Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: sR/f2A/wtq9pct3i59Sl1Ego29VdXJNqog5rpBSJYT4=
Subject key identifier: 30:03:A2:38:BD:1C:BE:DA:B2:36:89:3C:32:03:EC:75:EC:0B:5D:DF
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 0196C2392F0B5B8F52886CD0C84506A4C02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 0579
Signing time: Mon 12 May 2025 02:00:49 +0000
Manifest this update: Mon 12 May 2025 02:00:49 +0000
Manifest next update: Tue 13 May 2025 02:00:49 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: YVt+kALpOSllc8ch4FfH1DUU09oFp1d3k/qnd605uxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:2f:0b:5b:8f:52:88:6c:d0:c8:45:06:a4:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: May 12 02:00:49 2025 GMT
Not After : May 13 02:00:49 2025 GMT
Subject: CN=3003a238bd1cbedab236893c3203ec75ec0b5ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:51:b5:d3:60:91:43:ab:bc:b3:3f:b6:2e:
46:b3:99:78:88:d8:33:c6:9c:72:de:63:2c:d9:4b:
1f:65:e5:8a:22:e5:27:31:e7:6f:51:46:c0:75:fe:
34:66:c7:f4:1d:09:17:fa:95:f3:79:51:31:c0:9a:
22:db:ca:b3:c2:66:b8:9c:1b:f8:b6:81:d2:94:b1:
b6:7b:85:21:b7:ad:ef:f6:b7:6c:c6:1f:c1:c5:7e:
37:61:9e:86:8f:ba:4c:8e:ee:1a:77:8e:99:36:7f:
26:90:e7:b2:12:cb:1c:78:ec:b9:06:0a:7b:1b:a5:
9c:99:2e:be:1a:93:68:d0:97:7a:88:61:49:6e:14:
63:9b:2b:52:95:7c:ce:91:39:b8:36:a0:b7:1b:b9:
b2:cf:f9:7b:a8:db:82:75:b2:04:2f:f0:56:2d:e0:
49:d5:61:b3:7c:90:e3:0e:4d:f0:c6:39:19:97:12:
f7:32:b6:54:8a:81:1c:ea:8a:1c:49:90:cd:a3:7d:
83:72:bb:e7:d5:c4:e0:ac:2b:3c:54:65:9b:65:1a:
de:05:94:ea:c7:47:32:40:4a:4b:99:7b:c7:b8:9c:
18:a7:b1:39:72:da:df:3e:90:98:36:fd:d5:04:0f:
a0:41:2a:88:72:5d:2d:4c:68:fd:80:7e:63:65:d3:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:A2:38:BD:1C:BE:DA:B2:36:89:3C:32:03:EC:75:EC:0B:5D:DF
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:60:b9:75:d5:18:69:67:47:eb:6b:6b:e0:4e:66:3b:98:43:
b4:b3:d2:7e:55:7d:cb:22:d3:01:00:86:d3:35:39:b0:ce:9c:
f9:01:75:ba:32:80:cd:cd:d5:36:86:82:83:c8:ea:a0:e0:f8:
c2:c2:0a:37:96:d7:af:36:8f:f0:e6:52:2c:6c:da:5b:ea:b4:
a8:92:f9:c7:58:69:10:e1:ae:38:93:f4:67:c8:ac:08:fc:1d:
91:64:ad:70:09:d1:f3:3c:4d:cf:fc:2b:65:4f:34:01:d3:dc:
53:0e:c6:52:e0:1f:8b:b6:91:ea:2c:d5:94:cc:2c:24:71:56:
cb:44:47:bd:e1:c8:46:c5:1c:b7:bd:4c:a7:58:87:4e:5c:66:
43:77:0c:92:c4:37:1f:f3:de:92:41:08:04:84:15:f7:2e:03:
68:34:fd:f5:68:8c:4e:5d:0a:06:14:e8:1a:46:5c:6e:c8:5e:
c6:31:2c:26:e7:79:2b:4a:53:2b:28:3d:ac:4d:d9:ee:a1:1e:
7d:9f:3e:95:c0:45:11:df:43:39:0b:4c:a8:5a:b5:0f:26:57:
9a:3b:6e:ec:7d:83:c9:cd:0e:a9:0e:bf:7f:1e:3e:00:46:ed:
af:0c:f0:6a:30:1c:f4:75:62:5b:bc:77:c8:6d:e1:de:fb:e8:
9a:9a:5c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOS8LW49SiGzQyEUGpMAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz
YjMwZWUwHhcNMjUwNTEyMDIwMDQ5WhcNMjUwNTEzMDIwMDQ5WjAzMTEwLwYDVQQD
EygzMDAzYTIzOGJkMWNiZWRhYjIzNjg5M2MzMjAzZWM3NWVjMGI1ZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ypRtdNgkUOrvLM/ti5Gs5l4iNgz
xpxy3mMs2UsfZeWKIuUnMedvUUbAdf40Zsf0HQkX+pXzeVExwJoi28qzwma4nBv4
toHSlLG2e4Uht63v9rdsxh/BxX43YZ6Gj7pMju4ad46ZNn8mkOeyEssceOy5Bgp7
G6WcmS6+GpNo0Jd6iGFJbhRjmytSlXzOkTm4NqC3G7myz/l7qNuCdbIEL/BWLeBJ
1WGzfJDjDk3wxjkZlxL3MrZUioEc6oocSZDNo32Dcrvn1cTgrCs8VGWbZRreBZTq
x0cyQEpLmXvHuJwYp7E5ctrfPpCYNv3VBA+gQSqIcl0tTGj9gH5jZdOdDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDADoji9HL7asjaJPDID7HXsC13fMB8GA1UdIwQY
MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt
NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3
LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWC5ddUY
aWdH62tr4E5mO5hDtLPSflV9yyLTAQCG0zU5sM6c+QF1ujKAzc3VNoaCg8jqoOD4
wsIKN5bXrzaP8OZSLGzaW+q0qJL5x1hpEOGuOJP0Z8isCPwdkWStcAnR8zxNz/wr
ZU80AdPcUw7GUuAfi7aR6izVlMwsJHFWy0RHveHIRsUct71Mp1iHTlxmQ3cMksQ3
H/PekkEIBIQV9y4DaDT99WiMTl0KBhToGkZcbshexjEsJud5K0pTKyg9rE3Z7qEe
fZ8+lcBFEd9DOQtMqFq1DyZXmjtu7H2Dyc0OqQ6/fx4+AEbtrwzwajAc9HViW7x3
yG3h3vvomppc9w==
-----END CERTIFICATE-----
Generated at Mon May 12 04:12:01 2025 by rpki-client