Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: fWTTNHuTnay3N+ziD5IhAAibDv5haCrZFAaaAJhmEw4=
Subject key identifier: B0:5C:C5:9B:6C:77:8E:4F:9C:D3:A7:39:45:2B:7C:08:D8:C4:DA:0B
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 0196BE5C7FF1F08F59411A2EC73260E6381C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0D5D
Signing time: Sun 11 May 2025 08:00:55 +0000
Manifest this update: Sun 11 May 2025 08:00:55 +0000
Manifest next update: Mon 12 May 2025 08:00:55 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: zCRbRhTscd+L993J5zZXEuU5xa98NIijW0XiYf4hSEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:7f:f1:f0:8f:59:41:1a:2e:c7:32:60:e6:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: May 11 08:00:55 2025 GMT
Not After : May 12 08:00:55 2025 GMT
Subject: CN=b05cc59b6c778e4f9cd3a739452b7c08d8c4da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:91:9b:fd:ee:de:9b:77:78:81:53:5c:ae:
a3:ae:d2:f2:bd:c6:15:d7:ff:68:ff:e2:f6:42:44:
9f:3c:44:0d:6f:77:e9:82:77:ab:00:86:c7:38:b9:
78:11:21:9b:5d:6a:f1:c6:7f:68:a6:17:c9:e2:ec:
8d:0c:c4:23:6a:01:1b:ac:43:e1:0e:37:cd:52:a8:
ae:03:72:c4:93:be:a9:86:f1:da:12:f9:9a:aa:50:
a6:6d:91:70:f3:83:25:df:13:6f:e5:9d:41:89:91:
d0:52:38:fd:1a:c5:6e:35:44:e5:5b:05:42:9d:d0:
0b:aa:67:30:98:3c:a2:38:f7:d7:87:97:a8:c9:f6:
9a:5d:22:d0:57:63:fb:de:0a:ba:3b:f8:d7:1b:dd:
8a:2d:36:cd:c2:0a:1e:b6:d5:41:b8:07:52:e5:25:
50:86:06:89:09:b5:bb:47:1d:d1:24:24:e6:85:0f:
60:cf:09:75:94:e5:e3:7f:4d:e6:38:ff:96:e2:b7:
ad:b9:7b:5b:46:4d:8e:8b:02:d3:6c:bc:1f:aa:f1:
83:95:6b:ec:db:2a:0c:3a:c4:f7:19:a4:e3:f7:40:
b9:38:38:b7:ad:52:b4:85:aa:74:96:41:65:68:4c:
90:b9:af:a6:0b:0c:37:28:2f:b4:01:08:e7:8b:e9:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5C:C5:9B:6C:77:8E:4F:9C:D3:A7:39:45:2B:7C:08:D8:C4:DA:0B
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:a8:ae:5f:5a:68:c7:5b:b1:6c:e0:83:f4:69:79:b4:95:
fb:4f:5f:55:66:98:81:28:b6:98:6b:eb:cd:c4:84:2b:9b:82:
f2:e5:3d:c4:6d:2d:c6:05:61:8c:a6:4a:40:43:c9:0a:cf:ca:
69:51:67:b1:3b:42:77:98:96:46:08:2f:eb:96:48:91:e2:68:
d7:9f:5b:62:f4:d6:3a:e3:e6:85:e4:4c:2d:06:c8:fd:89:77:
54:53:32:05:6c:2b:0b:e7:a3:39:9a:55:c3:e4:ee:87:ae:5e:
95:80:e5:e0:3a:7a:4d:68:53:12:8b:b7:0a:2d:9a:f8:d3:ec:
01:e9:73:be:f6:77:71:fd:8e:71:98:08:cb:64:c0:13:a5:db:
1d:55:6c:62:96:c4:c4:7a:28:61:80:22:0c:46:ef:9b:ed:20:
d5:20:85:60:7d:8e:60:9a:a8:c3:36:de:95:f4:14:8d:69:27:
00:e5:fb:2d:0a:33:ff:26:02:73:2d:7f:ec:8d:45:8f:00:54:
d4:c7:3a:8d:54:19:34:0a:9e:c3:83:a1:35:cf:d1:97:91:41:
11:97:6b:da:78:4f:2e:64:9b:e6:19:06:bb:b2:b5:bc:50:1a:
f8:6a:60:c9:06:12:a5:e8:db:fe:0b:86:7e:0f:67:20:9f:8b:
ac:21:3a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XH/x8I9ZQRouxzJg5jgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj
MDg2OTIwHhcNMjUwNTExMDgwMDU1WhcNMjUwNTEyMDgwMDU1WjAzMTEwLwYDVQQD
EyhiMDVjYzU5YjZjNzc4ZTRmOWNkM2E3Mzk0NTJiN2MwOGQ4YzRkYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR2Rm/3u3pt3eIFTXK6jrtLyvcYV
1/9o/+L2QkSfPEQNb3fpgnerAIbHOLl4ESGbXWrxxn9ophfJ4uyNDMQjagEbrEPh
DjfNUqiuA3LEk76phvHaEvmaqlCmbZFw84Ml3xNv5Z1BiZHQUjj9GsVuNUTlWwVC
ndALqmcwmDyiOPfXh5eoyfaaXSLQV2P73gq6O/jXG92KLTbNwgoettVBuAdS5SVQ
hgaJCbW7Rx3RJCTmhQ9gzwl1lOXjf03mOP+W4retuXtbRk2OiwLTbLwfqvGDlWvs
2yoMOsT3GaTj90C5ODi3rVK0hap0lkFlaEyQua+mCww3KC+0AQjni+me+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBcxZtsd45PnNOnOUUrfAjYxNoLMB8GA1UdIwQY
MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt
NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk
LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkG+orl9a
aMdbsWzgg/RpebSV+09fVWaYgSi2mGvrzcSEK5uC8uU9xG0txgVhjKZKQEPJCs/K
aVFnsTtCd5iWRggv65ZIkeJo159bYvTWOuPmheRMLQbI/Yl3VFMyBWwrC+ejOZpV
w+Tuh65elYDl4Dp6TWhTEou3Ci2a+NPsAelzvvZ3cf2OcZgIy2TAE6XbHVVsYpbE
xHooYYAiDEbvm+0g1SCFYH2OYJqowzbelfQUjWknAOX7LQoz/yYCcy1/7I1FjwBU
1Mc6jVQZNAqew4OhNc/Rl5FBEZdr2nhPLmSb5hkGu7K1vFAa+GpgyQYSpejb/guG
fg9nIJ+LrCE6pQ==
-----END CERTIFICATE-----
Generated at Sun May 11 16:57:57 2025 by rpki-client