Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: WxH3SaEiub8qW3V/TzuCml60DPwMtj/5L7qSIvN1YzQ=
Subject key identifier: 1C:1E:F7:CB:52:6D:7F:80:1E:5C:95:92:0F:26:24:F0:A0:85:57:6E
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019683FF0AA3B0ADFF5DCE15DFCA5729426D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0C09
Signing time: Wed 30 Apr 2025 00:00:51 +0000
Manifest this update: Wed 30 Apr 2025 00:00:51 +0000
Manifest next update: Thu 01 May 2025 00:00:51 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: dhWeQAQWkdmghIVNow6e4uzBH66sv8tdeBhUWKS+FGg=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:0a:a3:b0:ad:ff:5d:ce:15:df:ca:57:29:42:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Apr 30 00:00:51 2025 GMT
Not After : May 1 00:00:51 2025 GMT
Subject: CN=1c1ef7cb526d7f801e5c95920f2624f0a085576e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:65:84:16:b8:f5:d5:76:d0:ea:61:5e:1b:
c4:85:73:b8:ff:cd:eb:10:49:5b:b3:55:a6:b6:23:
80:4d:20:df:3c:7e:ca:97:1a:ff:5a:38:0d:47:35:
82:01:5b:02:af:48:a3:4a:f9:01:19:a6:2d:7e:38:
a4:c3:3d:cc:cf:2e:65:cc:93:f4:09:c8:3e:e1:fb:
4d:94:41:3f:27:c9:ed:32:4b:65:d6:13:a7:cb:6e:
60:83:e2:eb:bd:03:be:5f:6b:52:31:20:e2:2c:7e:
34:88:c3:8e:b5:20:d8:34:df:68:83:39:e0:9d:e3:
7a:b1:ee:ff:9b:a8:07:b0:74:4e:a8:a6:55:4d:63:
b6:de:70:f7:6a:37:b4:e8:9f:68:d1:22:14:5e:fb:
e3:f9:83:9c:88:b9:3e:bc:69:08:1a:29:5f:6c:0e:
79:9d:a5:e1:d6:48:57:08:9e:90:01:72:4b:8a:2a:
d3:00:4a:0c:6c:85:c5:f3:5b:96:5e:75:60:93:0a:
e0:cb:8b:b1:56:0c:37:86:4c:74:d6:8c:aa:99:91:
f5:cc:69:df:73:eb:5b:a7:22:ae:e1:47:8e:1f:87:
c9:cf:a8:12:fe:d4:16:ce:d9:90:fc:3d:53:76:c7:
bc:1a:80:70:40:c0:d6:53:6b:7b:11:00:2b:cc:36:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:F7:CB:52:6D:7F:80:1E:5C:95:92:0F:26:24:F0:A0:85:57:6E
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:37:1a:22:14:67:93:43:f4:bf:c0:7e:01:0f:22:32:47:
86:74:d0:bb:3e:ce:5a:42:1d:ca:12:25:4f:a4:c2:2b:b6:fd:
01:c0:ac:d9:b0:86:2b:da:af:dd:65:94:fd:e8:91:b4:52:2a:
69:2c:0e:55:3c:38:59:a3:71:b7:0e:e0:23:c4:a8:b2:5c:9b:
3f:91:38:89:dc:24:a0:7a:99:a0:f0:a4:7a:3c:7f:74:7c:1a:
00:c8:c7:eb:cb:ba:47:b6:c4:d1:5d:5e:a5:ec:6b:1f:d2:7a:
db:ee:1f:52:4b:16:5f:78:2a:8f:64:70:c6:2e:bc:f6:c1:72:
40:c6:bb:a5:6e:0e:11:cf:73:99:8f:71:6f:97:d0:a3:a1:d1:
92:bd:3f:49:0c:b5:a0:35:75:7e:55:61:5a:3b:ec:5c:b5:7d:
4c:d1:40:cb:00:ed:6f:8d:45:36:e0:43:41:95:fb:d3:fa:00:
a2:e4:1c:55:42:02:46:de:24:a0:66:2b:54:dd:f5:31:96:0c:
a6:89:9f:90:f7:d1:f2:83:c0:80:0a:43:13:5f:63:97:e6:17:
94:82:47:37:1b:63:fb:2a:ee:07:c3:8d:c7:25:a7:28:79:52:
82:38:d4:49:61:b4:0a:e5:4d:5a:17:53:05:2d:82:80:82:89:
3c:8d:ac:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/wqjsK3/Xc4V38pXKUJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwN2JkNjJmZDhkMzUzMDhkYmM4YjFmZDVmMTcyN2FmNTdh
YmQyMjAwHhcNMjUwNDMwMDAwMDUxWhcNMjUwNTAxMDAwMDUxWjAzMTEwLwYDVQQD
EygxYzFlZjdjYjUyNmQ3ZjgwMWU1Yzk1OTIwZjI2MjRmMGEwODU1NzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX1lhBa49dV20OphXhvEhXO4/83r
EElbs1WmtiOATSDfPH7Klxr/WjgNRzWCAVsCr0ijSvkBGaYtfjikwz3Mzy5lzJP0
Ccg+4ftNlEE/J8ntMktl1hOny25gg+LrvQO+X2tSMSDiLH40iMOOtSDYNN9ogzng
neN6se7/m6gHsHROqKZVTWO23nD3aje06J9o0SIUXvvj+YOciLk+vGkIGilfbA55
naXh1khXCJ6QAXJLiirTAEoMbIXF81uWXnVgkwrgy4uxVgw3hkx01oyqmZH1zGnf
c+tbpyKu4UeOH4fJz6gS/tQWztmQ/D1Tdse8GoBwQMDWU2t7EQArzDZUAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwe98tSbX+AHlyVkg8mJPCghVduMB8GA1UdIwQY
MBaAFIB71i/Y01MI28ix/V8XJ69Xq9IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDkt
MDhmYWRlYjJkYmU3LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDktMDhmYWRlYjJkYmU3
LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdw3GiIU
Z5ND9L/AfgEPIjJHhnTQuz7OWkIdyhIlT6TCK7b9AcCs2bCGK9qv3WWU/eiRtFIq
aSwOVTw4WaNxtw7gI8SoslybP5E4idwkoHqZoPCkejx/dHwaAMjH68u6R7bE0V1e
pexrH9J62+4fUksWX3gqj2Rwxi689sFyQMa7pW4OEc9zmY9xb5fQo6HRkr0/SQy1
oDV1flVhWjvsXLV9TNFAywDtb41FNuBDQZX70/oAouQcVUICRt4koGYrVN31MZYM
pomfkPfR8oPAgApDE19jl+YXlIJHNxtj+yruB8ONxyWnKHlSgjjUSWG0CuVNWhdT
BS2CgIKJPI2sOA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:13 2025 by rpki-client