f4:
3a:cc:a7:e3:7f:e3:00:52:49:a6:5a:70:97:9f:15:17:76:af:
70:b8:a6:eb:98:6d:d2:f0:fa:f7:18:c8:bf:a8:00:b1:69:a6:
92:35:9b:ed:09:52:1a:9b:71:9e:61:88:58:f9:ae:56:1c:ca:
31:da:61:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i5ee4sjdB4E/Qp35qvwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2U1MzVkYjdlMWI3MTVhZTM0ZTlmMWRkYmQ4NDM2OTJm
NmZlZmEwHhcNMjUwNDI3MDAwMDI3WhcNMjUwNDI4MDAwMDI3WjAzMTEwLwYDVQQD
EygxMTI1MmM3OTVkY2YzZDQ0OTMwZDk0OWIxMDNhMTQ4ZjgzNjdhNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqElm6dNXRnecCfaSm1+QkWnohXw
uYpL3shQGvWNQESCYp6ebW992JWfHmsAyDOUJVCoaBt8JplDCXul0TURj56W1FFK
LU7eIvbNQ2NHYWAMCG6Wots6O+R84mhbNtIcI3hRtfMVxm7uL1I3el2WwMM/q8Nb
j/H3Rzf9fZ/jESR3LA2ILs58aaIkx3UsksQCUlV/35Z3h5ijYCGd228SS5y/xqUn
k6bzKFhIDP9c88J6khvYGDvqXwrlIzqhDQo8Ts+TjcljmeTq7ArRMdiP1uGBBIKZ
SLl9OJDbaNCOWh5cEGE4WMIMNpjzis367lKzZrtXCAP+WV9hyVsMpWRUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBElLHldzz1Ekw2UmxA6FI+DZ6UTMB8GA1UdIwQY
MBaAFIM+U1234bcVrjTp8d29hDaS9v76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82YmRhYzctNjJkNC00MDMzLWI5YWQt
MzEwMzRjMzU2ZmEzLzEvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82YmRhYzctNjJkNC00MDMzLWI5YWQtMzEwMzRjMzU2ZmEz
LzEvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHFWmqOZ
Q1iEtCTjIoeVriM1s3GjXVjO4/vvEHHjRsqJaMWyvv39u5QiuKsC9c4vKgtXtddh
I2/UxLi56zgEiNQV2G8N7SM3Q0G0/izm/sylLVrFy1G/aVP08fmRq1+dCSMIlMYI
wrqqu9WtpvAGmbe9EhzFC44D2bIopahIOSjhBu2aG3Y3LJlSdeq2fVkcCk5vmUa5
OEzXcQWGeVRo/eid/sKLEdPDwz51kN5RgzUfHlY5dF+ZgaXUca9ZIU20xYOsbt/0
Osyn43/jAFJJplpwl58VF3avcLim65ht0vD69xjIv6gAsWmmkjWb7QlSGptxnmGI
WPmuVhzKMdphcw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:33:50 2025 by rpki-client