Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: OLiLyZZf0MwA1BvodnRHNMSsZ4L9mP7RLUd8Cs3iSQY=
Subject key identifier: A2:01:29:A2:2B:54:43:0F:09:F5:54:0D:3B:61:A1:BE:52:C2:44:A7
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 0196C4CC52F1F80E63384315EFA7B770CE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 134F
Signing time: Mon 12 May 2025 14:00:47 +0000
Manifest this update: Mon 12 May 2025 14:00:47 +0000
Manifest next update: Tue 13 May 2025 14:00:47 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: nfEybcp15e7WRhRj7OgFR9ajl6SMzenEWo7XvgwJy0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:52:f1:f8:0e:63:38:43:15:ef:a7:b7:70:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: May 12 14:00:47 2025 GMT
Not After : May 13 14:00:47 2025 GMT
Subject: CN=a20129a22b54430f09f5540d3b61a1be52c244a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:46:9b:48:d4:f2:5b:fb:40:35:56:9c:9c:
66:b3:c5:92:02:a3:7c:c5:f2:1b:84:de:ef:c1:c0:
ae:2f:22:4e:52:2a:62:11:4a:c3:38:23:1d:ba:16:
d4:45:48:72:57:63:6b:ca:33:17:30:3a:92:30:e4:
32:fb:2b:db:8a:a4:35:b3:a5:af:dd:2a:92:94:8f:
0f:3d:97:ba:f0:d0:74:00:ea:18:b1:83:3f:3f:b7:
7d:45:4e:44:dc:5d:f5:5f:32:5a:fa:50:77:d6:31:
2f:02:32:65:f0:07:ba:cd:36:4d:5f:26:35:e4:7b:
93:33:bf:bd:41:51:27:b2:31:c3:5e:ec:f3:49:33:
a3:b6:79:ea:99:22:8a:1f:ae:71:99:8c:dd:c5:82:
84:92:e5:27:8a:1d:34:48:9a:da:1b:68:1b:b6:2c:
14:df:4e:01:c6:d4:0e:7c:0f:10:f2:5b:58:ef:96:
07:72:1f:82:54:2d:97:9e:56:49:22:dd:86:e6:67:
03:d2:16:ad:1e:42:f7:78:93:8a:d1:87:43:c3:ec:
aa:34:af:04:34:7f:17:5a:e0:a4:6b:be:8e:75:37:
8d:04:05:8c:b2:17:4f:7f:c7:1f:a6:e9:66:fa:14:
26:81:74:4b:cd:6f:dc:45:70:41:f1:a1:cd:5d:4d:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:29:A2:2B:54:43:0F:09:F5:54:0D:3B:61:A1:BE:52:C2:44:A7
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3e:e7:cd:3c:2b:f9:cd:0b:a0:25:95:8c:b9:f6:1c:72:19:
30:4e:01:31:43:7e:a6:44:4c:d7:35:2f:ff:88:e0:38:bb:bb:
69:17:7d:e9:a9:84:79:6d:d4:d6:b1:29:ba:e2:00:21:e4:82:
9c:6c:83:76:79:5f:6c:12:0b:73:bb:fe:3f:ca:78:8c:5a:6a:
c3:a7:ce:b3:19:07:43:d6:05:3e:a2:e3:a5:49:df:04:4d:8c:
f7:c9:69:d7:03:2a:66:6c:8d:c1:70:9b:dd:2f:0a:b1:85:27:
81:8e:d8:87:2a:65:ae:15:40:dc:ff:97:24:14:3a:33:ab:9b:
0a:6e:18:1e:5c:09:16:8d:e7:00:c1:86:34:3a:5d:4b:a4:b0:
5c:09:dd:7e:9a:d1:53:c2:3f:14:bb:23:fc:f3:8f:97:34:1e:
b4:c0:c8:10:8b:6e:2a:ee:d8:c6:46:1a:82:ef:cc:07:8e:c0:
77:8b:61:03:43:93:ee:d3:22:d7:76:ca:17:01:4e:9c:05:b0:
2d:4b:89:61:6b:7f:a6:61:66:2f:09:cb:cd:b5:b0:d8:90:2f:
44:18:34:d6:ab:c7:e1:39:da:47:1a:fb:16:fe:6c:1f:c2:be:
2c:fd:86:b4:46:25:a9:34:a3:b0:59:1c:d8:d3:98:a0:a0:56:
5a:b4:9c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzFLx+A5jOEMV76e3cM40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk
M2UzZDQwHhcNMjUwNTEyMTQwMDQ3WhcNMjUwNTEzMTQwMDQ3WjAzMTEwLwYDVQQD
EyhhMjAxMjlhMjJiNTQ0MzBmMDlmNTU0MGQzYjYxYTFiZTUyYzI0NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNhGm0jU8lv7QDVWnJxms8WSAqN8
xfIbhN7vwcCuLyJOUipiEUrDOCMduhbURUhyV2NryjMXMDqSMOQy+yvbiqQ1s6Wv
3SqSlI8PPZe68NB0AOoYsYM/P7d9RU5E3F31XzJa+lB31jEvAjJl8Ae6zTZNXyY1
5HuTM7+9QVEnsjHDXuzzSTOjtnnqmSKKH65xmYzdxYKEkuUnih00SJraG2gbtiwU
304BxtQOfA8Q8ltY75YHch+CVC2XnlZJIt2G5mcD0hatHkL3eJOK0YdDw+yqNK8E
NH8XWuCka76OdTeNBAWMshdPf8cfpulm+hQmgXRLzW/cRXBB8aHNXU1niwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIBKaIrVEMPCfVUDTthob5SwkSnMB8GA1UdIwQY
MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt
Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw
LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD7nzTwr
+c0LoCWVjLn2HHIZME4BMUN+pkRM1zUv/4jgOLu7aRd96amEeW3U1rEpuuIAIeSC
nGyDdnlfbBILc7v+P8p4jFpqw6fOsxkHQ9YFPqLjpUnfBE2M98lp1wMqZmyNwXCb
3S8KsYUngY7YhyplrhVA3P+XJBQ6M6ubCm4YHlwJFo3nAMGGNDpdS6SwXAndfprR
U8I/FLsj/POPlzQetMDIEItuKu7YxkYagu/MB47Ad4thA0OT7tMi13bKFwFOnAWw
LUuJYWt/pmFmLwnLzbWw2JAvRBg01qvH4TnaRxr7Fv5sH8K+LP2GtEYlqTSjsFkc
2NOYoKBWWrScfQ==
-----END CERTIFICATE-----
Generated at Mon May 12 19:46:04 2025 by rpki-client