Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: Y432LrcP0rtmP8bRXrvNfm6hYrTcFu077Q9F8aG8PxQ=
Subject key identifier: BD:36:D9:30:5C:D2:90:F1:AD:C2:13:64:C0:61:56:4D:1F:5D:B8:0B
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 0196B220D34E5846234B4A48E9D30AA3380E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 04D9
Signing time: Thu 08 May 2025 23:00:17 +0000
Manifest this update: Thu 08 May 2025 23:00:17 +0000
Manifest next update: Fri 09 May 2025 23:00:17 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: qWXkfsgbIFZy0ZXfmTEdtbIGI1ubj6208AzNB5tkjYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:d3:4e:58:46:23:4b:4a:48:e9:d3:0a:a3:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: May 8 23:00:17 2025 GMT
Not After : May 9 23:00:17 2025 GMT
Subject: CN=bd36d9305cd290f1adc21364c061564d1f5db80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:a8:9c:71:65:4a:c2:97:fe:3d:c3:15:2e:
7c:8b:e2:aa:b7:c2:0b:32:35:e9:d9:94:75:08:85:
92:95:33:8a:d2:45:53:8e:8f:8c:d3:ac:c0:09:45:
68:0d:06:35:5b:5a:97:c4:78:0d:00:f7:0a:5e:e1:
9b:8e:70:9b:73:99:ed:d7:24:59:9b:73:c8:10:84:
20:10:ce:91:b7:a2:18:4e:b1:b3:bc:29:78:e3:57:
e3:cd:06:5c:ec:1d:45:aa:08:52:0b:96:31:b7:41:
dc:81:3a:b9:43:9d:1c:f5:76:57:04:cb:a1:0c:72:
ed:76:38:8f:b1:bd:a8:19:44:3b:24:0d:f8:ea:da:
6b:52:c0:bf:12:3c:fc:54:4e:b3:2f:e2:27:63:a2:
0d:c1:a2:61:12:f7:58:dc:c5:0e:3b:d9:39:82:c8:
e2:38:23:5f:e9:74:5a:0e:5a:47:72:11:03:d5:14:
c6:fd:ec:b3:52:1e:9e:53:e8:af:34:f7:09:1f:19:
46:45:39:a8:2e:46:ba:5d:3d:51:a5:af:75:e8:c9:
78:db:9e:73:ae:91:e7:ce:d4:66:4f:15:68:63:7c:
d0:98:14:a1:3d:af:ea:79:9f:e3:f4:d5:0c:90:25:
7b:d6:81:a7:ba:e4:00:63:ef:36:01:d4:5e:ea:41:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:D9:30:5C:D2:90:F1:AD:C2:13:64:C0:61:56:4D:1F:5D:B8:0B
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d2:cc:b2:2f:fa:19:8c:c1:7d:d0:2d:04:6e:fd:e2:b3:10:
eb:a2:65:b0:b2:b7:25:79:39:87:06:1a:c3:45:42:67:e7:06:
8d:e8:bd:e3:07:7e:93:42:e5:29:39:41:6e:4e:c9:bb:77:b4:
93:27:2a:b7:0e:1c:f4:83:d6:64:03:a3:78:11:20:23:c5:73:
d9:c2:9f:6e:9e:5a:1a:5f:bc:b5:c1:c8:f5:c9:2f:bc:c8:bd:
a7:63:c2:0f:9f:8d:13:4a:fa:a4:1b:b5:09:a0:fd:50:37:77:
c1:b4:a3:21:ec:86:a8:f0:c0:7a:2e:bb:cb:e8:46:fe:c7:34:
e3:05:6c:bf:7c:0f:fd:2f:4d:08:dd:fa:d9:28:64:8a:37:5a:
44:f4:09:08:82:cb:88:b4:83:5e:13:dc:96:56:d3:57:7c:ac:
07:8e:f8:d8:f9:67:9d:64:dd:2c:6d:ed:b0:f3:97:c6:9f:01:
9a:90:67:91:1a:34:22:1a:89:3c:ac:f0:fc:dc:b6:ef:9d:1f:
14:e9:cc:ac:b3:5d:9e:86:d6:57:ce:b2:3f:67:81:d7:96:66:
66:29:aa:63:79:98:ec:bb:69:f9:82:d4:07:42:ac:58:87:93:
08:9d:e7:06:35:5f:c8:a4:19:c3:74:d4:72:a9:a4:bd:6d:d6:
b6:4d:b7:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayINNOWEYjS0pI6dMKozgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz
MGQ5ZmUwHhcNMjUwNTA4MjMwMDE3WhcNMjUwNTA5MjMwMDE3WjAzMTEwLwYDVQQD
EyhiZDM2ZDkzMDVjZDI5MGYxYWRjMjEzNjRjMDYxNTY0ZDFmNWRiODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooSonHFlSsKX/j3DFS58i+Kqt8IL
MjXp2ZR1CIWSlTOK0kVTjo+M06zACUVoDQY1W1qXxHgNAPcKXuGbjnCbc5nt1yRZ
m3PIEIQgEM6Rt6IYTrGzvCl441fjzQZc7B1FqghSC5Yxt0HcgTq5Q50c9XZXBMuh
DHLtdjiPsb2oGUQ7JA346tprUsC/Ejz8VE6zL+InY6INwaJhEvdY3MUOO9k5gsji
OCNf6XRaDlpHchED1RTG/eyzUh6eU+ivNPcJHxlGRTmoLka6XT1Rpa916Ml4255z
rpHnztRmTxVoY3zQmBShPa/qeZ/j9NUMkCV71oGnuuQAY+82AdRe6kErZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL022TBc0pDxrcITZMBhVk0fXbgLMB8GA1UdIwQY
MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt
Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh
LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdLMsi/6
GYzBfdAtBG794rMQ66JlsLK3JXk5hwYaw0VCZ+cGjei94wd+k0LlKTlBbk7Ju3e0
kycqtw4c9IPWZAOjeBEgI8Vz2cKfbp5aGl+8tcHI9ckvvMi9p2PCD5+NE0r6pBu1
CaD9UDd3wbSjIeyGqPDAei67y+hG/sc04wVsv3wP/S9NCN362ShkijdaRPQJCILL
iLSDXhPcllbTV3ysB4742PlnnWTdLG3tsPOXxp8BmpBnkRo0IhqJPKzw/Ny2750f
FOnMrLNdnobWV86yP2eB15ZmZimqY3mY7Ltp+YLUB0KsWIeTCJ3nBjVfyKQZw3TU
cqmkvW3Wtk23bQ==
-----END CERTIFICATE-----
Generated at Fri May 9 04:21:03 2025 by rpki-client