Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier: B2wil8ybnr7oaOfCKwM2nr2ESAWnlZ/s9+ysQW3yGww=
Subject key identifier: 31:AD:77:23:15:DC:73:CE:BF:C8:7A:4E:4E:20:41:9C:B1:2C:8A:91
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 0196DD0B92863A5A9CB61525542FD3C40513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number: 0CD1
Signing time: Sat 17 May 2025 07:00:45 +0000
Manifest this update: Sat 17 May 2025 07:00:45 +0000
Manifest next update: Sun 18 May 2025 07:00:45 +0000
Files and hashes: 1: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (hash: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=)
2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: Oj+aOT6qny29LUIXYbakw1f8WbaUEv3MLzTVj28gb8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:0b:92:86:3a:5a:9c:b6:15:25:54:2f:d3:c4:05:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: May 17 07:00:45 2025 GMT
Not After : May 18 07:00:45 2025 GMT
Subject: CN=31ad772315dc73cebfc87a4e4e20419cb12c8a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:e0:07:0b:77:2a:54:b0:e1:8c:81:08:f0:
1e:e0:18:23:f6:8b:bf:c4:9f:33:35:18:e7:9f:07:
ba:e1:ef:40:7c:e5:b4:61:1a:88:8d:b3:60:d3:5d:
07:11:a4:fb:5e:bc:f9:68:04:fe:02:33:c0:99:10:
c9:b1:b5:c6:7b:b3:5f:cc:26:4a:c2:f5:21:54:2e:
f9:50:24:c9:d2:35:c7:5c:27:d1:d2:49:c3:b7:08:
af:a7:5e:60:fe:df:ca:03:66:3c:b8:0d:cf:fe:36:
9c:50:a4:53:f7:23:a1:81:f1:4f:39:81:fc:c5:c2:
b5:6b:3c:6e:58:39:ae:04:04:9c:c7:be:b9:58:84:
bb:9d:8b:27:2c:16:3e:cb:3d:96:52:71:ed:4b:ca:
80:5b:c8:62:ca:f8:62:dd:cc:a6:4d:da:4a:1a:d2:
82:4d:1f:a7:73:65:04:f0:0d:4e:ee:c9:b8:22:a7:
69:1a:bd:16:16:a5:93:c4:1c:d8:78:3a:ca:23:eb:
5e:62:de:be:9c:74:05:63:b7:2e:c2:5b:e9:fd:07:
cc:74:a7:66:0b:2d:e5:80:f5:24:b7:ca:0a:ea:93:
2b:ca:c1:be:e6:55:5c:9f:1b:ba:24:45:0c:41:7d:
77:65:81:ca:cb:50:3d:1e:f6:0f:d3:55:32:c3:a9:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AD:77:23:15:DC:73:CE:BF:C8:7A:4E:4E:20:41:9C:B1:2C:8A:91
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c6:06:ea:e9:67:21:44:40:90:0b:0e:ea:34:07:48:83:b8:
7d:3a:d3:36:82:7a:d2:7f:f1:28:91:6a:1d:be:06:84:90:43:
98:19:41:81:55:34:ec:58:c3:98:80:66:7f:04:24:79:ca:c4:
25:05:7f:74:3c:65:f4:64:4b:7b:d8:9d:16:ad:11:13:cc:f9:
b2:38:c4:1b:84:7e:e4:ef:fd:7d:eb:4c:37:79:92:01:ff:57:
03:23:52:e1:42:4f:77:47:3d:9f:f2:6d:1d:83:44:59:9e:62:
76:7a:20:9a:30:fe:0f:21:cc:72:2c:49:2f:98:23:33:23:55:
09:de:34:ae:7d:3e:8a:d0:a5:8a:83:e7:b9:1d:8a:76:c5:21:
a4:aa:a8:47:27:d2:b2:8b:32:e1:68:2e:eb:fb:48:b0:c2:53:
3f:a1:7e:6a:f4:e6:88:de:28:74:10:d7:a7:2c:59:bb:89:1f:
3a:bb:3e:79:d0:8d:a6:46:b5:2d:32:8c:3b:1b:81:7a:7b:3d:
fd:d2:bf:c6:cc:11:df:5f:82:6d:14:32:d3:7b:e7:3f:64:85:
a3:d9:8a:4a:97:e2:f1:f5:a3:bd:f1:4d:9e:8b:9d:bb:8d:c8:
b0:83:ed:ba:33:7d:52:d5:40:bc:ca:60:6d:6d:b0:c8:39:61:
d0:b4:38:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbdC5KGOlqcthUlVC/TxAUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTIzODg4ZWVkNTMxMWY5MmExNjYxNWVmMmNmMDE3NWM2
ZmU0MWUwHhcNMjUwNTE3MDcwMDQ1WhcNMjUwNTE4MDcwMDQ1WjAzMTEwLwYDVQQD
EygzMWFkNzcyMzE1ZGM3M2NlYmZjODdhNGU0ZTIwNDE5Y2IxMmM4YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjjgBwt3KlSw4YyBCPAe4Bgj9ou/
xJ8zNRjnnwe64e9AfOW0YRqIjbNg010HEaT7Xrz5aAT+AjPAmRDJsbXGe7NfzCZK
wvUhVC75UCTJ0jXHXCfR0knDtwivp15g/t/KA2Y8uA3P/jacUKRT9yOhgfFPOYH8
xcK1azxuWDmuBAScx765WIS7nYsnLBY+yz2WUnHtS8qAW8hiyvhi3cymTdpKGtKC
TR+nc2UE8A1O7sm4IqdpGr0WFqWTxBzYeDrKI+teYt6+nHQFY7cuwlvp/QfMdKdm
Cy3lgPUkt8oK6pMrysG+5lVcnxu6JEUMQX13ZYHKy1A9HvYP01Uyw6mWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGtdyMV3HPOv8h6Tk4gQZyxLIqRMB8GA1UdIwQY
MBaAFIFSOIju1TEfkqFmFe8s8Bdcb+QeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3Mjgt
MGNhZDZjYTdlY2Q3LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3MjgtMGNhZDZjYTdlY2Q3
LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8YG6uln
IURAkAsO6jQHSIO4fTrTNoJ60n/xKJFqHb4GhJBDmBlBgVU07FjDmIBmfwQkecrE
JQV/dDxl9GRLe9idFq0RE8z5sjjEG4R+5O/9fetMN3mSAf9XAyNS4UJPd0c9n/Jt
HYNEWZ5idnogmjD+DyHMcixJL5gjMyNVCd40rn0+itClioPnuR2KdsUhpKqoRyfS
sosy4Wgu6/tIsMJTP6F+avTmiN4odBDXpyxZu4kfOrs+edCNpka1LTKMOxuBens9
/dK/xswR31+CbRQy03vnP2SFo9mKSpfi8fWjvfFNnoudu43IsIPtujN9UtVAvMpg
bW2wyDlh0LQ4Rg==
-----END CERTIFICATE-----
Generated at Sat May 17 16:51:40 2025 by rpki-client