Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: ITdsvnu7qT8CYqbkbGAaSiNEp+9rlEHwv56ucSm3Agk=
Subject key identifier: EA:0C:63:DF:CC:AA:A9:3C:B6:80:EF:19:73:8A:D0:D2:4F:98:50:56
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 0196CCF41BB889D97097585AF8959415906C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 14CE
Signing time: Wed 14 May 2025 04:01:11 +0000
Manifest this update: Wed 14 May 2025 04:01:11 +0000
Manifest next update: Thu 15 May 2025 04:01:11 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: uWTAtuZgpIZA5esYgEmNMmT7fwGaHizBwFiYgoJUk8g=)
2: h-vjilG4zsTOTFr8jyiuNr7YOYQ.roa (hash: J1qho6qvh9PzDmhMh26kyKPFY1m2ydeARTE83gY+gJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f4:1b:b8:89:d9:70:97:58:5a:f8:95:94:15:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: May 14 04:01:11 2025 GMT
Not After : May 15 04:01:11 2025 GMT
Subject: CN=ea0c63dfccaaa93cb680ef19738ad0d24f985056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:12:38:e2:45:71:e2:78:80:25:80:ac:5f:
5d:de:12:ef:bb:1c:28:8b:5a:f0:62:8f:d5:04:aa:
65:ef:55:52:a8:12:4e:06:10:89:96:c9:1a:93:13:
41:18:f2:d5:77:5a:00:94:84:4b:7f:14:60:e1:8b:
96:59:13:b3:7c:bb:fa:86:4c:3e:f9:eb:b8:5f:b1:
1e:61:0e:e7:66:08:f2:56:3d:7d:04:09:3c:30:53:
cd:b4:5f:63:ae:37:5d:f5:fe:0c:86:71:ee:d4:4b:
52:18:24:07:e8:f5:3a:77:f5:d0:e0:dc:f3:c3:20:
d8:ef:78:fb:09:c9:b0:1d:b8:36:13:ba:89:53:05:
9a:f1:cc:4f:dd:96:d6:b7:12:f5:7f:60:3c:81:fe:
48:8a:52:ed:7a:b7:37:c7:1d:a1:54:4b:33:5f:9a:
69:86:33:fa:79:26:a4:2c:2b:4a:b2:f7:d2:13:48:
b1:29:12:10:c1:c7:01:b5:31:64:df:4f:d3:f0:81:
c2:fd:88:62:a9:4c:ec:56:39:76:1e:8e:49:6f:fc:
af:95:a7:f9:ed:c8:8b:df:ae:a2:6c:b8:5d:4a:6d:
e3:98:1d:12:31:21:17:52:e2:6f:5d:eb:33:fb:62:
e8:f1:15:4a:a1:85:1e:c9:8c:21:a7:03:2f:41:f3:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:63:DF:CC:AA:A9:3C:B6:80:EF:19:73:8A:D0:D2:4F:98:50:56
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a0:12:c8:9c:d4:62:73:bb:7f:4a:37:10:f6:5a:17:9a:f9:
ff:f6:62:b3:49:a3:c7:f2:ef:b9:1f:3b:91:57:02:72:71:7e:
ae:bd:72:16:70:31:3e:99:9c:74:14:ab:81:73:99:50:8c:fd:
e7:47:18:1f:9c:82:71:d7:c7:6c:86:4e:1d:1d:de:a9:e1:f2:
56:83:a4:14:f5:c5:d5:6b:f3:4f:c0:b6:15:5c:01:15:57:40:
f2:ca:c4:df:91:da:fa:42:52:76:68:85:d2:7e:7b:37:90:36:
66:19:ed:69:bf:4f:08:38:e0:1b:59:e1:85:18:2f:16:da:2d:
1b:7c:20:fa:51:53:7f:0d:f2:63:ab:b8:d2:45:17:d1:0d:cf:
60:2e:fe:da:e2:82:77:64:c6:02:9d:74:28:8f:f4:9e:81:46:
2a:79:8c:23:43:83:c3:3b:45:e1:b8:ef:2a:fc:f6:9c:ed:c3:
7d:bc:2c:9d:98:b3:5e:25:80:a3:27:fa:bf:c2:b6:80:1c:84:
40:38:05:29:8f:b6:50:d9:bc:de:e3:0d:b7:9a:71:d0:80:80:
a1:ae:6e:d6:5f:91:c9:b9:14:1b:fc:06:22:e7:e5:93:b0:aa:
a3:bb:54:49:30:d4:ff:65:bc:ae:db:f8:e1:b1:9e:22:65:55:
53:a9:40:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM9Bu4idlwl1ha+JWUFZBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJkMzNkNGNkNDU0NjVlZmE1MGZhYTgyNGZiODEyYzQx
NzNhMjcwHhcNMjUwNTE0MDQwMTExWhcNMjUwNTE1MDQwMTExWjAzMTEwLwYDVQQD
EyhlYTBjNjNkZmNjYWFhOTNjYjY4MGVmMTk3MzhhZDBkMjRmOTg1MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIUSOOJFceJ4gCWArF9d3hLvuxwo
i1rwYo/VBKpl71VSqBJOBhCJlskakxNBGPLVd1oAlIRLfxRg4YuWWROzfLv6hkw+
+eu4X7EeYQ7nZgjyVj19BAk8MFPNtF9jrjdd9f4MhnHu1EtSGCQH6PU6d/XQ4Nzz
wyDY73j7CcmwHbg2E7qJUwWa8cxP3ZbWtxL1f2A8gf5IilLterc3xx2hVEszX5pp
hjP6eSakLCtKsvfSE0ixKRIQwccBtTFk30/T8IHC/YhiqUzsVjl2Ho5Jb/yvlaf5
7ciL366ibLhdSm3jmB0SMSEXUuJvXesz+2Lo8RVKoYUeyYwhpwMvQfPqfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoMY9/Mqqk8toDvGXOK0NJPmFBWMB8GA1UdIwQY
MBaAFBvr0z1M1FRl76UPqoJPuBLEFzonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDkt
OGFiNWViNTU4NDczLzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDktOGFiNWViNTU4NDcz
LzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKASyJzU
YnO7f0o3EPZaF5r5//Zis0mjx/LvuR87kVcCcnF+rr1yFnAxPpmcdBSrgXOZUIz9
50cYH5yCcdfHbIZOHR3eqeHyVoOkFPXF1WvzT8C2FVwBFVdA8srE35Ha+kJSdmiF
0n57N5A2Zhntab9PCDjgG1nhhRgvFtotG3wg+lFTfw3yY6u40kUX0Q3PYC7+2uKC
d2TGAp10KI/0noFGKnmMI0ODwztF4bjvKvz2nO3DfbwsnZizXiWAoyf6v8K2gByE
QDgFKY+2UNm83uMNt5px0ICAoa5u1l+RybkUG/wGIuflk7Cqo7tUSTDU/2W8rtv4
4bGeImVVU6lAhg==
-----END CERTIFICATE-----
Generated at Wed May 14 11:05:31 2025 by rpki-client