Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: eNbriL3Es5ZzQe/awsmtKLQy20w8kPlm8II66cuITxg=
Subject key identifier: 10:4B:28:AB:C0:3E:E1:B8:49:43:99:A6:AE:3C:F2:A0:C5:2B:58:A6
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 01967CB3060D0EEBC8F3C608E1E5B359B2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 06BE
Signing time: Mon 28 Apr 2025 14:00:29 +0000
Manifest this update: Mon 28 Apr 2025 14:00:29 +0000
Manifest next update: Tue 29 Apr 2025 14:00:29 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: 2rMD32wgNNIUoa06U1YAiff3ZqyLAVSRBh/MKJ7POYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:06:0d:0e:eb:c8:f3:c6:08:e1:e5:b3:59:b2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Apr 28 14:00:29 2025 GMT
Not After : Apr 29 14:00:29 2025 GMT
Subject: CN=104b28abc03ee1b8494399a6ae3cf2a0c52b58a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:44:6d:ca:e2:54:45:63:2d:7a:74:b4:d7:
98:e0:72:69:be:01:21:5d:cc:88:d2:1d:49:d5:bf:
5a:79:d5:5c:85:ee:32:fb:0d:b8:d8:db:f8:89:5a:
65:33:b5:d7:2f:c5:b8:67:a9:31:c4:f5:ea:2d:e2:
5b:cf:df:67:3e:9b:5a:98:98:4c:39:ba:53:c4:6b:
6b:77:c2:fa:7c:e8:95:17:e0:25:38:38:13:d2:76:
c6:1b:f1:a2:d2:95:d5:49:b7:1f:64:38:bd:91:77:
e5:35:a1:d6:23:5f:da:2b:7b:07:a4:96:f4:d5:e1:
f2:ee:a3:a0:27:43:bf:04:a7:68:b3:ee:45:68:ab:
d2:80:48:6a:00:66:5b:ad:e2:08:35:13:1e:e8:68:
90:b7:42:83:04:a4:91:82:8a:8d:d6:d4:50:1b:f5:
82:87:6c:1a:b4:cc:d8:6d:99:27:4b:2e:25:12:d9:
8e:04:77:cc:c0:2e:15:16:df:0e:e9:f7:5d:d6:d6:
9a:93:55:5d:6f:c5:ea:02:c2:f6:d8:51:14:30:38:
2c:87:0a:8d:15:a3:c6:f9:33:b2:3f:9c:bb:db:ef:
43:b6:7a:c7:77:13:9a:b0:64:a7:be:77:ae:cd:f6:
5c:ff:ee:9a:7b:a5:72:05:94:c3:21:04:cc:62:4a:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:28:AB:C0:3E:E1:B8:49:43:99:A6:AE:3C:F2:A0:C5:2B:58:A6
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d5:ba:c3:40:6b:e9:79:f2:1d:1f:d8:ab:07:68:8f:1a:56:
cb:ef:80:1d:a2:96:f2:db:1f:5e:d3:4c:e3:df:ff:57:b7:75:
cc:7e:36:fe:cb:b6:e7:cd:df:98:28:b3:60:33:47:c6:82:20:
e8:69:c3:3d:72:dc:75:72:07:f7:62:b9:2f:e8:b2:08:8e:e6:
0e:49:ca:23:42:09:7f:a4:f9:0b:f1:01:03:d8:b5:c1:75:73:
dd:dd:2b:91:b6:23:55:37:49:af:f6:bd:b7:3c:44:7c:15:2a:
1f:84:b2:e3:a4:96:c2:83:c9:25:01:cf:83:79:1e:2d:8e:e7:
d6:cb:91:31:10:a9:26:d4:f8:9e:c3:46:15:0e:25:39:ae:fa:
c5:72:c2:64:8c:8c:56:fa:ec:6a:fc:d4:ae:87:60:29:2e:af:
30:06:53:d4:5a:b1:85:e4:93:11:ef:e1:61:b0:eb:d1:8b:b6:
92:3e:16:1b:be:a5:ad:f9:20:d3:46:6d:9c:aa:65:c1:e7:47:
f1:5e:da:20:6b:4c:37:15:2c:4f:56:06:10:fc:ff:dc:41:d0:
6f:30:ea:62:c1:72:2f:d7:a4:57:6f:d7:f5:50:7f:fb:63:e5:
49:47:45:78:42:98:08:24:27:47:16:22:5a:ed:b3:ff:a2:af:
82:ef:93:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8swYNDuvI88YI4eWzWbL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjhmZDc0OTNhMmZlMDU2MjIyZGI0MWVkNjkzMDgzYjUw
ZWNjZmIwHhcNMjUwNDI4MTQwMDI5WhcNMjUwNDI5MTQwMDI5WjAzMTEwLwYDVQQD
EygxMDRiMjhhYmMwM2VlMWI4NDk0Mzk5YTZhZTNjZjJhMGM1MmI1OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSJEbcriVEVjLXp0tNeY4HJpvgEh
XcyI0h1J1b9aedVche4y+w242Nv4iVplM7XXL8W4Z6kxxPXqLeJbz99nPptamJhM
ObpTxGtrd8L6fOiVF+AlODgT0nbGG/Gi0pXVSbcfZDi9kXflNaHWI1/aK3sHpJb0
1eHy7qOgJ0O/BKdos+5FaKvSgEhqAGZbreIINRMe6GiQt0KDBKSRgoqN1tRQG/WC
h2watMzYbZknSy4lEtmOBHfMwC4VFt8O6fdd1taak1Vdb8XqAsL22FEUMDgshwqN
FaPG+TOyP5y72+9DtnrHdxOasGSnvneuzfZc/+6ae6VyBZTDIQTMYkpyKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBLKKvAPuG4SUOZpq488qDFK1imMB8GA1UdIwQY
MBaAFIP4/XSTov4FYiLbQe1pMIO1Dsz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAt
YTA0M2MyMzBmMzBkLzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAtYTA0M2MyMzBmMzBk
LzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9W6w0Br
6XnyHR/YqwdojxpWy++AHaKW8tsfXtNM49//V7d1zH42/su2583fmCizYDNHxoIg
6GnDPXLcdXIH92K5L+iyCI7mDknKI0IJf6T5C/EBA9i1wXVz3d0rkbYjVTdJr/a9
tzxEfBUqH4Sy46SWwoPJJQHPg3keLY7n1suRMRCpJtT4nsNGFQ4lOa76xXLCZIyM
VvrsavzUrodgKS6vMAZT1FqxheSTEe/hYbDr0Yu2kj4WG76lrfkg00ZtnKplwedH
8V7aIGtMNxUsT1YGEPz/3EHQbzDqYsFyL9ekV2/X9VB/+2PlSUdFeEKYCCQnRxYi
Wu2z/6Kvgu+TJw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:04:16 2025 by rpki-client