Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: SV6KIFT/glToscgqnuJ2f6dtKJfC2QEMdLr3MdvqURY=
Subject key identifier: 7C:A7:97:D4:75:1E:BC:CC:82:45:DA:DF:6A:74:BE:B0:77:D9:9E:8A
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 01967567355CABEB703979C0E2E5E56FA344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 05CE
Signing time: Sun 27 Apr 2025 04:00:20 +0000
Manifest this update: Sun 27 Apr 2025 04:00:20 +0000
Manifest next update: Mon 28 Apr 2025 04:00:20 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: 9kWW6lPtkyeEWgbYQJi4az+jREtEwgSHwRAZ8UUI66Q=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:35:5c:ab:eb:70:39:79:c0:e2:e5:e5:6f:a3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Apr 27 04:00:20 2025 GMT
Not After : Apr 28 04:00:20 2025 GMT
Subject: CN=7ca797d4751ebccc8245dadf6a74beb077d99e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:3b:87:0f:02:43:f3:7c:b3:69:15:6d:14:
e7:20:dc:52:41:18:ed:38:2e:2b:0e:f9:ad:06:ea:
a9:a7:42:40:44:2b:18:8b:6a:09:5b:5e:22:03:6c:
3f:78:e3:5a:82:33:08:07:37:69:68:f3:20:cf:d5:
a2:19:f0:81:82:19:ce:23:14:6b:86:cc:bf:a8:52:
9c:6c:98:3f:a7:8c:7b:99:67:ee:f1:d8:c7:46:0b:
bf:7e:34:eb:05:f1:92:92:cc:db:9f:df:35:d1:68:
42:7a:62:30:63:7a:48:80:18:9c:31:78:32:83:ca:
68:7f:43:ec:54:52:f6:c1:5c:f9:08:ba:52:97:4d:
a3:67:12:56:5e:b1:3d:14:52:e9:bd:a4:3a:28:2b:
91:54:d7:23:bd:ac:26:a8:5f:09:64:4b:ad:26:9d:
cf:40:87:a1:d6:bd:77:f8:8d:5f:c6:9a:12:10:53:
9c:95:d5:47:15:fc:cf:df:a5:5f:a3:57:7f:4f:63:
7c:e7:ad:b8:d7:3c:4e:80:ed:28:4a:95:6f:20:6d:
e5:a8:64:2c:76:a8:0d:f7:f2:fe:d3:f4:fa:cb:e7:
aa:4b:13:23:49:b9:7c:87:41:b1:02:b0:93:3c:a9:
db:3c:8b:00:8d:da:ce:62:df:b9:a0:ef:b7:b8:da:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:97:D4:75:1E:BC:CC:82:45:DA:DF:6A:74:BE:B0:77:D9:9E:8A
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:72:c6:13:84:f5:68:3b:f4:70:77:72:83:3f:04:bb:4b:
d7:cb:b0:f2:f1:48:36:ac:8b:f4:7b:9e:ec:ff:cb:ae:7a:04:
8c:e5:7b:7f:e7:1f:0e:57:d4:bc:76:c6:e0:82:18:ed:07:32:
ca:c2:6e:67:ac:1d:45:2c:b9:22:fa:f3:1f:dd:bc:bc:40:bb:
83:00:7f:1d:ec:1b:5c:82:e0:73:07:57:49:e1:bb:7f:c4:76:
2a:74:1c:da:cf:75:ca:94:a9:53:86:ee:51:87:2d:cc:7c:4d:
ce:b2:ed:6a:25:eb:19:a6:f5:2a:06:df:07:10:59:ee:bd:0e:
bc:f3:00:f3:01:f0:b9:c6:ab:72:ed:01:0d:f1:cc:84:fc:20:
72:f6:87:4d:f2:2a:fa:6d:7e:d0:a2:b2:76:63:29:7b:dc:73:
81:e2:02:ba:8e:ea:a7:21:d1:94:da:a4:23:05:57:2b:18:fa:
ac:33:5c:ca:9f:48:f5:da:5e:32:70:a3:a3:f9:0c:41:08:5b:
a8:41:cb:8a:be:9d:aa:08:22:75:6e:4d:dd:a3:1f:6c:71:4b:
93:97:52:e2:23:1a:7f:54:56:a9:85:a1:39:85:07:48:8c:e2:
99:7a:ff:3d:2a:50:bd:93:c0:f8:e1:72:73:4f:6b:af:13:8e:
cb:fc:51:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1ZzVcq+twOXnA4uXlb6NEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx
MWY3MDkwHhcNMjUwNDI3MDQwMDIwWhcNMjUwNDI4MDQwMDIwWjAzMTEwLwYDVQQD
Eyg3Y2E3OTdkNDc1MWViY2NjODI0NWRhZGY2YTc0YmViMDc3ZDk5ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+U7hw8CQ/N8s2kVbRTnINxSQRjt
OC4rDvmtBuqpp0JARCsYi2oJW14iA2w/eONagjMIBzdpaPMgz9WiGfCBghnOIxRr
hsy/qFKcbJg/p4x7mWfu8djHRgu/fjTrBfGSkszbn9810WhCemIwY3pIgBicMXgy
g8pof0PsVFL2wVz5CLpSl02jZxJWXrE9FFLpvaQ6KCuRVNcjvawmqF8JZEutJp3P
QIeh1r13+I1fxpoSEFOcldVHFfzP36Vfo1d/T2N856241zxOgO0oSpVvIG3lqGQs
dqgN9/L+0/T6y+eqSxMjSbl8h0GxArCTPKnbPIsAjdrOYt+5oO+3uNqLwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHynl9R1HrzMgkXa32p0vrB32Z6KMB8GA1UdIwQY
MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt
MDdhMjhhZDNjYjY0LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0
LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgglyxhOE
9Wg79HB3coM/BLtL18uw8vFINqyL9Hue7P/LrnoEjOV7f+cfDlfUvHbG4IIY7Qcy
ysJuZ6wdRSy5IvrzH928vEC7gwB/HewbXILgcwdXSeG7f8R2KnQc2s91ypSpU4bu
UYctzHxNzrLtaiXrGab1KgbfBxBZ7r0OvPMA8wHwucarcu0BDfHMhPwgcvaHTfIq
+m1+0KKydmMpe9xzgeICuo7qpyHRlNqkIwVXKxj6rDNcyp9I9dpeMnCjo/kMQQhb
qEHLir6dqggidW5N3aMfbHFLk5dS4iMaf1RWqYWhOYUHSIzimXr/PSpQvZPA+OFy
c09rrxOOy/xRGg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:46 2025 by rpki-client