Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: Z5lNysDlkGHpwktnvNPiGti1aouVfFH1dJc3o2C+sVQ=
Subject key identifier: 57:67:EA:30:D5:F8:33:53:98:37:7A:03:DB:3C:73:14:90:64:88:2B
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 0196ABE7CB7E547DC8910E129CCFC61220B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0C11
Signing time: Wed 07 May 2025 18:00:16 +0000
Manifest this update: Wed 07 May 2025 18:00:16 +0000
Manifest next update: Thu 08 May 2025 18:00:16 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: mFL2qg2bjbbP40ZU+/1BtqIxI7oRUwMN0PoH038tgmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e7:cb:7e:54:7d:c8:91:0e:12:9c:cf:c6:12:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: May 7 18:00:16 2025 GMT
Not After : May 8 18:00:16 2025 GMT
Subject: CN=5767ea30d5f8335398377a03db3c73149064882b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:17:15:ed:83:10:06:22:55:67:4e:01:68:
10:0e:60:05:7a:12:2a:b0:f3:21:ee:05:a6:b2:95:
43:5c:95:dc:78:de:65:de:c2:af:6d:87:06:24:ef:
08:ae:30:1d:d6:b8:03:81:9a:fd:fc:41:b6:e3:c6:
f1:d9:b1:f8:6c:d3:21:58:d0:68:82:a2:d5:4f:97:
31:3d:2c:db:8f:68:44:d2:9b:3e:83:c1:b0:ae:62:
ec:91:aa:17:8e:36:a5:7f:ce:8d:26:03:e2:9c:00:
ab:99:bb:33:86:ff:e1:9c:23:3c:b1:85:af:98:4b:
df:75:a4:82:53:ef:e1:e5:e3:12:6e:1c:4a:c2:35:
a3:81:3c:3c:82:84:41:c3:05:c9:a4:e1:d5:7b:72:
95:a7:64:60:4e:11:53:a7:9e:62:d7:8a:27:87:ec:
93:8e:60:7c:31:87:8d:7f:70:46:f4:b8:99:9b:dd:
82:77:96:42:cc:6e:d7:aa:2f:a0:dc:38:cc:de:1d:
b6:b0:de:fd:4b:b2:6a:ac:aa:e1:21:0e:ce:2f:e7:
ba:4e:f5:67:f9:13:5f:9b:3c:de:1b:23:b1:b2:6e:
7f:cd:30:34:02:c0:1c:3e:82:54:f3:4a:f2:a3:bd:
dc:fa:cb:d0:2a:54:07:4c:6c:e7:07:47:ee:39:f4:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:67:EA:30:D5:F8:33:53:98:37:7A:03:DB:3C:73:14:90:64:88:2B
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:14:75:69:f1:f3:f2:53:7e:78:b6:7c:8e:7d:b7:da:67:55:
cc:70:8b:66:6b:10:ef:1a:c0:f7:02:e3:11:df:6b:37:ff:c3:
60:36:19:84:04:b4:0c:c1:11:05:c7:67:ea:d2:cf:b6:e2:67:
96:4d:b5:98:79:83:84:85:af:3f:e9:a5:f9:b8:ac:5f:f2:c2:
b5:62:8c:ed:26:0f:bd:cd:2f:67:b9:2f:fe:a2:e1:d0:6d:7a:
de:14:a5:a0:b1:ab:74:22:8b:f0:53:a2:0d:d4:c2:cf:15:95:
78:1c:10:a5:9f:e0:09:5b:79:65:e1:3e:22:52:15:d2:ef:8f:
f8:37:45:dd:f3:1e:d5:20:4d:c8:31:18:96:ea:ed:13:0c:04:
e3:c7:0c:f3:df:2e:47:98:46:65:c8:96:3f:11:25:61:19:0c:
df:11:55:b5:7d:f2:94:08:59:b0:38:dd:b5:59:81:3b:dd:b8:
4f:0d:88:52:a1:5f:46:58:df:01:17:aa:18:c8:21:72:85:3f:
78:79:db:fd:72:5e:b3:4a:d3:d5:f1:79:d0:19:ea:18:aa:69:
f2:a5:0d:c4:b1:5a:3e:e5:32:92:e4:50:64:57:e9:29:52:66:
f0:20:35:91:1c:89:a4:21:c4:88:92:66:57:a7:76:d1:9c:c3:
8f:b6:06:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZar58t+VH3IkQ4SnM/GEiC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTY4ODAxMmMxMjI2NzgxODVmY2ViN2UxMDM3ZjBlMWVk
MTc4NjEwHhcNMjUwNTA3MTgwMDE2WhcNMjUwNTA4MTgwMDE2WjAzMTEwLwYDVQQD
Eyg1NzY3ZWEzMGQ1ZjgzMzUzOTgzNzdhMDNkYjNjNzMxNDkwNjQ4ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm8XFe2DEAYiVWdOAWgQDmAFehIq
sPMh7gWmspVDXJXceN5l3sKvbYcGJO8IrjAd1rgDgZr9/EG248bx2bH4bNMhWNBo
gqLVT5cxPSzbj2hE0ps+g8GwrmLskaoXjjalf86NJgPinACrmbszhv/hnCM8sYWv
mEvfdaSCU+/h5eMSbhxKwjWjgTw8goRBwwXJpOHVe3KVp2RgThFTp55i14onh+yT
jmB8MYeNf3BG9LiZm92Cd5ZCzG7Xqi+g3DjM3h22sN79S7JqrKrhIQ7OL+e6TvVn
+RNfmzzeGyOxsm5/zTA0AsAcPoJU80ryo73c+svQKlQHTGznB0fuOfRGqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdn6jDV+DNTmDd6A9s8cxSQZIgrMB8GA1UdIwQY
MBaAFIGmiAEsEiZ4GF/Ot+EDfw4e0XhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jN2MyMDctYTNiYS00OWM4LWE4OTQt
MDg0ZDQ3NDhjMzg1LzEvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jN2MyMDctYTNiYS00OWM4LWE4OTQtMDg0ZDQ3NDhjMzg1
LzEvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphR1afHz
8lN+eLZ8jn232mdVzHCLZmsQ7xrA9wLjEd9rN//DYDYZhAS0DMERBcdn6tLPtuJn
lk21mHmDhIWvP+ml+bisX/LCtWKM7SYPvc0vZ7kv/qLh0G163hSloLGrdCKL8FOi
DdTCzxWVeBwQpZ/gCVt5ZeE+IlIV0u+P+DdF3fMe1SBNyDEYlurtEwwE48cM898u
R5hGZciWPxElYRkM3xFVtX3ylAhZsDjdtVmBO924Tw2IUqFfRljfAReqGMghcoU/
eHnb/XJes0rT1fF50BnqGKpp8qUNxLFaPuUykuRQZFfpKVJm8CA1kRyJpCHEiJJm
V6d20ZzDj7YGiw==
-----END CERTIFICATE-----
Generated at Thu May 8 01:54:36 2025 by rpki-client