Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: onFcmIFLlaJBZ7gZYJPmYRq8aaV4UIhv4u4fvMlkYiY=
Subject key identifier: D9:D4:05:04:EC:0B:EA:55:85:4D:C7:61:5A:DA:E0:BD:C1:75:A5:D4
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 019680C6DD3A9EC694F6A3CD9635908B76EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 08E7
Signing time: Tue 29 Apr 2025 09:00:38 +0000
Manifest this update: Tue 29 Apr 2025 09:00:38 +0000
Manifest next update: Wed 30 Apr 2025 09:00:38 +0000
Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: +Tr2A+TdccVSr3Yio5oAWEqSHxUuJru9ePwq9FqPB8s=)
2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:dd:3a:9e:c6:94:f6:a3:cd:96:35:90:8b:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Apr 29 09:00:38 2025 GMT
Not After : Apr 30 09:00:38 2025 GMT
Subject: CN=d9d40504ec0bea55854dc7615adae0bdc175a5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:c6:2a:52:78:77:31:a6:af:17:96:97:eb:
4a:be:e2:17:e5:49:d8:4e:31:bd:27:e5:25:fc:26:
0d:6c:6f:d5:c7:19:51:bd:38:29:74:d5:a6:19:c7:
5a:20:3b:d7:58:e0:08:ea:ee:1b:4f:b8:b0:90:02:
70:78:8d:3f:69:58:6f:e5:01:7e:25:42:02:66:dd:
0c:c5:17:36:95:b7:80:a8:16:9a:b0:29:0f:e8:b2:
20:e7:d0:5d:89:b8:a7:b4:08:0a:99:5c:29:1a:9b:
c7:67:fa:76:7b:74:d9:a5:56:f8:ae:87:2b:14:da:
5d:ab:2a:28:ac:fb:a5:9c:56:78:d3:1d:c8:06:dc:
7c:53:97:dc:6f:56:a7:ea:bb:db:17:82:d7:c4:22:
9f:d5:65:2f:a2:58:3b:ae:45:2e:40:3a:d8:13:98:
f3:03:c1:d4:80:c7:be:91:82:d9:df:08:46:57:d1:
12:80:ef:90:7e:e1:5c:13:f3:dc:62:b6:56:d4:27:
26:71:94:b6:8f:e0:bf:60:6a:14:5c:f4:07:e2:c7:
8c:c7:eb:ac:c6:04:c8:63:5c:00:e8:00:5f:93:dc:
a5:27:f3:8e:bf:5e:60:d2:5b:0d:44:d3:1c:85:f2:
d5:1b:f7:89:1f:9c:37:4d:e3:70:ce:d0:d8:9d:a9:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:05:04:EC:0B:EA:55:85:4D:C7:61:5A:DA:E0:BD:C1:75:A5:D4
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6b:6a:fb:60:ce:67:8c:7f:0c:64:ea:20:b1:af:06:de:fc:
a3:f9:c2:c8:1b:4a:ec:0a:b9:92:b7:d9:2a:50:d1:9f:0a:e4:
a2:31:b8:b5:a1:cc:70:06:cf:cd:62:10:f5:ee:6e:27:53:f7:
d1:30:44:aa:bc:c2:d5:af:d9:6e:c1:33:f7:fb:2a:1a:fc:3a:
fd:c9:a5:6e:2a:4b:a4:c5:d0:a2:81:b7:4f:31:1e:95:be:47:
13:10:f2:79:cc:22:2c:95:1f:6d:ca:4d:41:40:38:42:b4:9e:
2e:5d:94:6d:22:83:4a:8f:6b:85:70:eb:31:a4:ee:4b:22:d3:
59:81:08:10:99:94:09:0d:56:f3:3f:51:ef:c3:e4:5b:9f:61:
6f:6e:8a:9f:6e:95:c0:40:23:77:e4:d1:3a:4f:e0:ee:48:0f:
f5:37:aa:e9:42:5e:56:0f:d4:2a:f5:0d:ce:79:d4:38:78:ab:
e2:53:7e:5a:1a:af:e1:08:95:54:15:f1:37:05:3b:54:f8:2b:
25:c1:ed:2c:5b:85:2c:4c:01:38:a3:74:14:3d:24:6b:77:ee:
25:f1:7a:3c:65:43:77:f3:08:5b:8a:bc:74:cc:fe:88:8d:88:
a7:e0:60:4d:96:2e:20:a9:5a:99:f8:73:a9:0c:94:80:2a:36:
60:5c:e7:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAxt06nsaU9qPNljWQi3bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm
YzI2NTUwHhcNMjUwNDI5MDkwMDM4WhcNMjUwNDMwMDkwMDM4WjAzMTEwLwYDVQQD
EyhkOWQ0MDUwNGVjMGJlYTU1ODU0ZGM3NjE1YWRhZTBiZGMxNzVhNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzabGKlJ4dzGmrxeWl+tKvuIX5UnY
TjG9J+Ul/CYNbG/VxxlRvTgpdNWmGcdaIDvXWOAI6u4bT7iwkAJweI0/aVhv5QF+
JUICZt0MxRc2lbeAqBaasCkP6LIg59BdibintAgKmVwpGpvHZ/p2e3TZpVb4rocr
FNpdqyoorPulnFZ40x3IBtx8U5fcb1an6rvbF4LXxCKf1WUvolg7rkUuQDrYE5jz
A8HUgMe+kYLZ3whGV9ESgO+QfuFcE/PcYrZW1CcmcZS2j+C/YGoUXPQH4seMx+us
xgTIY1wA6ABfk9ylJ/OOv15g0lsNRNMchfLVG/eJH5w3TeNwztDYnamLIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnUBQTsC+pVhU3HYVra4L3BdaXUMB8GA1UdIwQY
MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt
ZGM4NTg2NGFlYTg5LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5
LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGtq+2DO
Z4x/DGTqILGvBt78o/nCyBtK7Aq5krfZKlDRnwrkojG4taHMcAbPzWIQ9e5uJ1P3
0TBEqrzC1a/ZbsEz9/sqGvw6/cmlbipLpMXQooG3TzEelb5HExDyecwiLJUfbcpN
QUA4QrSeLl2UbSKDSo9rhXDrMaTuSyLTWYEIEJmUCQ1W8z9R78PkW59hb26Kn26V
wEAjd+TROk/g7kgP9Teq6UJeVg/UKvUNznnUOHir4lN+Whqv4QiVVBXxNwU7VPgr
JcHtLFuFLEwBOKN0FD0ka3fuJfF6PGVDd/MIW4q8dMz+iI2Ip+BgTZYuIKlamfhz
qQyUgCo2YFznEA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:36 2025 by rpki-client