Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: gcxpl3rq6GLZ1Gan9ZleQZaSYrFNQUOdOwylK7qJas0=
Subject key identifier: F1:BC:76:BA:13:02:47:AA:01:B4:B8:30:50:1F:E4:00:10:BD:5B:AD
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 0196778CABD731137240902A640A66BC679B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 0420
Signing time: Sun 27 Apr 2025 14:00:29 +0000
Manifest this update: Sun 27 Apr 2025 14:00:29 +0000
Manifest next update: Mon 28 Apr 2025 14:00:29 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: zgyfm5vuXVNE9MX8QkIkYKY1daoUVqakKmaiF+hJbvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:ab:d7:31:13:72:40:90:2a:64:0a:66:bc:67:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Apr 27 14:00:29 2025 GMT
Not After : Apr 28 14:00:29 2025 GMT
Subject: CN=f1bc76ba130247aa01b4b830501fe40010bd5bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:29:9c:7d:04:97:79:34:ad:79:2a:58:24:
f6:0c:d6:6b:80:d6:61:ae:21:e5:18:4d:56:4f:f3:
4b:a3:3f:1d:e1:ae:9d:08:d0:87:7d:70:99:09:bf:
f2:16:04:fb:90:98:62:ab:b5:bd:ec:41:73:47:d5:
b9:dd:f6:91:28:88:6e:fc:32:2c:12:b5:9b:8a:28:
57:f6:ec:f9:9a:a4:19:e6:f1:30:5c:23:67:2b:e1:
8f:3d:e4:8a:dd:34:59:96:1d:58:10:df:09:32:ad:
45:24:e3:11:c2:65:3c:64:4d:4c:54:2e:24:32:c1:
60:f0:da:b1:68:21:18:98:bf:9f:7c:93:ba:72:bf:
0d:e5:85:0e:fb:25:9f:05:8a:75:f0:f9:06:fb:ff:
00:52:17:3a:aa:72:97:5f:be:da:29:28:57:bd:79:
82:ed:31:ef:02:5e:e6:ce:5b:47:44:72:f9:68:81:
40:d1:de:86:2a:d2:f9:cb:65:46:26:84:51:54:e9:
9a:e6:d8:2f:44:85:66:37:9b:bb:44:58:18:6b:8c:
4e:a6:c5:f2:aa:09:6c:87:e7:ee:82:86:d5:61:69:
38:af:28:77:de:93:86:bf:81:4b:0d:b8:ad:24:29:
fd:1d:f8:89:3f:b4:73:c9:04:dd:44:89:ad:17:ab:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:76:BA:13:02:47:AA:01:B4:B8:30:50:1F:E4:00:10:BD:5B:AD
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1d:91:6d:30:23:08:42:3c:7b:ec:77:f4:2e:9a:af:ea:ed:
0d:ff:3a:6a:76:bf:72:09:6d:eb:e7:38:c8:74:9d:80:bc:79:
53:3e:3a:5b:29:50:30:56:a3:87:46:3e:8d:bc:a6:77:57:5e:
0f:6c:71:67:b2:a9:b4:8b:3f:07:7b:87:46:4d:fd:f1:b8:a9:
b3:0c:7b:a9:8f:ea:5c:64:49:3c:c1:ef:6c:ea:86:62:3e:6a:
b6:17:5a:4a:b2:d7:a2:fe:59:93:64:0c:8c:81:08:4a:9a:0f:
1b:65:33:83:2e:e4:7c:5e:e5:fb:da:b9:f3:f0:39:4e:95:a3:
c9:5c:c6:69:98:3d:f5:dd:d1:5c:5a:ab:a9:aa:e4:fa:f9:ea:
ed:11:44:40:a5:91:15:ee:83:d1:17:26:0a:84:86:d3:19:33:
a3:9b:0b:c7:94:6a:9f:b7:24:f6:ff:8e:6e:51:e5:70:d2:e9:
ea:57:70:ed:96:44:64:02:04:d3:38:76:57:75:69:23:b1:b8:
74:ad:98:c4:5b:ac:2a:71:85:f7:9e:25:ab:81:42:49:2b:d9:
78:e3:d9:47:26:db:77:cd:bc:f1:7e:c0:d7:e6:e8:91:a1:9c:
48:ef:1c:05:7c:f1:76:34:d4:6b:23:51:86:4b:3b:8f:80:5b:
5a:8a:ae:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jKvXMRNyQJAqZApmvGebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDhjY2U0ZmI2ZDM2MTQwZWI3ZDU2ZmVkMjg5YjM4NzFm
YzRkNzQwHhcNMjUwNDI3MTQwMDI5WhcNMjUwNDI4MTQwMDI5WjAzMTEwLwYDVQQD
EyhmMWJjNzZiYTEzMDI0N2FhMDFiNGI4MzA1MDFmZTQwMDEwYmQ1YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH4pnH0El3k0rXkqWCT2DNZrgNZh
riHlGE1WT/NLoz8d4a6dCNCHfXCZCb/yFgT7kJhiq7W97EFzR9W53faRKIhu/DIs
ErWbiihX9uz5mqQZ5vEwXCNnK+GPPeSK3TRZlh1YEN8JMq1FJOMRwmU8ZE1MVC4k
MsFg8NqxaCEYmL+ffJO6cr8N5YUO+yWfBYp18PkG+/8AUhc6qnKXX77aKShXvXmC
7THvAl7mzltHRHL5aIFA0d6GKtL5y2VGJoRRVOma5tgvRIVmN5u7RFgYa4xOpsXy
qglsh+fugobVYWk4ryh33pOGv4FLDbitJCn9HfiJP7RzyQTdRImtF6t0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG8droTAkeqAbS4MFAf5AAQvVutMB8GA1UdIwQY
MBaAFINIzOT7bTYUDrfVb+0omzhx/E10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYt
YjhjM2RkNzY2MTNlLzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYtYjhjM2RkNzY2MTNl
LzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx2RbTAj
CEI8e+x39C6ar+rtDf86ana/cglt6+c4yHSdgLx5Uz46WylQMFajh0Y+jbymd1de
D2xxZ7KptIs/B3uHRk398bipswx7qY/qXGRJPMHvbOqGYj5qthdaSrLXov5Zk2QM
jIEISpoPG2Uzgy7kfF7l+9q58/A5TpWjyVzGaZg99d3RXFqrqark+vnq7RFEQKWR
Fe6D0RcmCoSG0xkzo5sLx5Rqn7ck9v+OblHlcNLp6ldw7ZZEZAIE0zh2V3VpI7G4
dK2YxFusKnGF954lq4FCSSvZeOPZRybbd8288X7A1+bokaGcSO8cBXzxdjTUayNR
hks7j4BbWoquXw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:15 2025 by rpki-client