Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: 2K2MJbNGdtyfHUFZxWKFH4MFbYL0NBad+Me8C3/2chM=
Subject key identifier: EF:93:E0:C9:58:56:24:8C:7D:FE:ED:9E:D1:0F:3E:A1:6D:F1:04:DE
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 01967C45004D44093E07D1C45C5C99257FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 085D
Signing time: Mon 28 Apr 2025 12:00:18 +0000
Manifest this update: Mon 28 Apr 2025 12:00:18 +0000
Manifest next update: Tue 29 Apr 2025 12:00:18 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: bHDTO8Od+VoCQzfqZMUb+OFtxkYswDUlscLdL5a4JR4=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:00:4d:44:09:3e:07:d1:c4:5c:5c:99:25:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Apr 28 12:00:18 2025 GMT
Not After : Apr 29 12:00:18 2025 GMT
Subject: CN=ef93e0c95856248c7dfeed9ed10f3ea16df104de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:ee:eb:f1:12:d3:e3:d9:8c:30:3b:94:d1:
bc:4a:ef:7d:e8:df:99:2b:bd:c8:09:00:80:9d:00:
ce:ec:30:1f:b7:51:c3:35:19:ff:7f:f5:e4:e8:81:
79:4e:f6:e7:6f:29:dc:a1:f4:dc:95:26:f1:39:c0:
aa:99:6e:eb:2e:2a:b1:64:6c:6f:cd:1f:ef:3f:8c:
8e:58:6a:03:b4:ae:88:22:e2:36:6a:82:95:7a:16:
35:16:87:4f:a0:f8:62:e1:85:ba:e9:1f:e2:97:63:
d8:a3:7a:1a:e4:52:88:8f:ff:90:c5:d2:12:73:1b:
2a:e7:95:1f:9c:23:c6:32:2c:49:36:5f:d9:68:1d:
26:3d:bf:4d:25:1e:78:e5:cd:f9:5a:d2:5c:ed:f3:
e9:5f:9a:8a:a1:de:81:b8:58:99:72:d1:f1:85:01:
c4:ed:1b:d9:86:b0:87:30:2f:3e:30:78:f9:5a:24:
5e:70:ef:e8:33:80:e5:ce:2d:f7:ab:de:ad:ed:bb:
63:6d:7e:c1:87:03:85:8a:35:e3:df:6d:ea:b9:3a:
9b:9f:8f:b3:dc:b4:49:ad:85:f0:48:b8:be:73:f6:
67:7f:3b:b6:d4:89:05:b7:84:41:06:e0:2f:cd:04:
88:8f:ee:ef:68:03:58:9b:65:2f:d3:56:c7:f4:f1:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:93:E0:C9:58:56:24:8C:7D:FE:ED:9E:D1:0F:3E:A1:6D:F1:04:DE
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:42:a5:bb:29:21:43:b4:0f:d3:36:b9:78:2c:55:5e:dd:
83:48:f2:8a:27:90:ae:a9:0a:fb:5f:fd:34:7e:3a:b4:7d:61:
b9:f7:a8:93:28:0d:de:94:d4:25:47:18:59:2d:9e:4a:db:5a:
de:be:4b:21:65:96:bf:58:3e:3b:ef:3b:67:c5:71:aa:bf:72:
3d:39:92:93:35:4f:1e:f1:c5:9a:ba:98:9d:b9:3a:28:4c:eb:
62:3e:11:52:04:b5:95:9c:a0:f8:db:1b:07:78:e0:b5:85:6b:
a4:b1:43:44:30:fe:6d:fc:6b:94:80:e4:53:0f:d9:ee:d5:db:
33:da:4b:df:2c:ca:4c:67:3f:38:3f:1b:7b:01:f8:76:51:8f:
01:b1:12:9b:44:9c:ea:18:c7:06:cc:18:1f:e2:ac:f1:eb:a4:
9d:08:ae:1c:5b:cc:3f:cf:a0:4f:ab:c5:ad:1d:d1:eb:e8:96:
bc:70:c5:60:f1:f5:a2:cc:21:a6:4d:aa:99:d8:ec:a9:67:fc:
2f:5b:64:70:c5:b6:34:4d:a9:3c:fd:81:86:a0:10:91:84:02:
48:dd:7c:6e:93:c4:8d:6e:86:69:4e:ad:8a:cf:72:86:6f:54:
c4:f8:ba:73:35:55:36:09:07:a1:8d:6c:86:ea:83:7e:0e:a1:
e4:9f:f0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RQBNRAk+B9HEXFyZJX/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMDc2YzRlYjgyMTk4Mjg5YjEzZmY1Mjg1OTM5MDdkMzIx
NGQ2NDgwHhcNMjUwNDI4MTIwMDE4WhcNMjUwNDI5MTIwMDE4WjAzMTEwLwYDVQQD
EyhlZjkzZTBjOTU4NTYyNDhjN2RmZWVkOWVkMTBmM2VhMTZkZjEwNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36vu6/ES0+PZjDA7lNG8Su996N+Z
K73ICQCAnQDO7DAft1HDNRn/f/Xk6IF5TvbnbyncofTclSbxOcCqmW7rLiqxZGxv
zR/vP4yOWGoDtK6IIuI2aoKVehY1FodPoPhi4YW66R/il2PYo3oa5FKIj/+QxdIS
cxsq55UfnCPGMixJNl/ZaB0mPb9NJR545c35WtJc7fPpX5qKod6BuFiZctHxhQHE
7RvZhrCHMC8+MHj5WiRecO/oM4Dlzi33q96t7btjbX7BhwOFijXj323quTqbn4+z
3LRJrYXwSLi+c/Znfzu21IkFt4RBBuAvzQSIj+7vaANYm2Uv01bH9PFsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+T4MlYViSMff7tntEPPqFt8QTeMB8GA1UdIwQY
MBaAFP4HbE64IZgomxP/UoWTkH0yFNZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmIt
MzY3YTQxMWY5ZWM2LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmItMzY3YTQxMWY5ZWM2
LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3FCpbsp
IUO0D9M2uXgsVV7dg0jyiieQrqkK+1/9NH46tH1hufeokygN3pTUJUcYWS2eStta
3r5LIWWWv1g+O+87Z8Vxqr9yPTmSkzVPHvHFmrqYnbk6KEzrYj4RUgS1lZyg+Nsb
B3jgtYVrpLFDRDD+bfxrlIDkUw/Z7tXbM9pL3yzKTGc/OD8bewH4dlGPAbESm0Sc
6hjHBswYH+Ks8euknQiuHFvMP8+gT6vFrR3R6+iWvHDFYPH1oswhpk2qmdjsqWf8
L1tkcMW2NE2pPP2BhqAQkYQCSN18bpPEjW6GaU6tis9yhm9UxPi6czVVNgkHoY1s
huqDfg6h5J/wCA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:35 2025 by rpki-client