Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: D90i8JhyAuaasQyQR1djt2Vam9x6JUMWo3DRHPaQ2wM=
Subject key identifier: 2F:93:50:45:8D:1B:C6:2C:18:97:E7:13:C5:1D:8B:31:64:66:DB:12
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0196C615EBE57A0A8BD297D158A910E2056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1568
Signing time: Mon 12 May 2025 20:00:47 +0000
Manifest this update: Mon 12 May 2025 20:00:47 +0000
Manifest next update: Tue 13 May 2025 20:00:47 +0000
Files and hashes: 1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: zGnR6GLJuE85VUv2HIx0pvXg2Mbx28X9v4u9TGA9I6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:eb:e5:7a:0a:8b:d2:97:d1:58:a9:10:e2:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: May 12 20:00:47 2025 GMT
Not After : May 13 20:00:47 2025 GMT
Subject: CN=2f9350458d1bc62c1897e713c51d8b316466db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:4a:35:65:69:cc:4d:8f:d1:7e:bb:83:ac:
f9:f9:19:ba:07:74:8d:ff:9f:6e:7a:77:5a:3a:7e:
8e:d6:63:74:f7:a1:a8:5c:fe:98:0f:55:51:65:7d:
95:ca:9b:f4:3d:b1:4d:92:f1:42:6a:51:99:69:28:
8b:09:33:71:f7:47:db:f7:17:64:9d:37:7c:31:09:
27:5a:07:d6:e6:a6:77:bd:52:ee:73:63:50:76:50:
16:97:2b:0b:1b:7b:3d:f7:16:c8:21:ea:b5:9e:fc:
1f:89:91:72:02:e4:7c:f8:5e:97:86:d2:09:9d:21:
55:64:07:7c:8d:9f:12:3e:01:01:10:77:6d:3d:64:
a0:4a:64:e3:60:83:2c:1e:13:64:1b:61:78:4a:6b:
75:c9:b1:0d:1d:d7:e0:c6:fd:90:f0:e8:f1:25:36:
09:26:76:6a:ad:50:dc:bc:09:58:f5:15:fb:7d:6e:
a9:d4:96:91:10:c1:eb:0e:33:d2:28:18:1c:83:41:
f6:f3:ab:d5:ef:61:5e:a1:6a:6c:d0:88:eb:52:f6:
f9:31:15:7f:93:23:8d:bf:1a:2d:97:12:11:89:04:
81:56:0e:15:81:cf:51:ff:00:7d:9c:0c:41:16:37:
3e:ed:d4:15:10:28:95:2a:28:10:39:d2:08:52:02:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:50:45:8D:1B:C6:2C:18:97:E7:13:C5:1D:8B:31:64:66:DB:12
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:1d:5a:76:7e:70:5d:e9:b1:56:36:bf:3a:2f:d0:57:3c:
b5:d7:2a:2b:a0:80:df:68:f2:f1:f8:61:3b:80:2b:d2:91:82:
bd:5d:5b:a7:71:6c:6f:7b:0c:83:ce:54:6e:57:2b:0d:e9:fe:
29:b6:7c:29:60:df:2d:e1:96:c5:84:f2:66:1f:6d:d3:93:34:
22:d2:26:dd:fc:71:d1:36:4e:5c:ea:65:3d:b0:b8:42:ca:b0:
3e:07:c0:c1:94:51:66:e0:b9:3c:f7:57:c2:70:11:b5:54:65:
21:4e:ea:d7:a0:ef:2b:a2:c3:c4:33:48:91:47:c4:75:f5:0d:
60:52:d2:7e:36:0d:4f:35:e7:98:b0:33:37:25:67:c7:e8:2a:
9e:37:4e:c3:02:9e:47:2b:bc:ff:fb:82:89:fd:70:f3:0d:2a:
19:52:24:ee:c7:a9:7c:8a:f6:a2:42:01:88:88:9c:c3:f9:7b:
bf:09:fd:b6:57:59:71:c3:36:39:b6:10:56:e5:00:97:9c:f9:
37:07:f9:11:30:c2:f8:99:fc:76:d6:ed:f9:16:ea:b8:b5:86:
9d:6c:83:16:1a:66:8b:8f:1b:6f:09:3f:8a:b3:7f:ab:b8:ed:
4b:62:32:2d:87:bb:34:c3:ef:ac:e1:7a:ea:d6:5c:d3:b3:44:
13:84:da:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFevlegqL0pfRWKkQ4gVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm
OWQxNTUwHhcNMjUwNTEyMjAwMDQ3WhcNMjUwNTEzMjAwMDQ3WjAzMTEwLwYDVQQD
EygyZjkzNTA0NThkMWJjNjJjMTg5N2U3MTNjNTFkOGIzMTY0NjZkYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uJKNWVpzE2P0X67g6z5+Rm6B3SN
/59uendaOn6O1mN096GoXP6YD1VRZX2Vypv0PbFNkvFCalGZaSiLCTNx90fb9xdk
nTd8MQknWgfW5qZ3vVLuc2NQdlAWlysLG3s99xbIIeq1nvwfiZFyAuR8+F6XhtIJ
nSFVZAd8jZ8SPgEBEHdtPWSgSmTjYIMsHhNkG2F4Smt1ybENHdfgxv2Q8OjxJTYJ
JnZqrVDcvAlY9RX7fW6p1JaREMHrDjPSKBgcg0H286vV72FeoWps0IjrUvb5MRV/
kyONvxotlxIRiQSBVg4Vgc9R/wB9nAxBFjc+7dQVECiVKigQOdIIUgJJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+TUEWNG8YsGJfnE8UdizFkZtsSMB8GA1UdIwQY
MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt
NDdkOThlNTg1NDVhLzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh
LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG4dWnZ+
cF3psVY2vzov0Fc8tdcqK6CA32jy8fhhO4Ar0pGCvV1bp3Fsb3sMg85UblcrDen+
KbZ8KWDfLeGWxYTyZh9t05M0ItIm3fxx0TZOXOplPbC4QsqwPgfAwZRRZuC5PPdX
wnARtVRlIU7q16DvK6LDxDNIkUfEdfUNYFLSfjYNTzXnmLAzNyVnx+gqnjdOwwKe
Ryu8//uCif1w8w0qGVIk7sepfIr2okIBiIicw/l7vwn9tldZccM2ObYQVuUAl5z5
Nwf5ETDC+Jn8dtbt+RbquLWGnWyDFhpmi48bbwk/irN/q7jtS2IyLYe7NMPvrOF6
6tZc07NEE4TaLA==
-----END CERTIFICATE-----
Generated at Tue May 13 00:57:43 2025 by rpki-client