Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: p5rfp6e9r8+w7l7RzJ22G7IW+xY/SYpOSAh6LenOQe4=
Subject key identifier: 5E:4A:27:C6:85:98:F8:68:98:1B:07:4B:F2:08:6E:0E:99:C4:96:3B
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01969DF5B7C45C02967575E6CE438E08E417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 01:00:48 +0000
Manifest this update: Mon 05 May 2025 01:00:48 +0000
Manifest next update: Tue 06 May 2025 01:00:48 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: 2RP/7VVNp5arnpjxlnkdm9lQnouRo22FkXRrGjn5J9U=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:b7:c4:5c:02:96:75:75:e6:ce:43:8e:08:e4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: May 5 01:00:48 2025 GMT
Not After : May 6 01:00:48 2025 GMT
Subject: CN=5e4a27c68598f868981b074bf2086e0e99c4963b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:25:8b:92:81:e1:f6:30:47:a9:41:f8:fe:
42:a1:4f:8d:d2:3a:fd:82:8b:17:13:90:e5:1a:60:
82:b8:6a:53:b6:38:04:79:a4:9c:70:9d:d6:2c:c2:
b0:18:1c:d2:21:7c:8e:c2:08:d9:b1:dc:c5:64:f4:
0f:7f:23:b7:1b:9f:39:fd:4b:16:cf:f4:76:06:fb:
4f:88:9b:00:99:a7:73:f2:c5:04:86:61:ce:68:eb:
a0:c3:0b:f4:ba:5f:dd:fd:42:b9:3c:d1:a7:56:25:
c4:8a:9c:01:86:67:28:52:f0:25:66:a2:bf:ac:e7:
6f:64:d4:77:c9:66:eb:5e:c0:b6:56:7e:70:5e:9f:
c9:d6:47:ec:4a:c1:df:17:24:48:21:0d:33:c8:66:
9c:b6:32:b7:00:1f:62:83:05:1e:f5:d3:ea:8a:01:
d9:39:e3:1a:a2:29:98:a6:82:d9:1e:5c:1f:98:04:
e8:34:f7:24:2d:23:54:f1:6b:7a:97:c2:93:7d:53:
44:71:8b:43:70:54:5d:5f:f7:ca:df:ed:3a:55:f2:
ae:55:ab:e9:f2:be:0d:2c:45:ee:a9:5b:a9:da:be:
50:50:23:68:66:f6:04:db:a6:ea:ec:9f:11:c5:e0:
92:0f:db:30:9d:05:b4:62:eb:27:66:a1:d5:dc:15:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:27:C6:85:98:F8:68:98:1B:07:4B:F2:08:6E:0E:99:C4:96:3B
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1f:21:06:28:8a:1e:22:51:00:59:93:e4:12:7c:7f:7b:25:
25:d4:3d:df:dd:e0:06:ab:e8:15:9b:a5:2b:56:a8:75:ae:e3:
ff:e1:dc:30:81:6b:fe:27:ca:42:1d:52:cd:5f:fb:22:7c:24:
8c:35:cc:87:6e:c7:29:e7:40:27:84:e7:41:0e:e6:d5:75:0c:
e4:d0:65:fa:7b:99:60:22:60:7b:69:38:18:bd:bd:4a:78:5a:
f3:b0:10:27:11:25:06:83:1e:47:56:82:00:d4:a2:62:c4:3d:
ee:35:f0:60:d7:b2:c0:f2:ef:d5:a8:fc:18:ec:c5:38:8b:ed:
8b:a6:ba:06:a1:43:d8:ac:81:c8:4f:a1:e8:08:bb:d5:2b:db:
e7:72:93:f3:a9:48:60:f5:dd:e0:73:c6:b8:a2:43:4e:7e:4a:
51:a7:cb:51:d4:ca:3e:87:eb:3b:fb:70:24:06:22:fc:b7:d7:
bd:eb:c9:bb:d9:2a:54:f4:e0:76:12:7d:f0:72:59:6a:a2:4a:
e0:20:7d:fa:81:5c:65:e8:e2:df:ad:1c:10:3e:7c:55:ec:c3:
81:a3:db:79:a0:9b:51:8a:60:c5:4a:c6:f0:6a:e0:52:ec:11:
26:32:64:8d:13:a1:67:96:28:66:ac:99:2f:d5:f6:f5:6a:72:
f8:bf:79:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9bfEXAKWdXXmzkOOCOQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDQzZjIzOTM2NjIyODI0MTExZTg4NjVhNTAwMDIwNjdk
OTVhNjIwHhcNMjUwNTA1MDEwMDQ4WhcNMjUwNTA2MDEwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZTRhMjdjNjg1OThmODY4OTgxYjA3NGJmMjA4NmUwZTk5YzQ5NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5sli5KB4fYwR6lB+P5CoU+N0jr9
gosXE5DlGmCCuGpTtjgEeaSccJ3WLMKwGBzSIXyOwgjZsdzFZPQPfyO3G585/UsW
z/R2BvtPiJsAmadz8sUEhmHOaOugwwv0ul/d/UK5PNGnViXEipwBhmcoUvAlZqK/
rOdvZNR3yWbrXsC2Vn5wXp/J1kfsSsHfFyRIIQ0zyGactjK3AB9igwUe9dPqigHZ
OeMaoimYpoLZHlwfmAToNPckLSNU8Wt6l8KTfVNEcYtDcFRdX/fK3+06VfKuVavp
8r4NLEXuqVup2r5QUCNoZvYE26bq7J8RxeCSD9swnQW0YusnZqHV3BVawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5KJ8aFmPhomBsHS/IIbg6ZxJY7MB8GA1UdIwQY
MBaAFIAEPyOTZiKCQRHohlpQACBn2VpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgt
NjhjZGM2OTJhZDA5LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgtNjhjZGM2OTJhZDA5
LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR8hBiiK
HiJRAFmT5BJ8f3slJdQ9393gBqvoFZulK1aoda7j/+HcMIFr/ifKQh1SzV/7Inwk
jDXMh27HKedAJ4TnQQ7m1XUM5NBl+nuZYCJge2k4GL29Snha87AQJxElBoMeR1aC
ANSiYsQ97jXwYNeywPLv1aj8GOzFOIvti6a6BqFD2KyByE+h6Ai71Svb53KT86lI
YPXd4HPGuKJDTn5KUafLUdTKPofrO/twJAYi/LfXvevJu9kqVPTgdhJ98HJZaqJK
4CB9+oFcZeji360cED58VezDgaPbeaCbUYpgxUrG8GrgUuwRJjJkjROhZ5YoZqyZ
L9X29Wpy+L95Wg==
-----END CERTIFICATE-----
Generated at Mon May 5 06:20:58 2025 by rpki-client