Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: k47BAHfNoXeog6Qg+wL1mPrlxBl/runHFLf9wRXLz/w=
Subject key identifier: EC:1D:0F:20:83:70:67:68:42:CB:EE:DB:FC:4F:8A:8A:88:91:87:57
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 0196AC55E8F758D1F9981B04D0BA438B4653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 20:00:33 +0000
Manifest this update: Wed 07 May 2025 20:00:33 +0000
Manifest next update: Thu 08 May 2025 20:00:33 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: 22EXxfYdZMEi42RcxmIbER4dN7yWhahaOvonOuihvXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:e8:f7:58:d1:f9:98:1b:04:d0:ba:43:8b:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: May 7 20:00:33 2025 GMT
Not After : May 8 20:00:33 2025 GMT
Subject: CN=ec1d0f208370676842cbeedbfc4f8a8a88918757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:34:f3:3a:b8:de:6c:7c:2e:e1:8f:71:0b:
96:3c:da:4d:39:9e:03:d1:33:bd:96:2d:cf:5d:e7:
80:87:1e:ff:34:29:d9:27:3e:2d:d2:cd:35:a5:6a:
0c:71:fd:cc:75:57:85:c2:63:d1:c3:58:cb:5f:d9:
2c:69:8f:07:2d:5b:e9:f5:08:4d:46:40:fa:e4:db:
4c:f0:01:85:35:15:3e:bf:a0:d9:61:43:ee:6e:9d:
79:a8:a4:9e:04:48:d9:9d:82:2e:f8:ea:5f:9c:09:
07:0f:5e:d0:5f:61:e5:e6:81:05:4e:c1:c9:4d:d6:
39:0e:b8:1c:e3:9a:7d:c2:95:7a:86:08:45:0d:4f:
8b:5c:a6:ec:56:b9:e2:cf:8b:6c:d8:04:8b:f6:81:
aa:91:5e:ba:a2:f9:27:ce:b6:a3:1d:c3:b8:fc:74:
1f:7b:84:1a:29:e0:27:0e:12:63:28:c4:75:36:3c:
dc:47:31:7e:ba:02:0c:06:c2:a3:ff:6d:9b:0e:a7:
08:4e:68:f1:7d:7c:b7:f2:2e:70:e7:83:04:c7:14:
96:71:02:f9:8b:22:1d:09:8e:65:ec:86:17:cd:ff:
93:6f:dd:e1:e8:d4:a8:78:9e:11:8d:27:61:fc:c8:
83:30:7f:20:10:44:3f:4c:f1:88:40:04:14:f4:01:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:0F:20:83:70:67:68:42:CB:EE:DB:FC:4F:8A:8A:88:91:87:57
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:63:11:42:aa:94:42:7e:c4:a3:d3:32:f3:9a:1e:b5:f2:
fd:53:38:36:a1:4e:1e:29:ee:49:d4:a9:87:08:78:29:1b:59:
4e:63:54:0f:bf:76:c0:7c:9d:29:79:af:99:f2:59:0a:ca:6c:
9b:9d:50:5d:47:3a:c5:cf:d5:00:d2:65:d8:4a:7f:a2:aa:29:
86:ac:0e:6f:73:c7:33:f4:24:55:f3:0c:2f:5f:a9:5c:a9:f7:
67:e7:f1:b4:f5:4e:01:73:cc:82:fe:2f:20:25:44:c1:18:66:
51:ac:2b:0f:a6:2a:15:62:2a:5f:17:35:9e:5b:3a:e7:44:f2:
b6:21:08:18:81:57:cc:df:47:0e:f6:16:92:09:d4:e2:58:bc:
ee:e0:27:b9:17:0e:1b:fb:de:98:b4:ac:6e:41:30:cb:97:47:
19:91:a2:1d:d4:75:b1:06:07:43:ce:77:fd:9c:40:f2:f8:cf:
47:ad:05:4f:ca:2d:e2:1f:39:a6:bc:ae:b5:5a:c9:56:60:34:
96:ed:2c:14:24:4b:20:27:8c:78:97:bd:3c:b1:b7:45:9a:48:
0f:c2:c2:be:1e:53:27:a9:13:ad:ae:61:5e:5b:ae:fe:0d:76:
a7:62:85:b0:5e:ea:be:31:73:5e:b4:80:29:83:b4:a2:17:0c:
b5:d3:1e:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasVej3WNH5mBsE0LpDi0ZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl
YTUwN2YwHhcNMjUwNTA3MjAwMDMzWhcNMjUwNTA4MjAwMDMzWjAzMTEwLwYDVQQD
EyhlYzFkMGYyMDgzNzA2NzY4NDJjYmVlZGJmYzRmOGE4YTg4OTE4NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOw08zq43mx8LuGPcQuWPNpNOZ4D
0TO9li3PXeeAhx7/NCnZJz4t0s01pWoMcf3MdVeFwmPRw1jLX9ksaY8HLVvp9QhN
RkD65NtM8AGFNRU+v6DZYUPubp15qKSeBEjZnYIu+OpfnAkHD17QX2Hl5oEFTsHJ
TdY5Drgc45p9wpV6hghFDU+LXKbsVrniz4ts2ASL9oGqkV66ovknzrajHcO4/HQf
e4QaKeAnDhJjKMR1NjzcRzF+ugIMBsKj/22bDqcITmjxfXy38i5w54MExxSWcQL5
iyIdCY5l7IYXzf+Tb93h6NSoeJ4RjSdh/MiDMH8gEEQ/TPGIQAQU9AGKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwdDyCDcGdoQsvu2/xPioqIkYdXMB8GA1UdIwQY
MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt
NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz
LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6NjEUKq
lEJ+xKPTMvOaHrXy/VM4NqFOHinuSdSphwh4KRtZTmNUD792wHydKXmvmfJZCsps
m51QXUc6xc/VANJl2Ep/oqophqwOb3PHM/QkVfMML1+pXKn3Z+fxtPVOAXPMgv4v
ICVEwRhmUawrD6YqFWIqXxc1nls650TytiEIGIFXzN9HDvYWkgnU4li87uAnuRcO
G/vemLSsbkEwy5dHGZGiHdR1sQYHQ853/ZxA8vjPR60FT8ot4h85pryutVrJVmA0
lu0sFCRLICeMeJe9PLG3RZpID8LCvh5TJ6kTra5hXluu/g12p2KFsF7qvjFzXrSA
KYO0ohcMtdMeJg==
-----END CERTIFICATE-----
Generated at Thu May 8 03:29:03 2025 by rpki-client