Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: Ftw2FV+wlDLRmg+jLNp0+zrnhy7r1sN+qo8PKIfBiro=
Subject key identifier: E2:6F:5C:95:E6:0E:3E:B3:C5:81:EC:2C:4F:8A:E8:6B:35:98:30:FF
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 0196BB23E43BFB2E56866B2DB7E0D0936AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0ACA
Signing time: Sat 10 May 2025 17:00:13 +0000
Manifest this update: Sat 10 May 2025 17:00:13 +0000
Manifest next update: Sun 11 May 2025 17:00:13 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: 3T6SUfwUDj4zMLzzC6bniblHFP6UteRGT+4u6P8v8dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:e4:3b:fb:2e:56:86:6b:2d:b7:e0:d0:93:6a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: May 10 17:00:13 2025 GMT
Not After : May 11 17:00:13 2025 GMT
Subject: CN=e26f5c95e60e3eb3c581ec2c4f8ae86b359830ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:81:28:c8:e8:53:33:f9:b8:85:40:c6:39:
51:a7:de:0f:71:93:b9:11:4f:40:32:6c:65:e3:b2:
69:1d:d9:9a:71:78:a8:26:3e:2d:a2:6e:bd:ac:da:
48:a5:61:26:7b:23:f0:f3:bd:46:9f:e8:4b:0a:4d:
1d:96:82:03:78:38:99:a3:fb:0e:76:eb:8b:25:fc:
86:de:b3:94:1d:63:d7:01:1b:0c:20:cc:21:d0:d0:
db:a8:fd:43:08:f4:1c:7c:ba:eb:4d:1b:b2:50:df:
23:fd:48:f5:61:1d:f7:5a:c0:67:f1:4f:43:de:dd:
7c:21:a8:cb:61:0f:7a:b7:c5:99:69:23:86:57:51:
91:e0:bb:1c:87:51:e2:4f:2d:be:fd:a7:ce:a6:b2:
32:83:b9:5a:f4:49:22:cb:ad:c8:14:82:41:06:8b:
4f:32:9c:30:0a:14:4a:b5:6b:7b:38:a1:2c:27:b0:
27:5d:4f:71:9a:10:4a:dd:52:83:6d:3f:85:83:b1:
47:e3:99:fe:2a:f0:1f:d8:81:d0:31:ae:f7:72:94:
8c:61:ca:25:03:dc:06:3b:c1:c9:bc:e0:f4:e0:81:
10:ae:60:65:23:9a:b8:de:31:4a:77:ca:fe:ba:88:
4f:47:c6:5e:b5:f8:7c:98:02:eb:95:35:46:61:9c:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:5C:95:E6:0E:3E:B3:C5:81:EC:2C:4F:8A:E8:6B:35:98:30:FF
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:82:36:d8:69:4b:24:5d:52:08:78:12:ee:3f:03:e8:e0:e7:
14:9f:b3:c5:43:e5:81:89:99:b7:02:5c:7e:65:5f:d8:c5:cd:
94:7d:fa:2c:b8:f9:9a:27:d6:00:c6:88:35:a5:84:78:9e:3c:
73:84:d3:e9:ce:6d:1c:ea:69:66:fe:38:83:bf:1a:29:63:7f:
5d:6b:2c:87:0b:66:50:45:38:95:cb:c5:c4:af:b9:73:42:34:
7e:4a:d9:d1:76:7e:6a:b1:db:34:05:76:7d:5e:76:18:59:70:
82:3f:87:fb:a6:27:b5:45:d9:56:c0:cb:ef:55:90:2a:d6:01:
1d:d6:56:06:8e:c0:f2:9e:1b:97:f8:c5:d5:26:89:75:08:a5:
5c:8d:00:66:fa:a7:c9:ae:6c:37:4f:dc:a0:16:0d:d8:ee:e3:
a9:09:2f:1c:9a:a6:d3:01:19:5e:c4:19:b4:4c:7c:21:89:c0:
06:d4:13:ac:92:09:d9:69:cb:4e:37:bd:b4:a2:9f:f0:92:79:
b5:64:74:ed:8e:28:af:fb:f8:59:62:90:3c:32:bd:89:e2:5a:
80:ef:e5:2a:85:db:40:d4:23:1b:e0:e5:b1:76:5d:09:ab:72:
f5:94:12:1f:c0:a0:bd:e1:98:69:92:3d:79:5e:ef:f5:5b:46:
82:11:ae:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7I+Q7+y5Whmstt+DQk2r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3
MzEyMjAwHhcNMjUwNTEwMTcwMDEzWhcNMjUwNTExMTcwMDEzWjAzMTEwLwYDVQQD
EyhlMjZmNWM5NWU2MGUzZWIzYzU4MWVjMmM0ZjhhZTg2YjM1OTgzMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/OBKMjoUzP5uIVAxjlRp94PcZO5
EU9AMmxl47JpHdmacXioJj4tom69rNpIpWEmeyPw871Gn+hLCk0dloIDeDiZo/sO
duuLJfyG3rOUHWPXARsMIMwh0NDbqP1DCPQcfLrrTRuyUN8j/Uj1YR33WsBn8U9D
3t18IajLYQ96t8WZaSOGV1GR4Lsch1HiTy2+/afOprIyg7la9Ekiy63IFIJBBotP
MpwwChRKtWt7OKEsJ7AnXU9xmhBK3VKDbT+Fg7FH45n+KvAf2IHQMa73cpSMYcol
A9wGO8HJvOD04IEQrmBlI5q43jFKd8r+uohPR8Zetfh8mALrlTVGYZzPuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJvXJXmDj6zxYHsLE+K6Gs1mDD/MB8GA1UdIwQY
MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt
ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5
LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYI22GlL
JF1SCHgS7j8D6ODnFJ+zxUPlgYmZtwJcfmVf2MXNlH36LLj5mifWAMaINaWEeJ48
c4TT6c5tHOppZv44g78aKWN/XWsshwtmUEU4lcvFxK+5c0I0fkrZ0XZ+arHbNAV2
fV52GFlwgj+H+6YntUXZVsDL71WQKtYBHdZWBo7A8p4bl/jF1SaJdQilXI0AZvqn
ya5sN0/coBYN2O7jqQkvHJqm0wEZXsQZtEx8IYnABtQTrJIJ2WnLTje9tKKf8JJ5
tWR07Y4or/v4WWKQPDK9ieJagO/lKoXbQNQjG+DlsXZdCaty9ZQSH8CgveGYaZI9
eV7v9VtGghGusw==
-----END CERTIFICATE-----
Generated at Sun May 11 02:32:27 2025 by rpki-client