Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: jayT0ibIsmV5X1DG/RcrZhpaQVdDZ7xrzsSEKkBLAXI=
Subject key identifier: 93:E5:53:BA:FC:67:D8:A0:AE:19:E6:C4:31:DE:D0:2E:87:EF:40:85
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 0196C0B8628AD8F93DE7B562CC18A62130F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 19:00:31 +0000
Manifest this update: Sun 11 May 2025 19:00:31 +0000
Manifest next update: Mon 12 May 2025 19:00:31 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: XikQhRJxmRZvOG1ZkA1eMa+z+5CCPvSNCPK8SMMtlSc=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:62:8a:d8:f9:3d:e7:b5:62:cc:18:a6:21:30:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: May 11 19:00:31 2025 GMT
Not After : May 12 19:00:31 2025 GMT
Subject: CN=93e553bafc67d8a0ae19e6c431ded02e87ef4085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:59:50:90:b1:6e:a0:5e:1c:20:bb:4c:3d:
9b:0e:78:3c:8e:fe:40:7c:44:81:f7:bb:31:c4:e5:
60:65:e5:30:6c:1c:62:12:eb:2b:9b:68:a8:9d:ef:
ea:f6:e1:33:24:ab:d9:8b:a8:0d:df:ca:0b:3f:8a:
0f:ea:43:a9:13:53:7a:68:76:89:3e:21:fb:96:90:
5c:39:0e:e0:a3:38:16:b4:b1:27:8d:7c:fa:9c:c3:
d6:2c:c3:c0:9d:17:d1:7a:09:06:76:48:8b:59:c0:
6e:de:51:97:31:62:55:73:42:fb:dd:68:37:e1:aa:
59:9d:8c:56:be:86:e9:56:94:40:06:e3:7e:5e:a7:
71:3c:b3:4c:d3:09:64:4e:cc:ed:7c:5d:59:af:cc:
bb:be:8d:84:17:ce:c8:86:90:40:00:11:98:46:db:
50:52:e7:f6:b9:fe:9e:aa:88:2c:61:f9:9e:11:49:
32:96:f2:49:f9:4a:1a:a6:2d:9a:88:52:14:49:fa:
e4:33:50:8f:95:d6:52:20:37:54:50:b2:c5:25:96:
50:c1:ab:28:d6:ed:5f:aa:31:7c:8d:5a:5a:26:70:
80:d2:dd:3a:06:d4:3a:38:de:df:7d:a6:f3:ee:6a:
40:9c:04:a4:04:de:8d:16:16:0a:44:1e:19:0d:70:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:53:BA:FC:67:D8:A0:AE:19:E6:C4:31:DE:D0:2E:87:EF:40:85
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:25:e9:4c:f1:ae:aa:62:ed:3f:44:e5:1b:0d:e0:a5:38:df:
ea:a4:81:ad:6d:b2:5a:61:4d:89:1b:d7:8e:6c:bf:72:c4:e2:
3e:cc:c7:c4:9a:e4:09:34:bc:66:82:66:fd:56:7e:5a:81:82:
e6:b8:45:33:11:3d:dc:93:1f:64:89:a7:51:8a:31:46:a2:fa:
49:ff:54:7b:f4:aa:44:79:e8:30:d6:b6:c0:58:bd:7c:80:b8:
65:84:f7:05:e3:6b:e9:41:55:3b:21:e6:eb:47:e1:e2:85:25:
01:46:d1:f8:7c:d5:d5:01:5e:1e:69:26:05:ec:51:5b:83:73:
d8:bc:5c:0d:38:96:35:77:e2:03:8c:2e:c7:15:a8:39:f2:88:
ae:0d:25:35:cd:13:2a:79:f4:92:ee:8f:37:c6:7a:b2:a8:54:
ed:ea:1d:ef:a9:32:a4:55:e0:6c:6d:5d:3f:df:e0:a3:ca:fb:
8d:cd:1f:b0:9c:7f:0e:f5:ca:5e:8e:36:38:e0:c5:6c:93:61:
d5:40:b2:ee:24:be:ed:2c:73:99:ee:64:a4:96:8f:84:b2:ff:
75:2d:e0:9a:72:88:d4:31:37:95:41:c4:1e:da:af:b3:c1:b8:
b4:13:e7:ef:b6:44:09:a7:d7:af:59:bc:d9:c7:7a:90:6d:d4:
b7:18:59:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuGKK2Pk957VizBimITDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTYyMDVjMmEyMTBmNTdmYjcxZjI3ZjNjNGJhYWViNTNk
ZDVlMzMwHhcNMjUwNTExMTkwMDMxWhcNMjUwNTEyMTkwMDMxWjAzMTEwLwYDVQQD
Eyg5M2U1NTNiYWZjNjdkOGEwYWUxOWU2YzQzMWRlZDAyZTg3ZWY0MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZBZUJCxbqBeHCC7TD2bDng8jv5A
fESB97sxxOVgZeUwbBxiEusrm2ione/q9uEzJKvZi6gN38oLP4oP6kOpE1N6aHaJ
PiH7lpBcOQ7gozgWtLEnjXz6nMPWLMPAnRfRegkGdkiLWcBu3lGXMWJVc0L73Wg3
4apZnYxWvobpVpRABuN+XqdxPLNM0wlkTsztfF1Zr8y7vo2EF87IhpBAABGYRttQ
Uuf2uf6eqogsYfmeEUkylvJJ+Uoapi2aiFIUSfrkM1CPldZSIDdUULLFJZZQwaso
1u1fqjF8jVpaJnCA0t06BtQ6ON7ffabz7mpAnASkBN6NFhYKRB4ZDXAvowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPlU7r8Z9igrhnmxDHe0C6H70CFMB8GA1UdIwQY
MBaAFIDmIFwqIQ9X+3HyfzxLqutT3V4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEt
N2I4ZDdlZTlmNDExLzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEtN2I4ZDdlZTlmNDEx
LzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiXpTPGu
qmLtP0TlGw3gpTjf6qSBrW2yWmFNiRvXjmy/csTiPszHxJrkCTS8ZoJm/VZ+WoGC
5rhFMxE93JMfZImnUYoxRqL6Sf9Ue/SqRHnoMNa2wFi9fIC4ZYT3BeNr6UFVOyHm
60fh4oUlAUbR+HzV1QFeHmkmBexRW4Nz2LxcDTiWNXfiA4wuxxWoOfKIrg0lNc0T
Knn0ku6PN8Z6sqhU7eod76kypFXgbG1dP9/go8r7jc0fsJx/DvXKXo42OODFbJNh
1UCy7iS+7Sxzme5kpJaPhLL/dS3gmnKI1DE3lUHEHtqvs8G4tBPn77ZECafXr1m8
2cd6kG3UtxhZOQ==
-----END CERTIFICATE-----
Generated at Sun May 11 23:36:02 2025 by rpki-client