Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: b0UcvLNQ5czgZvBCzC6n4tsqEG0WaCvzFSMD7xv3jAA=
Subject key identifier: F4:14:27:02:D9:4B:A7:C8:15:B6:B0:58:3F:FD:7D:BE:F7:C4:3F:D5
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 019675D4F09448222CCD58884B5DEF884469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0A03
Signing time: Sun 27 Apr 2025 06:00:11 +0000
Manifest this update: Sun 27 Apr 2025 06:00:11 +0000
Manifest next update: Mon 28 Apr 2025 06:00:11 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: ATPG9f4uzQAFXT/ZFra/o5IcVzI+t8Q3CNsrMNSScW8=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:f0:94:48:22:2c:cd:58:88:4b:5d:ef:88:44:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Apr 27 06:00:11 2025 GMT
Not After : Apr 28 06:00:11 2025 GMT
Subject: CN=f4142702d94ba7c815b6b0583ffd7dbef7c43fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:25:75:25:97:04:e5:a4:37:f5:ee:42:35:
77:5b:d9:c1:a3:f5:ab:d4:e4:8e:85:a0:2f:87:f1:
6b:8e:74:5e:17:52:93:b7:c0:8b:bd:25:cd:88:c7:
15:08:f5:82:2d:4f:16:66:21:f3:8d:34:01:76:51:
34:41:c5:ad:2e:f4:0c:3d:89:35:6d:2f:1d:9e:ba:
86:b6:db:dd:f6:13:17:9b:61:f8:ee:e8:1d:82:0c:
2f:d0:2b:30:19:c6:85:a9:6b:c3:dd:89:d9:06:97:
97:53:03:b7:d6:a9:83:14:70:77:a7:63:2c:43:c0:
67:10:b2:3c:f7:79:7e:99:b1:d7:44:53:72:38:33:
67:12:20:71:0f:43:bc:28:95:2c:55:c9:13:8f:a2:
ca:3d:ae:49:a2:b4:5e:f6:cb:4e:75:05:8f:14:70:
95:73:46:c0:fc:45:03:c5:eb:79:29:b1:f2:a1:df:
ec:c3:1e:3c:e9:4f:8b:4d:3c:8b:64:a3:fc:88:95:
a8:ad:6b:8d:92:cb:5f:dd:74:e0:97:aa:2f:42:38:
c1:2d:fa:95:6a:e8:3e:84:68:52:2b:94:bc:d1:f3:
77:fa:72:38:54:b2:46:97:fa:18:e3:7a:b6:1e:6e:
ce:30:10:56:8a:39:f3:22:23:15:e6:36:84:5c:7f:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:27:02:D9:4B:A7:C8:15:B6:B0:58:3F:FD:7D:BE:F7:C4:3F:D5
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:5a:03:7d:04:67:9e:cc:e9:7e:9d:87:8a:51:34:1b:b5:
56:ee:33:74:fe:c5:a1:74:1f:91:9f:21:cd:f6:e5:8b:42:ce:
f1:f7:ee:60:d6:f9:56:9e:1b:54:95:b4:56:49:d0:63:92:1c:
d8:1e:cb:73:42:92:c0:10:af:da:5f:d3:2b:f2:0b:55:7e:59:
d2:8b:68:1b:9b:ce:45:06:2c:c0:48:b2:99:64:93:a0:32:6e:
79:13:39:00:17:ae:94:e3:6b:fd:20:b3:03:77:f4:2e:4c:09:
51:ef:7f:50:8e:21:ed:8f:9d:60:6d:d0:88:d5:22:2f:b2:bf:
fc:c4:36:07:10:fa:c4:8c:a7:5b:6d:45:fe:7d:85:6b:9c:07:
27:c2:69:43:94:2d:3c:c3:3a:db:e1:53:a8:1c:ba:9d:16:66:
b9:f2:2e:9d:66:1b:e1:83:ca:ef:58:25:87:1a:95:ca:0d:ca:
f2:36:06:6a:0a:74:88:d6:ba:f0:03:50:ce:80:1b:87:50:96:
b9:30:88:ac:fb:a9:76:91:24:4f:d3:ca:a6:2d:97:65:41:21:
5c:f6:c9:f0:cb:ed:5c:e3:3c:d2:c2:73:c4:97:ae:ab:1f:2e:
b8:db:c3:85:98:9a:f5:03:33:e1:cc:22:96:62:9c:70:6c:6e:
32:69:07:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11PCUSCIszViIS13viERpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzU1NDQ5OGYzYzhkZDUzOWMyNWE5ZDg1MzQ4ZmFiODE3
ZWRhMjMwHhcNMjUwNDI3MDYwMDExWhcNMjUwNDI4MDYwMDExWjAzMTEwLwYDVQQD
EyhmNDE0MjcwMmQ5NGJhN2M4MTViNmIwNTgzZmZkN2RiZWY3YzQzZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GIldSWXBOWkN/XuQjV3W9nBo/Wr
1OSOhaAvh/FrjnReF1KTt8CLvSXNiMcVCPWCLU8WZiHzjTQBdlE0QcWtLvQMPYk1
bS8dnrqGttvd9hMXm2H47ugdggwv0CswGcaFqWvD3YnZBpeXUwO31qmDFHB3p2Ms
Q8BnELI893l+mbHXRFNyODNnEiBxD0O8KJUsVckTj6LKPa5JorRe9stOdQWPFHCV
c0bA/EUDxet5KbHyod/swx486U+LTTyLZKP8iJWorWuNkstf3XTgl6ovQjjBLfqV
aug+hGhSK5S80fN3+nI4VLJGl/oY43q2Hm7OMBBWijnzIiMV5jaEXH+WZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQUJwLZS6fIFbawWD/9fb73xD/VMB8GA1UdIwQY
MBaAFBs1VEmPPI3VOcJanYU0j6uBftojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83YjAzZDEtMGU2OC00NDRmLTkxODgt
NzZlNWNlYjAzZmQ5LzEvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy83YjAzZDEtMGU2OC00NDRmLTkxODgtNzZlNWNlYjAzZmQ5
LzEvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfxaA30E
Z57M6X6dh4pRNBu1Vu4zdP7FoXQfkZ8hzfbli0LO8ffuYNb5Vp4bVJW0VknQY5Ic
2B7Lc0KSwBCv2l/TK/ILVX5Z0otoG5vORQYswEiymWSToDJueRM5ABeulONr/SCz
A3f0LkwJUe9/UI4h7Y+dYG3QiNUiL7K//MQ2BxD6xIynW21F/n2Fa5wHJ8JpQ5Qt
PMM62+FTqBy6nRZmufIunWYb4YPK71glhxqVyg3K8jYGagp0iNa68ANQzoAbh1CW
uTCIrPupdpEkT9PKpi2XZUEhXPbJ8MvtXOM80sJzxJeuqx8uuNvDhZia9QMz4cwi
lmKccGxuMmkHPw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:41:19 2025 by rpki-client