
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: G0qQbppj2rGH/I6Xd6ysDTPFlJclXrAYaD/W2N54dKk=
Subject key identifier: 1E:10:2B:D1:A2:50:A1:BA:1C:FE:88:34:07:30:B6:50:92:87:50:83
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0196B8FE96FAD79FBC196DBDFAC5BE61A2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0C62
Signing time: Sat 10 May 2025 07:00:14 +0000
Manifest this update: Sat 10 May 2025 07:00:14 +0000
Manifest next update: Sun 11 May 2025 07:00:14 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: dP9IsW1FRGbBrFzXkUo704zz24Ho2o3aVVS+Y82RfmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:96:fa:d7:9f:bc:19:6d:bd:fa:c5:be:61:a2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: May 10 07:00:14 2025 GMT
Not After : May 11 07:00:14 2025 GMT
Subject: CN=1e102bd1a250a1ba1cfe88340730b65092875083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:41:1c:85:83:b6:31:27:5a:c8:46:82:42:
ac:e9:7e:e0:41:e0:2b:cb:4d:18:1f:57:e6:ea:a0:
f1:e8:6c:3c:21:ec:2d:0d:46:28:85:33:e7:05:c2:
74:3a:6f:e3:32:c9:de:a6:3e:05:0b:2d:23:ae:f5:
c8:9d:3e:16:2a:95:3d:66:8c:b6:ae:aa:d0:c6:64:
6c:a2:13:6b:28:e7:0b:34:16:ed:70:b1:fa:d5:8c:
17:fe:47:3c:95:78:58:37:e3:83:66:de:51:8b:67:
f8:f4:91:94:48:ee:45:d5:8f:c6:f4:16:ff:50:5a:
10:3d:3a:c4:c7:a5:5a:37:ba:53:99:de:4a:be:e5:
34:14:fc:fe:2d:fa:b0:27:a2:8e:fb:9e:6a:a2:ba:
e5:25:73:46:dd:6f:ce:75:7d:07:53:64:51:6b:ae:
1f:98:c0:3a:cb:34:2e:4c:70:a6:b1:4c:b0:68:9a:
18:ce:3e:47:65:06:ad:33:c2:95:d3:fc:31:08:8a:
4e:dc:c5:05:f0:8b:21:b6:ad:04:d4:f8:a9:8e:ce:
ce:2f:60:87:da:6e:b1:3d:5d:8d:d2:73:71:0a:41:
f2:c2:8c:11:16:55:42:b7:01:21:0d:aa:04:03:b6:
f5:ca:12:b9:c1:0d:b7:36:35:01:25:a7:6f:a2:ae:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:2B:D1:A2:50:A1:BA:1C:FE:88:34:07:30:B6:50:92:87:50:83
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1b:ab:f8:a6:0b:8e:82:1a:7c:04:0a:be:6d:ac:96:23:84:
a5:63:0a:29:e8:10:1c:1b:7e:36:a2:7f:c4:a1:c4:65:a9:b4:
41:e7:d4:1a:16:e2:7e:a0:42:c0:e7:c0:32:48:7b:ff:39:c3:
97:d6:2d:8a:fd:a9:07:e3:1d:c5:df:a3:1e:ac:30:f8:1b:a4:
8a:e9:6c:b1:23:88:14:0a:c8:9e:5b:d1:2a:b5:ee:ef:49:c2:
a9:8e:82:5e:56:c0:89:6b:4b:53:12:de:0c:c5:4c:fc:a3:0f:
23:c1:01:2d:26:da:45:a2:d5:6c:d6:00:0c:af:e4:70:25:85:
ea:e7:5d:fc:ad:db:2f:3f:c2:13:1b:8e:e5:63:68:90:d6:cf:
1e:3a:b7:3b:32:f2:9e:76:a2:9a:05:58:1c:a8:b1:dd:03:ef:
1b:d5:66:fe:5e:3a:2d:fa:75:e4:73:0b:e4:51:55:7c:b0:59:
cd:9b:23:c5:ab:bd:f7:b0:66:33:a8:28:82:a3:77:e6:20:2b:
c5:5b:7b:ca:1f:16:2e:a5:d6:5d:5f:79:b6:83:16:01:f6:04:
0a:1d:db:88:58:ea:20:89:ad:60:88:c1:95:16:d4:46:0b:82:
2a:0b:b0:c9:95:e5:92:33:50:28:19:a7:e9:1c:4e:b0:f2:02:
8a:9c:f2:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/pb615+8GW29+sW+YaLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjUwNTEwMDcwMDE0WhcNMjUwNTExMDcwMDE0WjAzMTEwLwYDVQQD
EygxZTEwMmJkMWEyNTBhMWJhMWNmZTg4MzQwNzMwYjY1MDkyODc1MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvNBHIWDtjEnWshGgkKs6X7gQeAr
y00YH1fm6qDx6Gw8IewtDUYohTPnBcJ0Om/jMsnepj4FCy0jrvXInT4WKpU9Zoy2
rqrQxmRsohNrKOcLNBbtcLH61YwX/kc8lXhYN+ODZt5Ri2f49JGUSO5F1Y/G9Bb/
UFoQPTrEx6VaN7pTmd5KvuU0FPz+LfqwJ6KO+55qorrlJXNG3W/OdX0HU2RRa64f
mMA6yzQuTHCmsUywaJoYzj5HZQatM8KV0/wxCIpO3MUF8Ishtq0E1Pipjs7OL2CH
2m6xPV2N0nNxCkHywowRFlVCtwEhDaoEA7b1yhK5wQ23NjUBJadvoq5OswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4QK9GiUKG6HP6INAcwtlCSh1CDMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRur+KYL
joIafAQKvm2sliOEpWMKKegQHBt+NqJ/xKHEZam0QefUGhbifqBCwOfAMkh7/znD
l9Ytiv2pB+Mdxd+jHqww+BukiulssSOIFArInlvRKrXu70nCqY6CXlbAiWtLUxLe
DMVM/KMPI8EBLSbaRaLVbNYADK/kcCWF6udd/K3bLz/CExuO5WNokNbPHjq3OzLy
nnaimgVYHKix3QPvG9Vm/l46Lfp15HML5FFVfLBZzZsjxau997BmM6gogqN35iAr
xVt7yh8WLqXWXV95toMWAfYECh3biFjqIImtYIjBlRbURguCKguwyZXlkjNQKBmn
6RxOsPICipzywg==
-----END CERTIFICATE-----
Generated at Sat May 10 16:58:09 2025 by rpki-client