Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: zYedkQtYII3TI67DxCKV+cnThPj7+c84QW5IAggnCIk=
Subject key identifier: 84:E3:59:AB:C0:F0:6E:D3:1D:E2:29:FF:15:DB:63:92:82:E8:F8:4A
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0196D2BF4E0E929FD731A182BD095591B6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0762
Signing time: Thu 15 May 2025 07:01:14 +0000
Manifest this update: Thu 15 May 2025 07:01:14 +0000
Manifest next update: Fri 16 May 2025 07:01:14 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: ksVIxXwCtxg7BUDB8BkMPtA085fhx3lzHZ7YRXv2eYs=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:4e:0e:92:9f:d7:31:a1:82:bd:09:55:91:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: May 15 07:01:14 2025 GMT
Not After : May 16 07:01:14 2025 GMT
Subject: CN=84e359abc0f06ed31de229ff15db639282e8f84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:87:e8:04:40:2c:10:2f:f0:f7:42:95:8e:
9d:e7:eb:20:72:0b:8e:94:6a:c0:d6:a6:28:5a:23:
1d:9d:9f:f1:ae:c6:c8:ab:3f:74:e7:f8:e8:80:2a:
be:fb:40:c2:6f:21:8a:02:2e:68:cf:b0:b3:b1:4e:
b9:ac:a9:47:f1:90:0f:f1:aa:72:09:b7:be:28:ea:
d8:19:6f:3d:d0:3d:d8:ca:7f:38:75:67:9b:23:2a:
7f:a1:28:5b:df:3c:ef:24:fb:cb:97:a1:39:08:1a:
43:87:64:2a:ec:02:74:df:0c:c0:ad:0d:a9:eb:2d:
b2:68:59:5f:15:14:75:f7:bf:19:0e:90:75:b0:04:
6f:bf:a8:31:a2:c7:07:88:9e:84:b1:53:38:5e:62:
f0:b8:b5:e9:72:f5:5d:d7:f6:1d:a5:90:36:a0:69:
57:40:91:1b:a4:cd:76:9f:29:86:a6:04:a2:93:a2:
5a:e8:1c:34:58:04:eb:53:bf:34:2e:8b:bc:68:c6:
24:71:3d:d5:f6:6b:c0:2e:15:f4:14:39:5a:a0:8b:
25:c1:8c:c8:0a:f1:17:30:15:ff:29:63:15:df:04:
e9:dd:ea:fe:8d:aa:b0:2f:9c:c2:24:37:27:3f:47:
a8:23:22:61:a0:a6:33:3a:59:b2:86:5e:69:7e:7d:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:59:AB:C0:F0:6E:D3:1D:E2:29:FF:15:DB:63:92:82:E8:F8:4A
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d8:30:40:3d:eb:31:7b:39:56:e0:31:44:ef:cd:ed:ef:6b:
c5:c6:fe:e0:32:68:d3:21:db:03:18:38:ff:48:f0:67:84:81:
a5:c8:1d:7f:52:45:11:8e:a2:84:9b:ff:94:03:d8:2a:50:31:
85:04:48:42:2a:44:c5:92:5d:c8:e5:81:b1:08:d8:14:a7:19:
90:19:3b:43:b9:5e:e6:84:b1:eb:1d:03:00:8f:b6:a9:9c:be:
d6:d2:97:4e:a5:bf:8b:0f:6a:fb:8d:75:f9:37:ea:09:6f:4b:
6a:dc:83:94:fe:60:9c:12:0a:0b:b0:f9:b1:7c:80:ba:27:f8:
ab:05:58:2f:04:a8:6c:6d:88:96:42:a0:d9:ca:45:bd:de:a2:
f1:8c:98:ee:16:5c:4e:4f:ab:4c:17:b2:ab:70:38:80:0f:d7:
82:59:99:f0:f8:ed:e3:25:78:48:e1:98:05:03:77:ae:a6:6c:
eb:46:6f:21:f5:85:30:58:e1:8a:da:21:0d:fe:35:cf:2e:2f:
49:a9:30:73:4c:c7:ca:0c:59:96:b1:37:43:ed:d6:1e:ce:fd:
30:3c:18:46:ca:38:94:e0:67:79:c2:4b:25:73:74:86:5f:7b:
92:9b:ab:b2:bf:88:4d:0c:75:84:fd:f0:50:9e:16:e8:c9:63:
72:67:1f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSv04Okp/XMaGCvQlVkbbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3
OWU3ZmYwHhcNMjUwNTE1MDcwMTE0WhcNMjUwNTE2MDcwMTE0WjAzMTEwLwYDVQQD
Eyg4NGUzNTlhYmMwZjA2ZWQzMWRlMjI5ZmYxNWRiNjM5MjgyZThmODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/iH6ARALBAv8PdClY6d5+sgcguO
lGrA1qYoWiMdnZ/xrsbIqz905/jogCq++0DCbyGKAi5oz7CzsU65rKlH8ZAP8apy
Cbe+KOrYGW890D3Yyn84dWebIyp/oShb3zzvJPvLl6E5CBpDh2Qq7AJ03wzArQ2p
6y2yaFlfFRR1978ZDpB1sARvv6gxoscHiJ6EsVM4XmLwuLXpcvVd1/YdpZA2oGlX
QJEbpM12nymGpgSik6Ja6Bw0WATrU780Lou8aMYkcT3V9mvALhX0FDlaoIslwYzI
CvEXMBX/KWMV3wTp3er+jaqwL5zCJDcnP0eoIyJhoKYzOlmyhl5pfn2pJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITjWavA8G7THeIp/xXbY5KC6PhKMB8GA1UdIwQY
MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt
YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy
LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdgwQD3r
MXs5VuAxRO/N7e9rxcb+4DJo0yHbAxg4/0jwZ4SBpcgdf1JFEY6ihJv/lAPYKlAx
hQRIQipExZJdyOWBsQjYFKcZkBk7Q7le5oSx6x0DAI+2qZy+1tKXTqW/iw9q+411
+TfqCW9LatyDlP5gnBIKC7D5sXyAuif4qwVYLwSobG2IlkKg2cpFvd6i8YyY7hZc
Tk+rTBeyq3A4gA/XglmZ8Pjt4yV4SOGYBQN3rqZs60ZvIfWFMFjhitohDf41zy4v
Sakwc0zHygxZlrE3Q+3WHs79MDwYRso4lOBnecJLJXN0hl97kpursr+ITQx1hP3w
UJ4W6MljcmcfVA==
-----END CERTIFICATE-----
Generated at Thu May 15 10:08:26 2025 by rpki-client