Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: VlhFLp1bmNN2sVRdSrydPCFMQ81XttLGQmfbjkiLTII=
Subject key identifier: 34:39:6B:9D:7C:A4:48:2E:4D:3D:14:23:C2:04:D5:FE:99:C3:3D:AE
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 0196B7104C1400F5825FFE533C028A8285BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 0ECB
Signing time: Fri 09 May 2025 22:00:20 +0000
Manifest this update: Fri 09 May 2025 22:00:20 +0000
Manifest next update: Sat 10 May 2025 22:00:20 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: aB+4z2Ep7V+jsaj3fAxoFLSrFZuwBDzaWSDmCziA9eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:4c:14:00:f5:82:5f:fe:53:3c:02:8a:82:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: May 9 22:00:20 2025 GMT
Not After : May 10 22:00:20 2025 GMT
Subject: CN=34396b9d7ca4482e4d3d1423c204d5fe99c33dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:b2:13:79:99:50:cf:fa:26:0d:2c:5d:32:
62:9d:85:05:1d:fd:4a:c0:32:c1:ab:06:8c:e6:16:
11:59:ff:fd:dd:fc:c2:5e:5b:b2:63:ad:98:dd:0e:
b1:db:15:32:03:5f:4d:b5:a8:c1:30:76:9b:03:50:
9c:06:e1:45:82:66:a6:18:d2:74:ee:30:65:2c:19:
9a:a9:e9:82:d0:70:2f:75:02:27:28:63:4c:7d:6e:
cd:25:f3:88:60:18:4b:ef:f2:bf:ab:3f:6d:c7:9b:
ff:db:a2:bd:2a:f2:4e:28:8c:e7:45:a0:9e:e5:a8:
e0:a6:48:d1:a0:10:8a:00:94:28:24:27:54:99:dc:
68:e1:ba:44:f9:fd:6f:a1:4f:9d:a3:ac:4a:93:0a:
f5:0d:57:bd:9c:49:49:ae:08:2c:21:4a:86:92:48:
44:f2:bf:54:24:90:35:33:ae:2b:64:22:00:58:83:
6c:a9:f6:c6:5a:b1:a1:9b:24:93:d3:eb:3f:9c:38:
8c:43:ff:8a:62:90:6f:51:ce:43:a3:89:67:63:f9:
6f:9f:97:75:0d:bc:e5:c2:1c:ac:69:f5:ff:ae:1e:
89:c3:3a:92:b5:12:20:1d:31:f1:9d:69:50:90:4d:
b2:39:76:9e:d0:cf:b7:78:9c:13:5e:16:58:db:66:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:39:6B:9D:7C:A4:48:2E:4D:3D:14:23:C2:04:D5:FE:99:C3:3D:AE
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:1e:21:c7:1c:ca:ba:0c:0a:a9:e8:ae:91:59:16:7e:fa:
1a:f7:4c:44:2c:f4:f0:e0:95:a1:7a:a1:51:2e:e9:e3:c8:34:
4d:ec:97:4c:c3:49:da:27:24:37:cc:41:01:a8:11:55:dd:f6:
1e:fe:b4:3b:a5:9f:3d:be:bc:d8:11:82:b5:cf:21:51:7d:87:
5f:0a:81:4f:16:ef:ba:f1:8b:5b:4d:6f:40:67:b4:82:07:2d:
52:f9:4f:f7:f2:e6:80:24:ee:dd:ad:44:a7:37:c0:ed:71:9f:
b9:9a:6c:9a:0b:ad:01:21:88:95:13:77:c0:26:2a:3b:ee:c9:
a0:1f:e0:30:af:06:79:3d:7b:d6:73:28:2d:43:76:3e:42:65:
36:48:1c:d6:f9:1b:19:e5:0a:07:1d:ea:64:aa:8c:2f:95:2e:
68:fc:a1:5a:0c:f9:19:5c:ca:b5:28:e9:8f:36:20:26:c6:11:
cd:a3:fe:80:bf:19:bc:3d:04:f2:5c:7d:9c:e8:e2:1f:c8:13:
86:4a:69:3f:e6:83:5e:6b:47:d0:7b:c6:af:51:e4:ae:47:87:
2c:75:0c:41:7c:fa:8d:ee:5f:c5:84:3d:d5:76:d0:ca:b5:d4:
dd:62:70:90:81:4b:03:f2:0b:9b:db:9c:76:9d:18:3e:47:24:
d5:82:7f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EEwUAPWCX/5TPAKKgoW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz
NDIyMzIwHhcNMjUwNTA5MjIwMDIwWhcNMjUwNTEwMjIwMDIwWjAzMTEwLwYDVQQD
EygzNDM5NmI5ZDdjYTQ0ODJlNGQzZDE0MjNjMjA0ZDVmZTk5YzMzZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaOyE3mZUM/6Jg0sXTJinYUFHf1K
wDLBqwaM5hYRWf/93fzCXluyY62Y3Q6x2xUyA19NtajBMHabA1CcBuFFgmamGNJ0
7jBlLBmaqemC0HAvdQInKGNMfW7NJfOIYBhL7/K/qz9tx5v/26K9KvJOKIznRaCe
5ajgpkjRoBCKAJQoJCdUmdxo4bpE+f1voU+do6xKkwr1DVe9nElJrggsIUqGkkhE
8r9UJJA1M64rZCIAWINsqfbGWrGhmyST0+s/nDiMQ/+KYpBvUc5Do4lnY/lvn5d1
DbzlwhysafX/rh6JwzqStRIgHTHxnWlQkE2yOXae0M+3eJwTXhZY22ZSSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ5a518pEguTT0UI8IE1f6Zwz2uMB8GA1UdIwQY
MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut
YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4
LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKYeIccc
yroMCqnorpFZFn76GvdMRCz08OCVoXqhUS7p48g0TeyXTMNJ2ickN8xBAagRVd32
Hv60O6WfPb682BGCtc8hUX2HXwqBTxbvuvGLW01vQGe0ggctUvlP9/LmgCTu3a1E
pzfA7XGfuZpsmgutASGIlRN3wCYqO+7JoB/gMK8GeT171nMoLUN2PkJlNkgc1vkb
GeUKBx3qZKqML5UuaPyhWgz5GVzKtSjpjzYgJsYRzaP+gL8ZvD0E8lx9nOjiH8gT
hkppP+aDXmtH0HvGr1HkrkeHLHUMQXz6je5fxYQ91XbQyrXU3WJwkIFLA/ILm9uc
dp0YPkck1YJ/Xw==
-----END CERTIFICATE-----
Generated at Sat May 10 08:31:40 2025 by rpki-client