Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: YWoSwJfhLCltVXUJ/lubcLorQ6/jqiVY9rQkmfS24/o=
Subject key identifier: 40:14:EC:2F:70:0B:75:84:10:50:34:D1:16:51:52:C6:3C:FE:8D:20
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0196C0814404FB8AA323E5323DAAEA7B5313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 18:00:19 +0000
Manifest this update: Sun 11 May 2025 18:00:19 +0000
Manifest next update: Mon 12 May 2025 18:00:19 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: PdsSxGIBX0GmRr+4hEqop6P8Zl4G4TsNA5wdaGfoBD0=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:44:04:fb:8a:a3:23:e5:32:3d:aa:ea:7b:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: May 11 18:00:19 2025 GMT
Not After : May 12 18:00:19 2025 GMT
Subject: CN=4014ec2f700b7584105034d1165152c63cfe8d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:f4:77:24:8d:4f:71:c1:16:47:89:f2:a3:
92:e3:83:1f:c5:51:2d:d6:17:44:63:51:08:3a:2e:
76:e8:10:fb:5e:0d:e2:1d:19:cf:28:96:db:a8:99:
a1:d6:f9:78:84:03:78:8d:71:39:3e:d3:85:e3:9f:
23:06:49:37:66:3f:65:41:d9:75:00:37:5d:30:04:
1e:ed:84:cb:08:63:e4:3f:cf:ce:5d:00:e3:e9:f6:
b0:ed:80:5a:71:d6:73:da:09:a8:8b:87:c1:58:ed:
95:96:4a:3a:4c:ee:e9:56:f7:5b:26:47:b9:eb:22:
70:90:b3:2e:25:cb:01:7d:71:1a:2a:27:c4:f9:59:
15:16:81:bb:99:af:ae:1e:03:8a:ca:e9:3a:cb:d0:
29:22:23:93:2b:8a:07:43:79:26:40:f5:df:01:15:
3d:be:28:f7:be:82:d2:b1:92:0a:f3:fe:c7:a0:b8:
09:1c:d5:7d:09:56:02:4f:93:2f:33:78:37:b6:1e:
29:31:61:76:fc:4b:6c:f2:95:d4:f9:22:97:50:be:
c0:d0:aa:74:33:31:23:62:87:94:20:07:29:31:51:
94:a9:e5:db:63:42:4e:3d:cd:9c:08:82:a4:98:bd:
a9:a8:c3:dc:99:3c:4e:41:d2:79:8b:31:39:b5:09:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:EC:2F:70:0B:75:84:10:50:34:D1:16:51:52:C6:3C:FE:8D:20
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:b5:db:43:d1:c9:08:a1:b3:a7:72:48:14:f1:f4:2a:52:
16:55:8a:21:99:2f:f8:b3:d5:71:dc:d1:28:0b:9a:94:73:b0:
f1:39:83:7c:0e:be:f2:76:3f:b9:c6:c4:58:97:47:4d:9c:eb:
72:e6:ee:68:a5:ee:45:aa:fc:d7:f2:d5:a0:4d:23:eb:8b:4d:
56:33:17:6c:f1:7c:76:9a:b2:ef:ca:e9:2b:9f:53:28:b5:96:
3d:26:9a:92:ea:78:a0:07:09:69:61:c2:61:6d:29:38:66:bd:
9f:c1:d7:00:8c:f5:14:04:6a:a5:d4:f3:02:28:ad:0e:8f:73:
4f:ec:a9:dd:b5:8e:26:ae:cc:8c:7d:16:49:21:5b:51:41:70:
c6:a0:b1:60:5d:02:97:88:9d:b7:98:4b:af:ae:20:b2:65:ea:
92:2c:33:b3:66:f9:ce:41:b6:c6:34:21:22:b4:01:eb:60:3a:
bf:1b:d5:99:ad:62:f4:d5:49:1f:2a:b5:66:8d:67:91:91:64:
d9:8a:c8:82:f6:ae:21:e4:20:37:1e:d0:b5:12:9c:d8:8c:1c:
f3:5e:81:7f:93:5f:ea:3c:7c:81:5a:3f:76:d9:0d:b9:0e:fe:
69:1f:81:1d:de:37:b5:72:9d:ca:2c:fa:c6:91:0f:c4:16:67:
4d:53:f6:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgUQE+4qjI+UyParqe1MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUwNTExMTgwMDE5WhcNMjUwNTEyMTgwMDE5WjAzMTEwLwYDVQQD
Eyg0MDE0ZWMyZjcwMGI3NTg0MTA1MDM0ZDExNjUxNTJjNjNjZmU4ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0X0dySNT3HBFkeJ8qOS44MfxVEt
1hdEY1EIOi526BD7Xg3iHRnPKJbbqJmh1vl4hAN4jXE5PtOF458jBkk3Zj9lQdl1
ADddMAQe7YTLCGPkP8/OXQDj6faw7YBacdZz2gmoi4fBWO2Vlko6TO7pVvdbJke5
6yJwkLMuJcsBfXEaKifE+VkVFoG7ma+uHgOKyuk6y9ApIiOTK4oHQ3kmQPXfARU9
vij3voLSsZIK8/7HoLgJHNV9CVYCT5MvM3g3th4pMWF2/Ets8pXU+SKXUL7A0Kp0
MzEjYoeUIAcpMVGUqeXbY0JOPc2cCIKkmL2pqMPcmTxOQdJ5izE5tQmG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAU7C9wC3WEEFA00RZRUsY8/o0gMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO6120PR
yQihs6dySBTx9CpSFlWKIZkv+LPVcdzRKAualHOw8TmDfA6+8nY/ucbEWJdHTZzr
cubuaKXuRar81/LVoE0j64tNVjMXbPF8dpqy78rpK59TKLWWPSaakup4oAcJaWHC
YW0pOGa9n8HXAIz1FARqpdTzAiitDo9zT+yp3bWOJq7MjH0WSSFbUUFwxqCxYF0C
l4idt5hLr64gsmXqkiwzs2b5zkG2xjQhIrQB62A6vxvVma1i9NVJHyq1Zo1nkZFk
2YrIgvauIeQgNx7QtRKc2Iwc816Bf5Nf6jx8gVo/dtkNuQ7+aR+BHd43tXKdyiz6
xpEPxBZnTVP2hw==
-----END CERTIFICATE-----
Generated at Sun May 11 22:12:43 2025 by rpki-client