Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
File: gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft (raw, json)
Hash identifier: bXk2N2WnOojd3iAOK/eoQ4E+vM/uQ0IB2rpp5vL1/vY=
Subject key identifier: 4F:F8:F0:96:F8:94:C2:8B:AF:33:6C:35:D1:A9:F1:73:77:0F:22:E9
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Certificate issuer: /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial: 0196BD80EFA1A80723D8B964392EB24D973F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
Manifest number: 085F
Signing time: Sun 11 May 2025 04:01:05 +0000
Manifest this update: Sun 11 May 2025 04:01:05 +0000
Manifest next update: Mon 12 May 2025 04:01:05 +0000
Files and hashes: 1: gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl (hash: QSSCzkDQJ5/DhyxHlaDTBu+UBkDVRQsHYdQ3GHeeaJA=)
2: h8JOFdoRpj6qGDNJuivBHNvrSRk.roa (hash: Vj2EQ4BWrvbCavVD4y/JlI7mb4cVKOnw+wqYqtWQ88Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:ef:a1:a8:07:23:d8:b9:64:39:2e:b2:4d:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Validity
Not Before: May 11 04:01:05 2025 GMT
Not After : May 12 04:01:05 2025 GMT
Subject: CN=4ff8f096f894c28baf336c35d1a9f173770f22e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:fa:31:2d:04:e3:f4:a8:2e:2a:b7:1c:a7:
1e:63:c7:cf:90:04:ef:ed:6d:e4:15:8b:60:7f:cc:
3e:f3:d0:de:04:90:9d:11:07:09:0d:b2:85:b3:9e:
be:23:44:7c:9b:80:58:ee:43:5d:9a:0f:74:c5:81:
6a:8f:ef:ff:d9:d7:a2:ff:c0:f4:af:ba:f2:e5:ba:
90:b4:b2:97:76:b0:d8:23:c4:eb:a6:c4:7c:f0:cc:
a9:38:84:ad:21:85:96:59:79:13:30:5b:2a:e4:2c:
dc:c5:89:93:39:3f:11:b4:ed:22:c3:03:e7:e7:6d:
3d:08:97:85:7e:2e:ea:57:da:26:0e:31:a8:25:2c:
1e:ce:28:13:9d:09:a2:c8:82:67:a9:8a:78:b7:38:
88:ed:fa:78:8e:db:20:fc:fd:f3:a6:df:3c:89:ee:
e1:2f:d6:8f:17:05:75:d2:26:b4:90:dd:21:26:5b:
ac:18:25:23:41:e8:c1:73:46:40:25:ca:fa:34:42:
fa:f3:8f:b2:d7:d6:ff:67:27:64:7d:22:4d:3d:1a:
f3:3c:96:c3:c2:43:cd:3e:92:79:5c:49:71:95:6d:
68:9e:b1:17:59:65:6b:0f:62:6e:b8:f7:a7:ab:f7:
5f:54:bd:2c:d8:a5:25:16:7f:a6:53:19:4c:f1:07:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:F0:96:F8:94:C2:8B:AF:33:6C:35:D1:A9:F1:73:77:0F:22:E9
X509v3 Authority Key Identifier:
keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:5b:0b:bf:d8:8c:0e:8c:e4:9c:bf:f4:6b:31:a8:1b:d0:
a4:ed:78:b4:4f:b6:fa:aa:22:9e:12:01:54:e1:18:36:1a:17:
5e:5e:5f:b6:7d:93:43:3e:33:14:7f:c6:03:44:e9:de:78:d5:
b6:a1:79:c8:20:cd:63:a7:6e:af:22:14:ce:29:26:34:91:55:
09:d0:1d:0f:86:52:79:a0:23:65:ae:14:e5:46:c4:18:a2:68:
ae:86:f5:6b:58:4b:03:b8:69:72:61:a3:37:73:ae:f1:74:83:
90:1d:7e:69:05:bf:88:63:1d:02:3c:a5:ef:a5:20:31:08:3f:
f4:9c:fb:f6:b6:fb:24:15:88:41:93:5f:d7:d5:ea:ff:13:ae:
09:2d:39:92:8b:c3:3b:23:70:93:c2:95:da:03:a4:07:78:bf:
4c:34:6a:11:64:3f:be:6b:d8:6e:59:01:7d:8a:b6:f1:44:04:
ce:9e:41:7f:21:fe:d1:36:50:09:16:e2:89:a4:1d:12:02:24:
b4:8a:da:34:93:99:a7:9d:65:48:f7:7c:2d:63:bc:17:47:fe:
dc:7f:01:21:74:0b:47:31:a8:f7:3b:31:e9:b0:13:99:48:f3:
07:5a:74:1f:c0:26:c9:4c:20:8f:05:cb:e3:9c:65:d2:2d:d5:
d7:3c:28:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gO+hqAcj2LlkOS6yTZc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDExYzlkNDAyZTEyZWE5NGFlYThkMTNkNTM2MGNhZjdj
NDNiMjEwHhcNMjUwNTExMDQwMTA1WhcNMjUwNTEyMDQwMTA1WjAzMTEwLwYDVQQD
Eyg0ZmY4ZjA5NmY4OTRjMjhiYWYzMzZjMzVkMWE5ZjE3Mzc3MGYyMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zT6MS0E4/SoLiq3HKceY8fPkATv
7W3kFYtgf8w+89DeBJCdEQcJDbKFs56+I0R8m4BY7kNdmg90xYFqj+//2dei/8D0
r7ry5bqQtLKXdrDYI8TrpsR88MypOIStIYWWWXkTMFsq5CzcxYmTOT8RtO0iwwPn
5209CJeFfi7qV9omDjGoJSwezigTnQmiyIJnqYp4tziI7fp4jtsg/P3zpt88ie7h
L9aPFwV10ia0kN0hJlusGCUjQejBc0ZAJcr6NEL684+y19b/ZydkfSJNPRrzPJbD
wkPNPpJ5XElxlW1onrEXWWVrD2JuuPenq/dfVL0s2KUlFn+mUxlM8QcwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/48Jb4lMKLrzNsNdGp8XN3DyLpMB8GA1UdIwQY
MBaAFIHRHJ1ALhLqlK6o0T1TYMr3xDshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDJjNTctMGZhNS00M2U2LWI3YjEt
Zjk5YzMzZDZhNjBmLzEvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDJjNTctMGZhNS00M2U2LWI3YjEtZjk5YzMzZDZhNjBm
LzEvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ5bC7/Y
jA6M5Jy/9GsxqBvQpO14tE+2+qoinhIBVOEYNhoXXl5ftn2TQz4zFH/GA0Tp3njV
tqF5yCDNY6duryIUzikmNJFVCdAdD4ZSeaAjZa4U5UbEGKJorob1a1hLA7hpcmGj
N3Ou8XSDkB1+aQW/iGMdAjyl76UgMQg/9Jz79rb7JBWIQZNf19Xq/xOuCS05kovD
OyNwk8KV2gOkB3i/TDRqEWQ/vmvYblkBfYq28UQEzp5BfyH+0TZQCRbiiaQdEgIk
tIraNJOZp51lSPd8LWO8F0f+3H8BIXQLRzGo9zsx6bATmUjzB1p0H8AmyUwgjwXL
45xl0i3V1zwodg==
-----END CERTIFICATE-----
Generated at Sun May 11 11:24:52 2025 by rpki-client