Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: /35qGGm1xhZMc6NDmLa4nu3LknCrqOrl3ox5AIBh4fI=
Subject key identifier: A9:B5:53:10:49:7D:DB:8A:E7:92:BE:BC:A8:A2:54:90:90:22:D4:43
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0196B221269421770F4276C9813E411BC12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 23:00:38 +0000
Manifest this update: Thu 08 May 2025 23:00:38 +0000
Manifest next update: Fri 09 May 2025 23:00:38 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: COucLKqLCpR80b6SSS4SqZu74BqMumNUN7TuetJAR4I=)
3: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:26:94:21:77:0f:42:76:c9:81:3e:41:1b:c1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: May 8 23:00:38 2025 GMT
Not After : May 9 23:00:38 2025 GMT
Subject: CN=a9b55310497ddb8ae792bebca8a254909022d443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:3a:07:1b:af:17:a3:bc:e9:4e:41:a0:66:
1a:30:1e:47:5e:9a:41:9b:fc:62:85:79:b0:34:b1:
a6:97:39:7c:e4:85:d7:aa:c7:1e:86:29:cd:db:a5:
42:f2:f4:fb:bb:c3:f9:2a:ae:05:9b:7a:dc:9b:3a:
df:9d:ba:b2:63:46:2d:80:de:dc:b4:bb:0d:62:be:
29:ba:1d:6c:f9:d0:4f:0e:5b:67:7b:3f:23:ce:23:
78:38:0b:a7:48:cd:26:98:95:85:4c:f1:3c:f6:bb:
72:30:aa:d7:8d:d5:58:bb:b8:6e:2c:02:3f:7b:d5:
d6:03:1d:86:ea:4a:27:3d:e0:43:ed:98:34:8a:f3:
e5:67:cc:d6:d8:ed:40:da:4c:89:29:2f:ed:c9:e9:
ab:e1:ca:22:f0:c3:ca:00:6d:27:ce:79:15:4f:e2:
fc:21:78:20:53:45:f1:f3:84:cc:66:41:42:7f:ed:
c0:1b:cc:c9:ad:07:97:57:36:ec:06:c4:81:72:a5:
05:1b:53:25:82:33:72:16:ba:92:d9:f5:61:ad:c9:
4b:61:5f:01:39:46:b2:91:66:38:7d:d2:4e:e1:dc:
4e:dc:19:97:f9:81:f6:25:87:4e:5f:03:47:dc:11:
76:57:5d:80:f0:8c:c0:0a:28:39:87:4d:45:07:b7:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:53:10:49:7D:DB:8A:E7:92:BE:BC:A8:A2:54:90:90:22:D4:43
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:a4:1d:26:df:d9:48:c3:d6:c7:3a:09:e8:7d:98:eb:32:
a9:fa:74:e2:db:e1:79:cd:48:24:62:3f:3c:9f:cc:e4:f6:30:
a2:e3:6a:44:20:ad:65:64:57:00:14:e7:bb:ca:42:6d:79:e6:
b4:76:28:0e:f0:af:a7:80:79:cd:99:bf:ce:35:43:60:90:53:
f6:b8:3e:37:29:69:e1:ca:1d:4b:dc:64:c3:3d:56:cb:45:80:
4d:d3:94:02:a8:b7:b8:6f:ec:95:94:23:e2:7c:0e:53:0e:2b:
3b:be:06:d0:0c:d0:72:ce:f5:ff:ce:66:bb:12:81:e7:9e:49:
db:13:23:73:3a:fb:dd:bc:a4:a6:84:06:d2:c4:27:be:be:48:
e7:13:92:b7:98:af:8d:d7:22:3f:d8:bd:96:69:95:d5:4c:f6:
8a:19:af:d0:3a:f1:23:16:e6:28:3a:61:b4:f8:54:70:db:05:
81:09:81:2e:5c:3b:d2:3d:a9:10:df:92:06:ed:d8:83:5d:53:
9b:03:f4:c0:92:e8:45:4a:2c:70:8d:3f:e2:73:44:05:b3:3c:
48:bf:5f:9b:5d:f3:4c:f5:17:77:8b:71:a1:a6:de:96:e7:7e:
85:53:e9:a4:6c:c7:72:ee:e7:a3:d6:2e:36:4d:78:2a:40:41:
78:49:b4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayISaUIXcPQnbJgT5BG8EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGNkNTBkYjQzN2M3ODk0NjRjYjY0ZGZhYmZlNDA1Y2E5
ODFiMWEwHhcNMjUwNTA4MjMwMDM4WhcNMjUwNTA5MjMwMDM4WjAzMTEwLwYDVQQD
EyhhOWI1NTMxMDQ5N2RkYjhhZTc5MmJlYmNhOGEyNTQ5MDkwMjJkNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5w6BxuvF6O86U5BoGYaMB5HXppB
m/xihXmwNLGmlzl85IXXqscehinN26VC8vT7u8P5Kq4Fm3rcmzrfnbqyY0YtgN7c
tLsNYr4puh1s+dBPDltnez8jziN4OAunSM0mmJWFTPE89rtyMKrXjdVYu7huLAI/
e9XWAx2G6konPeBD7Zg0ivPlZ8zW2O1A2kyJKS/tyemr4coi8MPKAG0nznkVT+L8
IXggU0Xx84TMZkFCf+3AG8zJrQeXVzbsBsSBcqUFG1MlgjNyFrqS2fVhrclLYV8B
OUaykWY4fdJO4dxO3BmX+YH2JYdOXwNH3BF2V12A8IzACig5h01FB7fSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm1UxBJfduK55K+vKiiVJCQItRDMB8GA1UdIwQY
MBaAFIEM1Q20N8eJRky2Tfq/5AXKmBsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2Yt
NmI3NTk5ZmNkYzMzLzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2YtNmI3NTk5ZmNkYzMz
LzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF82kHSbf
2UjD1sc6Ceh9mOsyqfp04tvhec1IJGI/PJ/M5PYwouNqRCCtZWRXABTnu8pCbXnm
tHYoDvCvp4B5zZm/zjVDYJBT9rg+Nylp4codS9xkwz1Wy0WATdOUAqi3uG/slZQj
4nwOUw4rO74G0AzQcs71/85muxKB555J2xMjczr73bykpoQG0sQnvr5I5xOSt5iv
jdciP9i9lmmV1Uz2ihmv0DrxIxbmKDphtPhUcNsFgQmBLlw70j2pEN+SBu3Yg11T
mwP0wJLoRUoscI0/4nNEBbM8SL9fm13zTPUXd4txoabelud+hVPppGzHcu7no9Yu
Nk14KkBBeEm0Kw==
-----END CERTIFICATE-----
Generated at Fri May 9 01:29:24 2025 by rpki-client