Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: O7W93WvnTAlTjHsvuiAzVMMZ0uP0VA3vULCvmq8YnhY=
Subject key identifier: 24:6C:AA:C6:15:EC:80:66:E6:AB:99:C9:92:B2:34:78:9B:67:9D:9C
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 0196CEE2D57915B0D7081012A5E2590EC899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1538
Signing time: Wed 14 May 2025 13:01:34 +0000
Manifest this update: Wed 14 May 2025 13:01:34 +0000
Manifest next update: Thu 15 May 2025 13:01:34 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: HHqenlx/Gt1P1+//pUX4jZFGUQz2wwBlYYs1ZMh4b4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:d5:79:15:b0:d7:08:10:12:a5:e2:59:0e:c8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: May 14 13:01:34 2025 GMT
Not After : May 15 13:01:34 2025 GMT
Subject: CN=246caac615ec8066e6ab99c992b234789b679d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:14:95:e0:ac:f0:b5:77:1e:85:ae:cd:cf:
b9:8d:3c:8f:ae:17:2c:01:8e:a6:e1:bc:c9:0b:fe:
be:13:e9:c3:75:b9:1a:d1:12:db:1e:a3:1d:bc:94:
26:05:b4:31:8f:66:2b:72:43:e3:2d:f0:f2:89:e7:
81:d5:11:a8:88:04:e3:e5:4f:58:5e:34:af:de:23:
da:8b:9b:22:b2:7c:9d:70:49:19:87:d4:77:dc:5f:
80:90:0a:4f:53:e9:bb:59:77:2d:f4:c7:e6:d3:f2:
1c:23:e6:54:64:8b:7c:3a:de:47:30:03:d6:18:dd:
ae:cd:9f:5a:a4:4b:f2:ce:b1:01:81:60:cc:3a:aa:
c6:5f:c8:e5:e4:e3:e4:b7:5c:bb:65:12:15:e3:d7:
79:90:ca:c4:5f:ae:35:81:60:e0:7a:83:0d:b8:43:
0b:e8:ae:38:d4:68:9f:07:00:62:6e:bd:92:cf:da:
41:9d:8e:5a:d7:b0:fb:93:3b:28:d6:5e:5a:37:aa:
9d:b2:ca:47:6b:ce:26:07:92:52:e2:a7:5a:d6:59:
94:17:fb:6e:e4:93:36:1a:f6:d3:44:29:55:6f:9b:
b7:99:da:d0:5b:a5:ba:2b:75:43:79:a5:0a:aa:57:
0e:06:30:17:6b:0c:73:58:6d:36:c9:d4:87:28:55:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:AA:C6:15:EC:80:66:E6:AB:99:C9:92:B2:34:78:9B:67:9D:9C
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:04:1e:1c:7a:e4:38:2e:93:f2:a4:bb:13:bc:88:f8:19:
58:4b:4d:d0:7c:da:55:a5:b6:45:cc:a7:bf:7f:6d:21:52:8a:
e4:95:2e:e4:da:9f:92:15:aa:47:d7:8d:99:b9:2f:22:e0:b6:
54:94:dd:51:f9:72:c8:8f:90:0b:c7:7d:4f:07:d3:56:c9:80:
69:00:fd:f2:bc:59:c3:16:0e:5f:56:72:c9:08:05:2c:36:e1:
fc:b5:81:9f:d1:a6:6a:00:19:b8:33:79:62:f8:51:e5:11:c6:
76:a5:60:92:a3:4f:8f:3e:a7:87:3a:d2:5f:ef:42:30:f1:5a:
46:7a:69:52:1e:8b:31:4f:45:76:63:ec:66:1b:3a:a6:aa:83:
1e:f8:aa:d1:73:30:74:fe:11:02:76:dc:b3:f0:81:68:cd:e6:
b5:eb:a7:d8:2e:07:1e:4b:71:83:1b:2c:7b:ae:33:66:63:c2:
33:b0:3c:54:0b:64:01:db:a7:0a:e6:f0:99:ea:6f:46:f3:24:
67:fc:fa:b8:1e:c6:0e:85:4c:68:24:cc:d1:b0:39:03:02:27:
12:ac:ae:36:ef:89:d1:32:cc:19:08:33:22:f9:f4:2f:80:b2:
66:74:a0:1e:ba:b1:d9:ae:78:f5:8c:a0:54:18:5b:d7:02:19:
a6:fc:a1:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbO4tV5FbDXCBASpeJZDsiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDE2NWU5NWEyNWEzN2I4NzNjZmJhOWY1MzI0YTdlMjUz
YmJkZDgwHhcNMjUwNTE0MTMwMTM0WhcNMjUwNTE1MTMwMTM0WjAzMTEwLwYDVQQD
EygyNDZjYWFjNjE1ZWM4MDY2ZTZhYjk5Yzk5MmIyMzQ3ODliNjc5ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh4UleCs8LV3HoWuzc+5jTyPrhcs
AY6m4bzJC/6+E+nDdbka0RLbHqMdvJQmBbQxj2YrckPjLfDyieeB1RGoiATj5U9Y
XjSv3iPai5sisnydcEkZh9R33F+AkApPU+m7WXct9Mfm0/IcI+ZUZIt8Ot5HMAPW
GN2uzZ9apEvyzrEBgWDMOqrGX8jl5OPkt1y7ZRIV49d5kMrEX641gWDgeoMNuEML
6K441GifBwBibr2Sz9pBnY5a17D7kzso1l5aN6qdsspHa84mB5JS4qda1lmUF/tu
5JM2GvbTRClVb5u3mdrQW6W6K3VDeaUKqlcOBjAXawxzWG02ydSHKFUh4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRsqsYV7IBm5quZyZKyNHibZ52cMB8GA1UdIwQY
MBaAFIABZelaJaN7hzz7qfUySn4lO73YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80YmQ0NjktNDkyNS00ZWVlLWI2YTIt
ZDlhZWI5MzA1MWFiLzEvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80YmQ0NjktNDkyNS00ZWVlLWI2YTItZDlhZWI5MzA1MWFi
LzEvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2AEHhx6
5Dguk/KkuxO8iPgZWEtN0HzaVaW2Rcynv39tIVKK5JUu5NqfkhWqR9eNmbkvIuC2
VJTdUflyyI+QC8d9TwfTVsmAaQD98rxZwxYOX1ZyyQgFLDbh/LWBn9GmagAZuDN5
YvhR5RHGdqVgkqNPjz6nhzrSX+9CMPFaRnppUh6LMU9FdmPsZhs6pqqDHviq0XMw
dP4RAnbcs/CBaM3mteun2C4HHktxgxsse64zZmPCM7A8VAtkAdunCubwmepvRvMk
Z/z6uB7GDoVMaCTM0bA5AwInEqyuNu+J0TLMGQgzIvn0L4CyZnSgHrqx2a549Yyg
VBhb1wIZpvyhDg==
-----END CERTIFICATE-----
Generated at Wed May 14 14:39:23 2025 by rpki-client