Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: gKsgN+N+XLOiiWXgQvpwCOiQiykLpWr0awfmNRIrIM4=
Subject key identifier: DE:39:02:7B:84:8E:7D:B8:A1:88:9E:73:45:73:D1:61:08:C6:57:F7
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 0196827E13C8EB90FD377C44F8B2E62BF6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 034C
Signing time: Tue 29 Apr 2025 17:00:22 +0000
Manifest this update: Tue 29 Apr 2025 17:00:22 +0000
Manifest next update: Wed 30 Apr 2025 17:00:22 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: cZjAZh7+XrOkIbVk8lGRmmna3bUQAoAlYoxlR6Uxy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:13:c8:eb:90:fd:37:7c:44:f8:b2:e6:2b:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Apr 29 17:00:22 2025 GMT
Not After : Apr 30 17:00:22 2025 GMT
Subject: CN=de39027b848e7db8a1889e734573d16108c657f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:33:fc:4f:aa:39:27:15:6a:d4:e3:53:18:
08:50:79:6f:dc:b4:9e:3b:54:fa:a7:73:77:af:0c:
fc:fe:08:b9:02:24:99:54:3d:9b:2c:5c:33:d9:f4:
f3:e4:9d:87:c8:49:b5:dd:cc:2e:b6:3b:d9:16:e5:
d8:15:6c:27:b2:d2:aa:ea:33:c8:d3:6a:56:d6:b6:
fe:55:61:e7:7e:b9:c8:aa:41:f9:a3:bd:da:e2:3b:
23:61:52:59:12:5b:4c:d4:75:28:55:4d:05:5b:10:
cc:d6:e6:6d:be:66:4d:77:a5:c8:bb:17:8d:f1:45:
12:62:2c:9c:7b:59:bc:2f:86:18:40:45:fa:e9:eb:
fe:a9:6e:a6:a4:89:2a:5b:31:f9:1f:0f:27:97:3d:
3b:11:40:cf:b8:a8:ea:f3:ee:39:ef:1e:6c:5b:f2:
c0:2a:de:49:ed:13:9c:d3:b4:03:fa:d7:04:2d:77:
16:22:4c:2d:fd:71:3d:e8:06:f6:67:2e:94:44:81:
57:f7:1e:71:57:24:4d:5b:9d:e9:63:7d:8f:ea:71:
5f:a2:7c:4c:2e:59:e3:6a:64:c3:42:72:5b:90:5b:
85:7d:9f:68:9a:94:3f:52:99:9b:85:e3:b2:ac:bf:
8e:28:cf:99:e5:9a:1f:02:43:ce:97:c6:56:5f:23:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:02:7B:84:8E:7D:B8:A1:88:9E:73:45:73:D1:61:08:C6:57:F7
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:b9:dd:eb:d4:cc:e0:c8:0a:32:f2:50:46:f1:90:7b:41:
58:07:c7:77:bc:8d:96:be:1f:76:2c:76:1c:c4:0b:f5:4d:30:
c4:e7:b3:bc:bb:21:b0:55:79:bf:1a:d0:92:11:03:2a:29:74:
ac:00:da:90:9f:1d:19:22:54:06:7b:61:fe:0a:f3:25:1c:45:
ec:90:41:ef:ff:13:3f:21:b7:23:d9:2d:37:c7:95:e9:c4:27:
3c:1e:87:8d:c8:b5:67:df:44:c7:fa:8d:28:04:74:ca:f1:c1:
a1:df:d8:76:85:e5:2c:1d:56:ee:19:91:c5:23:dc:a5:bd:ca:
0b:9f:96:ed:79:03:ea:99:37:d6:69:e3:76:10:23:e4:71:ef:
17:a6:4f:0c:be:95:42:e4:55:87:b0:6a:ee:b9:a4:6e:5b:92:
da:5e:75:2f:1d:c0:fd:c4:81:5a:d9:d5:9e:fa:37:e9:8b:81:
98:ed:db:7d:86:66:a7:63:db:6f:3f:f6:c2:8e:47:d4:96:b8:
70:4b:75:d7:64:b6:88:09:9c:a5:e3:f0:fd:43:38:b4:5a:b7:
72:63:4c:d5:f8:98:d0:83:14:ce:9f:25:69:ed:cf:df:a1:9b:
67:f1:5c:74:a5:77:38:1f:93:82:79:93:5f:53:c9:13:6a:66:
36:3e:64:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfhPI65D9N3xE+LLmK/bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDRlYTQ0ZGU5ZTU5YTE3YzkyMmY2ZTA0MTcxM2JiYzRh
ZjBhMzMwHhcNMjUwNDI5MTcwMDIyWhcNMjUwNDMwMTcwMDIyWjAzMTEwLwYDVQQD
EyhkZTM5MDI3Yjg0OGU3ZGI4YTE4ODllNzM0NTczZDE2MTA4YzY1N2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9sz/E+qOScVatTjUxgIUHlv3LSe
O1T6p3N3rwz8/gi5AiSZVD2bLFwz2fTz5J2HyEm13cwutjvZFuXYFWwnstKq6jPI
02pW1rb+VWHnfrnIqkH5o73a4jsjYVJZEltM1HUoVU0FWxDM1uZtvmZNd6XIuxeN
8UUSYiyce1m8L4YYQEX66ev+qW6mpIkqWzH5Hw8nlz07EUDPuKjq8+457x5sW/LA
Kt5J7ROc07QD+tcELXcWIkwt/XE96Ab2Zy6URIFX9x5xVyRNW53pY32P6nFfonxM
LlnjamTDQnJbkFuFfZ9ompQ/UpmbheOyrL+OKM+Z5ZofAkPOl8ZWXyPpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN45AnuEjn24oYiec0Vz0WEIxlf3MB8GA1UdIwQY
MBaAFIHU6kTenlmhfJIvbgQXE7vErwozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUt
MDMzMDQyZTg4ZDE4LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUtMDMzMDQyZTg4ZDE4
LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4253evU
zODICjLyUEbxkHtBWAfHd7yNlr4fdix2HMQL9U0wxOezvLshsFV5vxrQkhEDKil0
rADakJ8dGSJUBnth/grzJRxF7JBB7/8TPyG3I9ktN8eV6cQnPB6Hjci1Z99Ex/qN
KAR0yvHBod/YdoXlLB1W7hmRxSPcpb3KC5+W7XkD6pk31mnjdhAj5HHvF6ZPDL6V
QuRVh7Bq7rmkbluS2l51Lx3A/cSBWtnVnvo36YuBmO3bfYZmp2Pbbz/2wo5H1Ja4
cEt112S2iAmcpePw/UM4tFq3cmNM1fiY0IMUzp8lae3P36GbZ/FcdKV3OB+TgnmT
X1PJE2pmNj5k6A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:31:18 2025 by rpki-client