Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: YnBb1GIsUDWQD1FHM6lwyDkkDK1efXVZlH6rLEEsGx0=
Subject key identifier: AD:60:C4:BB:4F:DD:30:3D:A1:1A:31:49:62:51:49:99:14:8D:7F:98
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019683C7944DA2E271DACD5D24327ABDE929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0EAF
Signing time: Tue 29 Apr 2025 23:00:16 +0000
Manifest this update: Tue 29 Apr 2025 23:00:16 +0000
Manifest next update: Wed 30 Apr 2025 23:00:16 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: QkRFD6Appclgg3XKiUqA5RdFh4sHnc94H9KEUixIJrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:94:4d:a2:e2:71:da:cd:5d:24:32:7a:bd:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Apr 29 23:00:16 2025 GMT
Not After : Apr 30 23:00:16 2025 GMT
Subject: CN=ad60c4bb4fdd303da11a314962514999148d7f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:21:9a:09:19:37:eb:b2:c9:5c:2c:b1:54:
ce:7e:6e:72:1e:4f:57:d0:bb:32:21:7f:5e:05:06:
21:bd:6c:a0:f6:32:ad:5d:b6:21:92:54:1a:6d:8a:
b4:cc:bf:b9:de:03:78:8f:fa:bf:ed:5a:07:5f:12:
86:91:5c:bd:2b:ef:ff:7c:06:56:b2:67:37:42:80:
3b:e5:54:4d:4d:b5:19:32:de:df:9d:52:20:ef:36:
e5:ed:26:a9:03:f8:e7:8d:d0:c5:16:a9:01:e3:bb:
0d:25:99:52:33:93:0d:82:31:81:c7:7a:aa:a2:8e:
cc:e8:fa:83:26:95:96:d8:73:e5:7a:f5:2e:dd:a4:
bb:c8:b7:6c:98:26:c7:f3:54:f0:cf:ec:56:51:4a:
ea:2b:c8:96:9f:66:52:3d:2e:4b:69:3a:e2:fd:51:
c8:5d:f5:86:57:b5:ab:27:73:95:76:80:4e:e0:6e:
6a:ae:f5:e9:98:f0:1e:1e:49:89:f1:ac:50:86:e7:
64:d6:04:49:a7:b1:1e:3e:53:72:4a:7b:6f:45:c7:
de:8f:6b:da:19:48:e5:65:4c:08:2d:42:7d:ab:8a:
d7:8f:02:f3:93:16:17:56:97:05:0a:07:94:e8:ed:
8c:70:02:0f:f5:3b:67:8e:ae:63:58:72:54:37:5a:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:C4:BB:4F:DD:30:3D:A1:1A:31:49:62:51:49:99:14:8D:7F:98
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:98:04:ca:2a:59:72:b2:1d:7d:6b:d4:36:e1:86:76:39:9b:
88:f3:a3:eb:48:bb:a3:ab:9a:4e:2f:98:4c:15:fd:77:b2:1f:
b5:34:fc:3d:c8:38:a4:51:fc:82:09:06:96:d8:ef:de:2f:d2:
39:ef:6e:6f:87:51:4f:b5:e7:9b:af:5f:ea:16:9d:15:24:91:
67:5f:30:4a:d7:10:b3:17:d8:63:5b:8b:fd:bf:59:b5:1b:7d:
6e:3f:bf:e7:ed:1c:40:55:44:a0:db:9c:74:05:cb:85:22:3a:
f9:4c:28:0f:e6:e3:a9:83:d3:ab:46:45:32:26:20:21:af:e3:
fe:1c:11:e7:41:52:c6:aa:67:14:93:f8:97:de:4e:cd:65:fd:
85:1a:af:97:64:d9:aa:12:b7:b7:cb:37:75:ae:59:4b:96:fa:
66:70:ee:e5:82:95:0f:8e:9b:ad:cc:ab:d0:17:25:8b:54:4f:
b9:fd:04:12:dd:32:81:e6:7d:66:dc:2f:d9:d9:d1:63:b0:de:
e7:c4:ff:dc:50:82:89:e0:c5:f8:24:1d:ff:41:d6:72:0b:97:
3f:c2:8c:32:73:e2:47:57:8d:c1:f2:41:05:9d:b4:53:3e:60:
11:89:ae:6a:9e:bf:a2:e9:1e:fd:e2:6a:7d:30:dc:0e:2a:96:
8e:8a:e1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx5RNouJx2s1dJDJ6vekpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDJhMTQxM2IwY2NlMzRlM2Y3ZmJmMGU3ZjM4ZTBhMzcw
YTYyNjcwHhcNMjUwNDI5MjMwMDE2WhcNMjUwNDMwMjMwMDE2WjAzMTEwLwYDVQQD
EyhhZDYwYzRiYjRmZGQzMDNkYTExYTMxNDk2MjUxNDk5OTE0OGQ3Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm08hmgkZN+uyyVwssVTOfm5yHk9X
0LsyIX9eBQYhvWyg9jKtXbYhklQabYq0zL+53gN4j/q/7VoHXxKGkVy9K+//fAZW
smc3QoA75VRNTbUZMt7fnVIg7zbl7SapA/jnjdDFFqkB47sNJZlSM5MNgjGBx3qq
oo7M6PqDJpWW2HPlevUu3aS7yLdsmCbH81Twz+xWUUrqK8iWn2ZSPS5LaTri/VHI
XfWGV7WrJ3OVdoBO4G5qrvXpmPAeHkmJ8axQhudk1gRJp7EePlNySntvRcfej2va
GUjlZUwILUJ9q4rXjwLzkxYXVpcFCgeU6O2McAIP9Ttnjq5jWHJUN1ofAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1gxLtP3TA9oRoxSWJRSZkUjX+YMB8GA1UdIwQY
MBaAFINCoUE7DM404/f78Ofzjgo3CmJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUt
NjQ4YjkyMjc2MDE0LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUtNjQ4YjkyMjc2MDE0
LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZgEyipZ
crIdfWvUNuGGdjmbiPOj60i7o6uaTi+YTBX9d7IftTT8Pcg4pFH8ggkGltjv3i/S
Oe9ub4dRT7Xnm69f6hadFSSRZ18wStcQsxfYY1uL/b9ZtRt9bj+/5+0cQFVEoNuc
dAXLhSI6+UwoD+bjqYPTq0ZFMiYgIa/j/hwR50FSxqpnFJP4l95OzWX9hRqvl2TZ
qhK3t8s3da5ZS5b6ZnDu5YKVD46brcyr0Bcli1RPuf0EEt0ygeZ9Ztwv2dnRY7De
58T/3FCCieDF+CQd/0HWcguXP8KMMnPiR1eNwfJBBZ20Uz5gEYmuap6/ouke/eJq
fTDcDiqWjorhdA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:03:13 2025 by rpki-client