Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: 16HnRyT9e3u1ik9VjlCpjQe5KDTXWAgsyiVlHUYieEA=
Subject key identifier: 40:70:C0:B8:51:5A:02:22:50:4F:B2:80:97:90:A1:12:7E:8D:88:24
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01967ED8A00001E2A1851F27373966B68741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 00:00:47 +0000
Manifest this update: Tue 29 Apr 2025 00:00:47 +0000
Manifest next update: Wed 30 Apr 2025 00:00:47 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 48Llkvr+AmS/fl0uupK6QxpF7srL4TtYAM3Qw/uiwX8=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:a0:00:01:e2:a1:85:1f:27:37:39:66:b6:87:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Apr 29 00:00:47 2025 GMT
Not After : Apr 30 00:00:47 2025 GMT
Subject: CN=4070c0b8515a0222504fb2809790a1127e8d8824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:5b:44:f6:41:30:d3:28:3d:ea:cd:9b:61:
fb:4f:72:9b:ef:5a:ba:39:6f:55:c5:09:ef:d9:76:
dd:de:90:e6:98:b7:8c:46:24:83:b1:e8:10:fc:d5:
0a:16:05:77:4c:fa:71:58:f8:a1:0c:5e:65:ba:8b:
f1:e6:77:75:16:74:93:72:8f:68:75:0d:27:80:f4:
c9:7f:7f:fb:f0:aa:67:fd:b7:10:0a:75:fb:65:76:
f6:dc:08:0f:ca:de:6b:2f:1d:51:f3:dd:03:39:a8:
6f:4d:b2:ba:fc:98:9b:d7:44:da:5c:44:fe:5f:42:
70:fb:e3:ed:14:f7:98:d9:30:8b:47:ea:be:f1:f6:
32:bb:f3:32:4c:e7:e3:42:f2:99:e7:6f:fb:34:96:
63:0f:0a:80:1e:ce:22:c5:e5:03:6e:a2:35:11:ed:
ed:dc:c6:7d:5e:d8:f7:71:63:3e:6a:9e:5d:55:b5:
75:f5:08:58:15:87:ae:e4:9a:8d:e3:00:4b:33:34:
9d:bf:ff:4f:41:17:42:02:8b:44:7a:28:0b:c1:92:
fb:f9:85:df:e6:0c:4f:f5:ce:94:9b:1c:53:d7:f6:
0d:48:dc:89:2c:71:7c:76:bd:a7:d8:b9:24:da:32:
e5:63:4c:c2:39:64:3b:ea:aa:1c:38:79:e9:96:93:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:C0:B8:51:5A:02:22:50:4F:B2:80:97:90:A1:12:7E:8D:88:24
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:43:78:a6:c4:7f:df:22:40:5c:75:de:1f:e0:be:69:c0:57:
8d:cd:eb:f8:25:df:9a:18:90:a7:b4:eb:a9:6c:24:50:ec:72:
76:10:7d:ed:b5:21:b0:84:9d:14:9f:c2:7f:86:cb:d2:f8:e2:
1c:24:d5:98:0d:06:e6:20:09:9f:e4:14:be:cc:ab:38:9d:30:
36:d1:2e:7c:b1:32:e1:00:74:48:74:6f:fe:f5:f0:5b:64:ee:
42:35:86:56:ec:87:a5:8a:5e:af:e0:47:3c:19:32:ce:d8:7e:
f7:18:bf:1a:90:d7:88:1d:96:5f:77:0f:cf:69:93:d2:35:b0:
63:1b:e8:50:bd:90:6c:05:d3:d8:8a:4b:4a:35:7b:28:44:f2:
da:3e:ee:e3:ec:6f:f3:24:f8:9a:30:8f:ad:ca:6b:8d:40:8a:
70:6f:71:4a:6e:b7:48:df:61:e3:6c:30:e4:1d:88:d3:03:c4:
fa:02:a9:17:24:66:ef:7e:d7:a5:2e:68:66:d5:40:f9:47:3f:
65:63:94:82:1e:ac:e0:10:e2:80:39:e6:9a:f8:65:5c:26:a5:
11:4e:d4:a7:66:ba:9c:f7:86:11:fe:f5:a2:61:c7:c9:ab:89:
c9:d1:8c:b5:2b:bb:bb:9c:d2:93:7a:09:a0:08:1c:8c:5d:9f:
86:fa:e6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2KAAAeKhhR8nNzlmtodBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUwNDI5MDAwMDQ3WhcNMjUwNDMwMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg0MDcwYzBiODUxNWEwMjIyNTA0ZmIyODA5NzkwYTExMjdlOGQ4ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hdbRPZBMNMoPerNm2H7T3Kb71q6
OW9VxQnv2Xbd3pDmmLeMRiSDsegQ/NUKFgV3TPpxWPihDF5luovx5nd1FnSTco9o
dQ0ngPTJf3/78Kpn/bcQCnX7ZXb23AgPyt5rLx1R890DOahvTbK6/Jib10TaXET+
X0Jw++PtFPeY2TCLR+q+8fYyu/MyTOfjQvKZ52/7NJZjDwqAHs4ixeUDbqI1Ee3t
3MZ9Xtj3cWM+ap5dVbV19QhYFYeu5JqN4wBLMzSdv/9PQRdCAotEeigLwZL7+YXf
5gxP9c6UmxxT1/YNSNyJLHF8dr2n2Lkk2jLlY0zCOWQ76qocOHnplpNGNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBwwLhRWgIiUE+ygJeQoRJ+jYgkMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0N4psR/
3yJAXHXeH+C+acBXjc3r+CXfmhiQp7TrqWwkUOxydhB97bUhsISdFJ/Cf4bL0vji
HCTVmA0G5iAJn+QUvsyrOJ0wNtEufLEy4QB0SHRv/vXwW2TuQjWGVuyHpYper+BH
PBkyzth+9xi/GpDXiB2WX3cPz2mT0jWwYxvoUL2QbAXT2IpLSjV7KETy2j7u4+xv
8yT4mjCPrcprjUCKcG9xSm63SN9h42ww5B2I0wPE+gKpFyRm737XpS5oZtVA+Uc/
ZWOUgh6s4BDigDnmmvhlXCalEU7Up2a6nPeGEf71omHHyauJydGMtSu7u5zSk3oJ
oAgcjF2fhvrmvw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:16:52 2025 by rpki-client