Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: t/GeqFxcu/dZIVGxaD98VjGdtCqwucFrmVFi5125nPs=
Subject key identifier: D9:7B:A4:BB:1D:21:72:2C:50:8C:25:14:9F:0C:E7:CC:76:14:FE:05
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 01976DAB1DE175CFA057BEC2A3EB1D3F9095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 011D
Signing time: Sat 14 Jun 2025 09:00:20 +0000
Manifest this update: Sat 14 Jun 2025 09:00:20 +0000
Manifest next update: Sun 15 Jun 2025 09:00:20 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: CgRbNFSWml+IXIbZOHuLJCUigATv0r0S56OP1VzAgVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:1d:e1:75:cf:a0:57:be:c2:a3:eb:1d:3f:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Jun 14 09:00:20 2025 GMT
Not After : Jun 15 09:00:20 2025 GMT
Subject: CN=d97ba4bb1d21722c508c25149f0ce7cc7614fe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:4a:35:2b:04:d1:cd:9b:35:07:c5:e6:3b:
c0:b5:33:83:8e:f5:97:2d:d5:21:c6:33:b1:fd:ee:
cb:42:d1:60:7a:ea:47:d7:5c:b2:03:3b:a8:6a:95:
fb:8c:fb:1f:47:8a:00:92:a7:ca:21:d7:a9:34:a7:
84:7a:c9:7e:d1:ac:9f:dc:97:5e:97:50:1b:03:5c:
b7:ed:6a:6c:71:7b:c7:14:4b:26:94:8e:32:d9:b9:
fb:d3:5c:76:39:1d:97:9b:cd:e2:8d:ec:b4:9e:69:
be:e5:62:78:8c:37:ca:51:51:e6:db:9a:d2:cb:0d:
60:4f:ed:89:ef:cc:46:c6:7d:03:3e:bd:1b:b9:94:
8d:e9:f7:c1:f4:e8:1e:af:9b:dd:02:63:4c:52:82:
43:40:03:77:80:68:83:1e:b7:47:b6:b6:04:48:d7:
18:6e:4f:06:c3:3f:da:f1:4b:12:1e:1e:da:2d:7a:
1f:0f:ac:68:92:c4:09:f1:1e:47:19:d6:4b:e1:d8:
10:25:0f:e8:58:86:d4:b5:3c:41:f2:b9:3b:ff:41:
15:fd:ac:71:13:ad:72:ee:a0:f1:96:68:03:67:f6:
09:4b:dd:5d:7d:11:91:3f:0a:3e:6b:5c:e7:fa:72:
31:37:92:63:19:8b:ea:6c:d1:93:37:f8:3f:c9:ef:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:A4:BB:1D:21:72:2C:50:8C:25:14:9F:0C:E7:CC:76:14:FE:05
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:46:b2:c3:41:1c:ca:b9:26:50:20:35:a5:92:cd:e6:3e:
8b:bd:a4:03:c7:5e:2b:d3:a4:83:f1:a4:7c:87:e6:b3:06:b5:
25:26:9b:86:50:9a:24:c0:07:3b:d4:48:66:1a:45:62:61:91:
13:49:e1:26:e6:1d:bd:fd:b0:48:07:64:82:6e:c8:d7:d2:80:
12:89:f7:b1:81:6a:82:8d:bb:9c:fd:f4:a8:27:76:07:5d:8f:
1f:ee:a0:28:03:f6:5b:bb:e5:49:b6:4f:35:04:00:3c:dd:8e:
ee:43:d0:b4:d0:06:47:43:3b:63:6f:f2:21:0e:c9:bc:b4:18:
0b:7c:7e:ed:a7:1a:82:e3:c8:95:18:c5:cd:ca:d0:2b:6b:8d:
fe:e8:03:22:b8:5d:c3:7e:ee:23:bf:79:73:12:67:9a:79:ea:
27:3c:97:f3:b7:9f:56:dd:00:c1:9c:fe:60:39:fe:d4:2c:b1:
0a:6a:cf:39:44:3e:57:1d:2c:5b:6b:4b:c8:59:b2:d3:8c:b8:
ff:18:20:b5:1a:05:a8:d3:c8:78:7e:0a:2a:9b:e5:ae:c2:a3:
96:3f:15:76:68:a4:a4:12:ae:93:0a:cd:6c:a2:02:92:e1:03:
db:db:12:9e:c5:f6:5c:62:60:e4:33:9f:a0:d0:ec:77:bb:97:
7e:b6:c3:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqx3hdc+gV77Co+sdP5CVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm
YWZlMGMwHhcNMjUwNjE0MDkwMDIwWhcNMjUwNjE1MDkwMDIwWjAzMTEwLwYDVQQD
EyhkOTdiYTRiYjFkMjE3MjJjNTA4YzI1MTQ5ZjBjZTdjYzc2MTRmZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGhKNSsE0c2bNQfF5jvAtTODjvWX
LdUhxjOx/e7LQtFgeupH11yyAzuoapX7jPsfR4oAkqfKIdepNKeEesl+0ayf3Jde
l1AbA1y37WpscXvHFEsmlI4y2bn701x2OR2Xm83ijey0nmm+5WJ4jDfKUVHm25rS
yw1gT+2J78xGxn0DPr0buZSN6ffB9Oger5vdAmNMUoJDQAN3gGiDHrdHtrYESNcY
bk8Gwz/a8UsSHh7aLXofD6xoksQJ8R5HGdZL4dgQJQ/oWIbUtTxB8rk7/0EV/axx
E61y7qDxlmgDZ/YJS91dfRGRPwo+a1zn+nIxN5JjGYvqbNGTN/g/ye8d5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl7pLsdIXIsUIwlFJ8M58x2FP4FMB8GA1UdIwQY
MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt
ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0
LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnRGssNB
HMq5JlAgNaWSzeY+i72kA8deK9Okg/GkfIfmswa1JSabhlCaJMAHO9RIZhpFYmGR
E0nhJuYdvf2wSAdkgm7I19KAEon3sYFqgo27nP30qCd2B12PH+6gKAP2W7vlSbZP
NQQAPN2O7kPQtNAGR0M7Y2/yIQ7JvLQYC3x+7acaguPIlRjFzcrQK2uN/ugDIrhd
w37uI795cxJnmnnqJzyX87efVt0AwZz+YDn+1CyxCmrPOUQ+Vx0sW2tLyFmy04y4
/xggtRoFqNPIeH4KKpvlrsKjlj8VdmikpBKukwrNbKICkuED29sSnsX2XGJg5DOf
oNDsd7uXfrbD3A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:32 2025 by rpki-client