Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: 0dq80712AtD/SReTJZtK0awXvZFKgvPteZ5tX61NzQM=
Subject key identifier: 4B:0D:8B:67:49:E2:92:33:2A:E0:22:31:97:92:18:86:CA:06:0A:C0
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 0196B9A40D52272170D8335016BF5E003196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0DA5
Signing time: Sat 10 May 2025 10:00:58 +0000
Manifest this update: Sat 10 May 2025 10:00:58 +0000
Manifest next update: Sun 11 May 2025 10:00:58 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: vr8Yar/qZfFABACuXNtXX3iEwbBZvMWWH221qmk/LXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:0d:52:27:21:70:d8:33:50:16:bf:5e:00:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: May 10 10:00:58 2025 GMT
Not After : May 11 10:00:58 2025 GMT
Subject: CN=4b0d8b6749e292332ae0223197921886ca060ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:2e:07:42:e3:96:dd:72:dc:68:2a:15:f6:
94:99:65:5e:bc:5f:32:88:83:53:ab:5c:65:16:c9:
7c:c3:b1:e2:db:dd:17:19:c0:8d:86:02:c9:0c:c1:
c3:b4:07:ce:75:d4:36:f6:28:dc:31:ed:d5:19:38:
e2:0d:1c:77:17:f5:5e:b9:9c:9e:d0:31:99:4d:e0:
49:35:b7:b0:6a:c6:fe:ad:5b:c6:a2:1f:b6:0e:a8:
81:c0:ed:7a:db:c5:fe:3b:36:51:9a:c9:b4:cd:24:
0f:a1:4a:49:c2:52:70:a0:70:de:a6:32:75:63:08:
cc:71:d0:30:9a:f6:06:6a:95:76:ca:43:19:45:84:
e0:05:c3:9d:66:47:c7:73:99:5f:cb:a4:9b:19:09:
5b:7a:26:ab:39:00:58:dc:cf:62:83:fe:de:93:64:
57:82:27:48:e2:ea:1f:c1:76:e3:b6:1d:5d:ea:27:
f2:01:b9:00:26:32:e4:36:52:d6:6f:39:0b:3d:fb:
06:24:8d:e6:b3:ee:03:5d:c1:60:98:74:94:8d:58:
70:94:fe:da:33:88:1d:76:87:c7:05:ef:44:e6:b6:
ad:57:71:0f:e1:c7:6d:f0:68:59:ca:85:3e:5c:a1:
04:c6:e1:3e:15:3b:65:e3:4b:7e:a8:a5:bf:19:43:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:8B:67:49:E2:92:33:2A:E0:22:31:97:92:18:86:CA:06:0A:C0
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:74:0b:63:10:59:53:66:e5:6f:2f:84:fc:9c:c9:07:56:
72:a5:94:09:38:ca:9f:7e:ee:c1:ad:82:48:0d:2c:4d:f0:31:
9a:6d:91:32:a6:4b:67:ab:09:f8:1f:5e:a7:2b:bc:ae:17:1b:
8f:9d:8a:38:78:f9:84:06:75:e8:d6:c0:67:71:bb:06:47:56:
ae:86:45:16:21:80:44:45:1b:54:aa:38:33:e1:f1:72:00:93:
b5:39:55:4f:28:fd:f5:dd:71:6a:46:bc:6c:2f:7f:f2:40:db:
d9:4a:da:8a:82:34:b3:fa:0c:d4:8f:fb:63:52:7e:45:50:5d:
e1:35:73:ff:e6:a5:76:0d:71:e9:60:60:5d:6d:69:8d:ad:58:
9d:96:06:45:81:c8:95:3a:97:33:68:fb:34:b7:6d:0b:2b:db:
04:92:a2:25:5a:4c:86:44:d8:1e:39:6d:3a:05:59:cb:73:24:
29:19:1a:1f:0d:5d:34:c6:26:45:a9:72:5d:7a:07:c6:09:2a:
63:ad:7a:a5:4a:07:2a:83:74:16:7b:c3:6c:8a:e1:9b:93:bd:
1f:9f:d9:9f:87:0b:c5:a1:3d:69:11:06:70:58:1a:66:b8:12:
09:72:22:6a:fc:e5:e9:94:8e:d3:15:f9:b0:f2:52:67:1b:e5:
0b:a7:f3:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5pA1SJyFw2DNQFr9eADGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjY0ZDdmMTU5ZTkwMmVhNmE1YWRkN2ExMDBkYzA1ZmEx
NGE5ZWQwHhcNMjUwNTEwMTAwMDU4WhcNMjUwNTExMTAwMDU4WjAzMTEwLwYDVQQD
Eyg0YjBkOGI2NzQ5ZTI5MjMzMmFlMDIyMzE5NzkyMTg4NmNhMDYwYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AguB0Ljlt1y3GgqFfaUmWVevF8y
iINTq1xlFsl8w7Hi290XGcCNhgLJDMHDtAfOddQ29ijcMe3VGTjiDRx3F/VeuZye
0DGZTeBJNbewasb+rVvGoh+2DqiBwO1628X+OzZRmsm0zSQPoUpJwlJwoHDepjJ1
YwjMcdAwmvYGapV2ykMZRYTgBcOdZkfHc5lfy6SbGQlbeiarOQBY3M9ig/7ek2RX
gidI4uofwXbjth1d6ifyAbkAJjLkNlLWbzkLPfsGJI3ms+4DXcFgmHSUjVhwlP7a
M4gddofHBe9E5ratV3EP4cdt8GhZyoU+XKEExuE+FTtl40t+qKW/GUN2HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsNi2dJ4pIzKuAiMZeSGIbKBgrAMB8GA1UdIwQY
MBaAFIK2TX8VnpAupqWt16EA3AX6FKntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hOTk3YjYtMGJiNy00NzY2LThhY2Mt
Mjc1YWMxNDQzMzE4LzEvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hOTk3YjYtMGJiNy00NzY2LThhY2MtMjc1YWMxNDQzMzE4
LzEvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojN0C2MQ
WVNm5W8vhPycyQdWcqWUCTjKn37uwa2CSA0sTfAxmm2RMqZLZ6sJ+B9epyu8rhcb
j52KOHj5hAZ16NbAZ3G7BkdWroZFFiGAREUbVKo4M+HxcgCTtTlVTyj99d1xaka8
bC9/8kDb2UraioI0s/oM1I/7Y1J+RVBd4TVz/+aldg1x6WBgXW1pja1YnZYGRYHI
lTqXM2j7NLdtCyvbBJKiJVpMhkTYHjltOgVZy3MkKRkaHw1dNMYmRalyXXoHxgkq
Y616pUoHKoN0FnvDbIrhm5O9H5/Zn4cLxaE9aREGcFgaZrgSCXIiavzl6ZSO0xX5
sPJSZxvlC6fzfQ==
-----END CERTIFICATE-----
Generated at Sat May 10 18:44:46 2025 by rpki-client