Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: 8PcEF4wfSgsqR5ePMdrwiYDN4e3chWS1V4/ZXUbyqAw=
Subject key identifier: 8D:F5:40:16:CD:10:4A:92:33:76:81:59:FE:F2:E3:08:D9:F9:1C:66
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 019683912B38FFD300B948C58723BD1B8B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0D9C
Signing time: Tue 29 Apr 2025 22:00:51 +0000
Manifest this update: Tue 29 Apr 2025 22:00:51 +0000
Manifest next update: Wed 30 Apr 2025 22:00:51 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: fdt2AmAKU2ZqcGiMyuKcKzzoH9iwIbNMlnSYe5nSjDM=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:2b:38:ff:d3:00:b9:48:c5:87:23:bd:1b:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Apr 29 22:00:51 2025 GMT
Not After : Apr 30 22:00:51 2025 GMT
Subject: CN=8df54016cd104a9233768159fef2e308d9f91c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:46:d0:6c:a5:72:a4:fa:41:0f:6d:89:47:
56:83:6c:26:e2:8f:16:07:32:2a:16:5c:d3:45:a6:
70:1f:ed:26:5f:a9:55:e4:d8:d1:47:1b:95:c2:af:
32:92:7e:c3:8e:92:8e:58:48:80:24:f8:0d:c1:6e:
ae:2f:11:d2:c1:c9:20:8d:28:85:3d:4f:ef:70:c7:
9a:3a:dd:b4:ec:18:77:77:40:ec:eb:d5:3e:39:3e:
9b:94:42:6f:26:5a:3d:d5:bd:db:4b:9c:82:35:1b:
05:5a:a7:9f:c1:e1:05:be:b2:30:ee:72:b1:0d:c5:
04:46:71:be:63:99:20:32:4b:72:47:bd:a0:b7:29:
36:ee:bf:69:bf:94:79:a5:28:0b:46:1e:0f:2a:78:
22:e3:04:a4:15:47:cf:53:7a:be:31:a0:b8:ed:b9:
2f:e2:b8:6a:e0:7c:3f:0d:2a:40:e8:69:5e:16:2c:
51:4a:7f:4b:de:dd:19:2f:de:b9:35:4a:db:3d:84:
89:c7:9d:81:36:9f:6d:34:31:b0:f2:32:e5:6b:3d:
e2:27:53:e5:bf:9e:22:1d:9f:d5:c9:23:02:72:d4:
81:c3:90:ee:6e:92:af:4e:c1:c8:34:c3:34:b3:b1:
a4:d8:f6:cb:b0:f3:6e:b5:ad:f0:7b:67:48:f5:c9:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:40:16:CD:10:4A:92:33:76:81:59:FE:F2:E3:08:D9:F9:1C:66
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2a:d6:04:e8:1c:67:c9:e5:a7:0d:aa:18:e5:9c:fe:09:86:
71:83:82:18:0f:b8:35:9d:6e:70:06:e7:36:b4:dc:ce:35:e0:
27:62:c7:89:38:a3:75:cf:cb:aa:c1:ad:f7:35:43:0a:f7:47:
05:8a:85:cb:c4:67:1c:ab:55:b2:3f:15:65:40:7e:57:37:9a:
c0:6f:f4:6b:fe:6b:9c:2f:c8:6b:c9:32:76:58:01:1f:f7:17:
1e:f9:b5:cd:51:64:55:01:0a:48:cf:44:15:70:cd:20:89:5f:
b4:d8:0d:31:07:f8:1d:33:6c:cc:7b:5c:7b:0d:56:ce:01:a5:
a0:a2:8a:44:d2:ed:7a:a5:12:8e:2d:1b:95:3e:bb:b0:a1:18:
a5:af:84:86:51:60:37:8b:c3:bf:d6:f8:d1:50:5c:10:19:6a:
4a:48:e5:ad:03:af:31:54:b6:0c:05:32:4b:90:1b:01:3b:5b:
39:a6:a9:b2:95:01:fb:36:8e:56:53:49:0a:4e:7b:8f:e4:66:
2c:eb:48:63:f8:b7:c0:f9:f8:30:e1:98:ed:76:cf:3e:a6:b2:
dc:a0:f3:c1:ff:04:3d:ef:d7:ea:cf:56:f7:bd:ac:50:83:1b:
01:71:9b:e1:fa:d9:8e:d1:5b:82:d2:70:5f:41:8c:b1:6c:c3:
82:ee:e1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkSs4/9MAuUjFhyO9G4s7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZGYxZmU1MjAzNTRkZDNiYjNlOTI2NGE3NmNmNTNlYjA3
ZGIwNzIwHhcNMjUwNDI5MjIwMDUxWhcNMjUwNDMwMjIwMDUxWjAzMTEwLwYDVQQD
Eyg4ZGY1NDAxNmNkMTA0YTkyMzM3NjgxNTlmZWYyZTMwOGQ5ZjkxYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq79G0GylcqT6QQ9tiUdWg2wm4o8W
BzIqFlzTRaZwH+0mX6lV5NjRRxuVwq8ykn7DjpKOWEiAJPgNwW6uLxHSwckgjSiF
PU/vcMeaOt207Bh3d0Ds69U+OT6blEJvJlo91b3bS5yCNRsFWqefweEFvrIw7nKx
DcUERnG+Y5kgMktyR72gtyk27r9pv5R5pSgLRh4PKngi4wSkFUfPU3q+MaC47bkv
4rhq4Hw/DSpA6GleFixRSn9L3t0ZL965NUrbPYSJx52BNp9tNDGw8jLlaz3iJ1Pl
v54iHZ/VySMCctSBw5DubpKvTsHINMM0s7Gk2PbLsPNuta3we2dI9clXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI31QBbNEEqSM3aBWf7y4wjZ+RxmMB8GA1UdIwQY
MBaAFIHfH+UgNU3Tuz6SZKds9T6wfbByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2Q4ZjVTQTFUZE83UHBKa3AyejFQckI5c0hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hZDk3NWMtMjAxMS00YjljLWFkM2Ut
NTNmMDdiMWY2MjFlLzEvZ2Q4ZjVTQTFUZE83UHBKa3AyejFQckI5c0hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hZDk3NWMtMjAxMS00YjljLWFkM2UtNTNmMDdiMWY2MjFl
LzEvZ2Q4ZjVTQTFUZE83UHBKa3AyejFQckI5c0hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyrWBOgc
Z8nlpw2qGOWc/gmGcYOCGA+4NZ1ucAbnNrTczjXgJ2LHiTijdc/LqsGt9zVDCvdH
BYqFy8RnHKtVsj8VZUB+VzeawG/0a/5rnC/Ia8kydlgBH/cXHvm1zVFkVQEKSM9E
FXDNIIlftNgNMQf4HTNszHtcew1WzgGloKKKRNLteqUSji0blT67sKEYpa+EhlFg
N4vDv9b40VBcEBlqSkjlrQOvMVS2DAUyS5AbATtbOaapspUB+zaOVlNJCk57j+Rm
LOtIY/i3wPn4MOGY7XbPPqay3KDzwf8EPe/X6s9W972sUIMbAXGb4frZjtFbgtJw
X0GMsWzDgu7hEw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:21:13 2025 by rpki-client