Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: s16V2YcT7EljZbHMrgWcuw/t/B/xk1+AUfZ5O1Stn60=
Subject key identifier: 63:8D:40:27:2D:CA:3A:BB:9A:D1:24:C9:E2:C0:F6:D6:2B:DC:29:D0
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 0196CDCF50CF79B077A405827E4EEA79DD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0AD9
Signing time: Wed 14 May 2025 08:00:38 +0000
Manifest this update: Wed 14 May 2025 08:00:38 +0000
Manifest next update: Thu 15 May 2025 08:00:38 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: rmPB6MuAfneFv8kOwQqaYu9cRB9hmoHsaRZJzMKfUfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:50:cf:79:b0:77:a4:05:82:7e:4e:ea:79:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: May 14 08:00:38 2025 GMT
Not After : May 15 08:00:38 2025 GMT
Subject: CN=638d40272dca3abb9ad124c9e2c0f6d62bdc29d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:a7:ab:f1:0c:d7:9e:f4:9b:aa:69:31:8f:
ec:2b:b0:66:9a:20:c4:2c:f5:80:1f:01:74:80:84:
3b:4a:bc:6d:18:27:8b:a6:ec:01:22:11:44:b5:3a:
77:5a:06:05:d9:a6:ad:32:5e:94:e5:75:f9:cb:e5:
ea:a1:1d:9d:00:97:2c:3b:ca:26:c8:cb:63:75:1d:
11:2f:2b:11:4b:4a:f9:cc:5a:e4:68:40:08:9a:ef:
f1:0c:d3:a4:e4:f3:a8:ce:fe:17:8a:e9:5c:79:15:
06:07:c9:d3:e4:2e:24:ad:67:74:bf:8b:5a:84:f2:
dd:47:a4:52:5c:fe:5e:4e:33:55:59:ed:6b:a4:85:
ae:ed:31:7f:24:8a:69:b8:06:e7:e9:27:14:71:66:
aa:40:fa:07:28:dd:e8:de:a2:65:82:bf:4f:61:6a:
fe:7a:92:3e:5d:9e:9d:bc:af:c1:52:80:e1:ae:55:
18:02:07:1f:a0:a6:c1:11:78:9b:ac:66:ae:bc:d1:
bf:96:42:3c:78:09:b4:dd:92:e3:61:21:7a:5c:5d:
42:98:16:29:98:db:cc:c2:85:29:12:c2:22:ac:ac:
0a:c0:fa:7d:3f:68:07:71:ea:c4:a8:b6:94:b4:b9:
ba:ab:ec:1f:93:76:b0:32:96:ff:b6:6f:0a:c1:98:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:40:27:2D:CA:3A:BB:9A:D1:24:C9:E2:C0:F6:D6:2B:DC:29:D0
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:96:0c:22:77:32:7d:48:3d:8f:fa:0b:1f:e6:84:28:f2:
04:15:af:b3:91:e3:11:bb:98:f6:5a:09:c2:6f:42:2d:4e:84:
9a:9e:90:7c:32:57:28:37:41:38:95:27:9e:e1:92:62:ab:3b:
fd:ff:d3:e5:24:13:f3:ad:5b:cf:3b:8a:b1:02:5b:cd:97:58:
c5:bf:d1:7f:ec:46:4d:79:5b:05:78:d9:30:3a:5a:11:49:80:
fe:70:a0:e3:b9:59:ee:01:03:8f:fa:c9:94:44:83:ef:32:8e:
e4:84:8a:02:bd:fc:4b:21:3f:ca:0c:cb:76:99:63:92:15:30:
bd:ff:f9:25:50:cc:86:ed:da:5b:6e:19:6a:4a:d3:0c:4e:b6:
9e:62:ae:c2:a4:57:b0:30:a6:0a:52:a3:00:b2:40:05:16:55:
cc:e4:13:4c:b2:5f:50:f2:59:36:a8:e0:e8:d4:68:9f:7b:de:
30:ba:5d:a2:05:5c:90:66:2b:9f:7b:50:34:71:86:b4:1b:d7:
e0:9d:8b:15:1a:bb:90:43:f6:54:ea:9e:c7:70:5f:95:60:e2:
9c:52:61:5c:1a:66:58:28:df:7f:a0:04:4e:d4:6e:55:99:b6:
93:f4:9d:20:69:16:0c:47:9b:05:4c:0d:62:f7:8f:90:0c:4a:
ee:35:96:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNz1DPebB3pAWCfk7qed1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjMzNmEzYjg2YmY3M2EyN2RkZDkwNjY2N2VhZGE3NWI0
N2M0OTkwHhcNMjUwNTE0MDgwMDM4WhcNMjUwNTE1MDgwMDM4WjAzMTEwLwYDVQQD
Eyg2MzhkNDAyNzJkY2EzYWJiOWFkMTI0YzllMmMwZjZkNjJiZGMyOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Wnq/EM1570m6ppMY/sK7BmmiDE
LPWAHwF0gIQ7SrxtGCeLpuwBIhFEtTp3WgYF2aatMl6U5XX5y+XqoR2dAJcsO8om
yMtjdR0RLysRS0r5zFrkaEAImu/xDNOk5POozv4XiulceRUGB8nT5C4krWd0v4ta
hPLdR6RSXP5eTjNVWe1rpIWu7TF/JIppuAbn6ScUcWaqQPoHKN3o3qJlgr9PYWr+
epI+XZ6dvK/BUoDhrlUYAgcfoKbBEXibrGauvNG/lkI8eAm03ZLjYSF6XF1CmBYp
mNvMwoUpEsIirKwKwPp9P2gHcerEqLaUtLm6q+wfk3awMpb/tm8KwZhfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGONQCctyjq7mtEkyeLA9tYr3CnQMB8GA1UdIwQY
MBaAFIBjNqO4a/c6J93ZBmZ+radbR8SZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEt
MDliYjU5NmU4NDU0LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEtMDliYjU5NmU4NDU0
LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9KWDCJ3
Mn1IPY/6Cx/mhCjyBBWvs5HjEbuY9loJwm9CLU6Emp6QfDJXKDdBOJUnnuGSYqs7
/f/T5SQT861bzzuKsQJbzZdYxb/Rf+xGTXlbBXjZMDpaEUmA/nCg47lZ7gEDj/rJ
lESD7zKO5ISKAr38SyE/ygzLdpljkhUwvf/5JVDMhu3aW24ZakrTDE62nmKuwqRX
sDCmClKjALJABRZVzOQTTLJfUPJZNqjg6NRon3veMLpdogVckGYrn3tQNHGGtBvX
4J2LFRq7kEP2VOqex3BflWDinFJhXBpmWCjff6AETtRuVZm2k/SdIGkWDEebBUwN
YvePkAxK7jWWmA==
-----END CERTIFICATE-----
Generated at Wed May 14 12:22:06 2025 by rpki-client