Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: R47GqAmjVKHqqn7nnj58Ly0CrL+BIIImuYCMCxnya3A=
Subject key identifier: A8:78:5C:84:AB:77:B3:37:4C:FF:1B:B8:2A:D3:40:9E:04:A2:AE:DD
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 0196B220E375A7BF6BA6A3FF9C530A6036D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0D9B
Signing time: Thu 08 May 2025 23:00:21 +0000
Manifest this update: Thu 08 May 2025 23:00:21 +0000
Manifest next update: Fri 09 May 2025 23:00:21 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: JC+s8JHz6Lo0BSBuC5li/XPvuw/4gri3+shSbScilFs=)
2: nCO98tc8B201HK59o3LGsGaIbRQ.roa (hash: 5XD9s6utrTJgO6HcLNBLSP37yElvartuHWVrwWT7jxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:e3:75:a7:bf:6b:a6:a3:ff:9c:53:0a:60:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: May 8 23:00:21 2025 GMT
Not After : May 9 23:00:21 2025 GMT
Subject: CN=a8785c84ab77b3374cff1bb82ad3409e04a2aedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:a0:8f:ca:50:03:7c:d5:11:30:e8:a1:0a:
e5:e4:27:2b:4a:94:89:9b:cf:9a:70:1a:3b:27:24:
99:a7:bb:fe:93:0a:f8:02:92:6c:f8:f4:72:84:ca:
34:b8:ca:43:66:42:6c:c6:1d:e7:19:c3:f7:e1:81:
7d:c7:27:5a:b2:5f:5d:d8:0e:ff:0f:ec:96:59:b6:
cd:a8:46:ca:3c:39:7a:00:9a:a1:01:8f:8e:4a:16:
a5:8c:14:30:c6:4b:72:23:8d:6e:74:cc:67:1e:ad:
b4:55:f2:a3:c3:ba:a8:1c:7b:35:c1:7c:14:14:99:
03:65:2f:26:e1:3c:8b:5d:93:a9:62:99:cf:e4:90:
e7:0e:87:52:95:52:17:43:8f:ee:8e:d7:d1:5a:f6:
19:3a:32:18:58:8b:e5:1d:34:ce:ca:7a:38:04:4d:
d0:ab:58:58:4d:18:4e:d3:6b:ca:30:11:64:ed:9c:
d0:60:95:5b:35:dc:81:fc:58:92:44:af:bf:09:40:
1f:a1:33:a9:d1:f7:af:e5:18:a5:18:18:2b:fe:6a:
7b:3d:45:1f:7f:da:c6:11:72:4a:85:44:97:49:fb:
84:8c:70:4f:f3:78:91:d9:db:94:06:f7:f4:6d:15:
a0:01:ab:8f:32:70:d1:29:d4:c2:b0:1e:7a:6b:8e:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:5C:84:AB:77:B3:37:4C:FF:1B:B8:2A:D3:40:9E:04:A2:AE:DD
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:17:35:f2:bd:ac:5d:1c:94:e5:b4:7b:64:55:db:ef:21:
f9:27:9e:53:12:1a:25:3a:24:da:e4:68:5a:71:fa:09:be:c6:
bc:fb:3a:95:fe:69:6b:42:99:14:16:56:ff:18:2e:f0:a9:3e:
2c:77:10:b1:39:39:fb:d7:6e:8f:cb:46:ae:15:1d:db:2b:32:
77:f3:83:13:35:62:5e:db:d0:6c:ba:e0:00:e3:99:b7:19:30:
a8:31:8a:bf:ed:5a:be:c1:bb:31:92:16:4b:fe:70:3e:6c:e2:
2f:5a:a7:c2:92:1c:c2:dc:f2:3f:97:65:16:d6:01:f6:5a:62:
fb:0b:04:7f:11:ae:69:a1:dc:19:56:0f:6b:3e:0d:fc:6c:3d:
87:bd:8e:bd:e6:7d:c4:51:a2:08:6d:fb:fa:06:f9:a4:e9:e4:
81:6e:8b:c7:1b:4c:ba:cb:7d:ac:1e:47:26:9b:84:06:53:d5:
03:2a:21:44:02:ee:4c:17:7a:72:39:69:69:0f:ac:0f:50:0f:
eb:16:16:9d:dd:2f:7d:f8:22:80:d5:b9:35:9d:b5:c0:a5:15:
ad:3d:98:ce:0f:b2:19:d8:5d:41:a0:1b:fa:09:46:2a:e0:8f:
8b:71:b8:da:6e:9d:56:76:3b:e0:43:b7:03:40:5a:db:47:fe:
ff:e1:93:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayION1p79rpqP/nFMKYDbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjE5Y2M1ZTM4ZDhmOWMxZDY1NDcxNzc2NjVmODkyMTFk
ZWM4OTkwHhcNMjUwNTA4MjMwMDIxWhcNMjUwNTA5MjMwMDIxWjAzMTEwLwYDVQQD
EyhhODc4NWM4NGFiNzdiMzM3NGNmZjFiYjgyYWQzNDA5ZTA0YTJhZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRagj8pQA3zVETDooQrl5CcrSpSJ
m8+acBo7JySZp7v+kwr4ApJs+PRyhMo0uMpDZkJsxh3nGcP34YF9xydasl9d2A7/
D+yWWbbNqEbKPDl6AJqhAY+OShaljBQwxktyI41udMxnHq20VfKjw7qoHHs1wXwU
FJkDZS8m4TyLXZOpYpnP5JDnDodSlVIXQ4/ujtfRWvYZOjIYWIvlHTTOyno4BE3Q
q1hYTRhO02vKMBFk7ZzQYJVbNdyB/FiSRK+/CUAfoTOp0fev5RilGBgr/mp7PUUf
f9rGEXJKhUSXSfuEjHBP83iR2duUBvf0bRWgAauPMnDRKdTCsB56a46rKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh4XISrd7M3TP8buCrTQJ4Eoq7dMB8GA1UdIwQY
MBaAFOPxnMXjjY+cHWVHF3Zl+JIR3siZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUt
YTRiZTE3MmM3NmJhLzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUtYTRiZTE3MmM3NmJh
LzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu4XNfK9
rF0clOW0e2RV2+8h+SeeUxIaJTok2uRoWnH6Cb7GvPs6lf5pa0KZFBZW/xgu8Kk+
LHcQsTk5+9duj8tGrhUd2ysyd/ODEzViXtvQbLrgAOOZtxkwqDGKv+1avsG7MZIW
S/5wPmziL1qnwpIcwtzyP5dlFtYB9lpi+wsEfxGuaaHcGVYPaz4N/Gw9h72OveZ9
xFGiCG37+gb5pOnkgW6LxxtMust9rB5HJpuEBlPVAyohRALuTBd6cjlpaQ+sD1AP
6xYWnd0vffgigNW5NZ21wKUVrT2Yzg+yGdhdQaAb+glGKuCPi3G42m6dVnY74EO3
A0Ba20f+/+GTVg==
-----END CERTIFICATE-----
Generated at Fri May 9 03:38:06 2025 by rpki-client