Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: rEc2L3cLHP7qec5mv6yfPH7FGmhruFgsFVz4XU8OooA=
Subject key identifier: D9:AA:DE:90:DB:FD:D3:9E:07:B0:83:72:A4:29:1B:26:D2:87:FD:AF
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 0196BA4860D216FD3449A38DDFB8E7FCCD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 081D
Signing time: Sat 10 May 2025 13:00:27 +0000
Manifest this update: Sat 10 May 2025 13:00:27 +0000
Manifest next update: Sun 11 May 2025 13:00:27 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: lK1A6DeSkcU1xiNWKvmmyY6i40+HYWQVYFG7vtAz2ko=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:60:d2:16:fd:34:49:a3:8d:df:b8:e7:fc:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: May 10 13:00:27 2025 GMT
Not After : May 11 13:00:27 2025 GMT
Subject: CN=d9aade90dbfdd39e07b08372a4291b26d287fdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:73:77:b5:5d:2b:ac:8c:8b:8d:11:78:1c:
a0:8c:cc:93:ba:75:49:d1:04:1c:10:f2:3f:44:9a:
43:de:9d:3b:c3:c8:36:40:73:ad:6f:a7:da:57:f2:
4a:9a:43:ff:c7:c1:e2:45:0a:8a:65:10:57:ba:08:
1b:92:3c:92:75:57:a4:2f:3c:1d:4c:2a:05:2b:4b:
36:58:4a:45:12:46:fb:a4:fb:0a:97:d4:98:94:0b:
64:99:57:af:a3:ea:e7:05:a8:74:8e:cd:52:db:6c:
a7:fd:54:5b:cf:61:0a:78:c9:15:07:73:1b:4c:e8:
37:1f:5c:d3:92:d9:d7:3c:61:a6:a3:07:3e:ed:29:
41:46:61:8f:8a:89:ef:ea:85:6c:fb:5c:a5:83:09:
26:f4:92:65:51:68:88:d1:e3:4a:0c:62:22:78:db:
aa:aa:5a:8b:9c:a9:4f:3f:90:80:10:9a:af:a9:56:
75:ce:b8:c6:f4:75:61:f2:eb:8f:b2:58:ec:a4:2b:
4a:86:6c:76:c0:4e:45:c9:cc:ad:77:a8:4f:6c:c4:
67:fe:d9:38:84:b2:61:1f:1a:7e:33:de:d7:5f:33:
00:ee:c4:a5:16:6d:9e:d8:ce:50:4e:6f:9f:37:86:
db:b6:1b:73:b4:7a:13:bc:be:c7:f7:47:98:9a:ae:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:DE:90:DB:FD:D3:9E:07:B0:83:72:A4:29:1B:26:D2:87:FD:AF
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:55:97:dd:c5:29:97:3e:f4:ed:67:3e:dd:9f:33:b8:ba:dd:
7d:5c:db:6a:84:d8:84:5a:b3:e0:8b:13:76:8d:3b:d3:e5:5e:
9b:10:52:d9:38:5e:f1:ac:75:9b:59:4a:d9:48:91:f2:50:09:
92:fe:48:c6:25:e3:7a:35:5b:6a:a0:27:e0:68:fc:27:85:7e:
d1:16:68:48:4a:3e:18:06:1a:3a:48:3c:88:11:f6:d7:7b:f3:
33:32:b0:6d:01:4e:83:c6:4f:7e:10:02:bb:c8:d1:52:59:17:
bf:a7:ef:fe:60:df:6d:37:c1:df:a8:95:9e:34:30:e7:60:bd:
2c:60:4b:3c:79:c7:ab:0f:84:39:df:95:41:fc:cd:33:25:9a:
16:da:03:c4:e7:b9:b8:01:f0:54:8b:03:ff:12:64:80:8b:ed:
56:9a:01:3a:8d:46:85:32:a3:d9:c0:ca:ab:96:8a:e2:4c:a4:
f1:ba:60:5d:f4:da:40:a4:e5:8c:fa:f5:0f:82:d1:f5:0e:05:
ee:a1:e0:7e:3f:5c:9f:f4:19:e8:ca:85:74:56:e3:5e:94:aa:
1c:8e:3d:ea:f7:53:ff:ea:1c:99:7a:a8:fa:b7:c6:da:a3:b7:
63:01:80:e1:90:07:56:46:bf:e3:f4:32:ad:10:19:a9:1e:dc:
0d:21:a6:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SGDSFv00SaON37jn/M1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy
NDg3YmQwHhcNMjUwNTEwMTMwMDI3WhcNMjUwNTExMTMwMDI3WjAzMTEwLwYDVQQD
EyhkOWFhZGU5MGRiZmRkMzllMDdiMDgzNzJhNDI5MWIyNmQyODdmZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhZzd7VdK6yMi40ReBygjMyTunVJ
0QQcEPI/RJpD3p07w8g2QHOtb6faV/JKmkP/x8HiRQqKZRBXuggbkjySdVekLzwd
TCoFK0s2WEpFEkb7pPsKl9SYlAtkmVevo+rnBah0js1S22yn/VRbz2EKeMkVB3Mb
TOg3H1zTktnXPGGmowc+7SlBRmGPionv6oVs+1ylgwkm9JJlUWiI0eNKDGIieNuq
qlqLnKlPP5CAEJqvqVZ1zrjG9HVh8uuPsljspCtKhmx2wE5Fycytd6hPbMRn/tk4
hLJhHxp+M97XXzMA7sSlFm2e2M5QTm+fN4bbthtztHoTvL7H90eYmq6k6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmq3pDb/dOeB7CDcqQpGybSh/2vMB8GA1UdIwQY
MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt
MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2
LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1WX3cUp
lz707Wc+3Z8zuLrdfVzbaoTYhFqz4IsTdo070+VemxBS2The8ax1m1lK2UiR8lAJ
kv5IxiXjejVbaqAn4Gj8J4V+0RZoSEo+GAYaOkg8iBH213vzMzKwbQFOg8ZPfhAC
u8jRUlkXv6fv/mDfbTfB36iVnjQw52C9LGBLPHnHqw+EOd+VQfzNMyWaFtoDxOe5
uAHwVIsD/xJkgIvtVpoBOo1GhTKj2cDKq5aK4kyk8bpgXfTaQKTljPr1D4LR9Q4F
7qHgfj9cn/QZ6MqFdFbjXpSqHI496vdT/+ocmXqo+rfG2qO3YwGA4ZAHVka/4/Qy
rRAZqR7cDSGmMw==
-----END CERTIFICATE-----
Generated at Sat May 10 19:47:37 2025 by rpki-client