Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier: c6sqJAaf+qm7M3jgK8eJTlU9jvTKIsRM/gSPF+djK+c=
Subject key identifier: 0C:34:34:DB:B5:36:D1:33:46:D1:1B:2D:D7:95:63:33:3C:20:15:B6
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 0196B10E68CCB437830505152DA530394672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 18:00:33 +0000
Manifest this update: Thu 08 May 2025 18:00:33 +0000
Manifest next update: Fri 09 May 2025 18:00:33 +0000
Files and hashes: 1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: fVyA7WoQYzcxrPvJiqj+BJ6ymQNN+5tF1RcoChgGszs=)
2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:68:cc:b4:37:83:05:05:15:2d:a5:30:39:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: May 8 18:00:33 2025 GMT
Not After : May 9 18:00:33 2025 GMT
Subject: CN=0c3434dbb536d13346d11b2dd79563333c2015b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:9c:6d:57:35:6d:b4:aa:fd:7d:69:46:8b:
b9:ff:7c:55:35:44:9f:34:ab:e1:cf:73:0d:73:a0:
d9:4b:87:4e:69:1f:79:8a:8c:55:49:4c:fc:41:55:
60:10:05:a3:5b:5d:9e:40:ae:0b:d1:b1:af:99:7b:
7a:69:cf:d4:58:e5:48:5a:fe:2c:5c:f7:2a:f9:08:
e2:55:86:93:12:f8:fe:d1:91:86:97:5f:9a:7a:2f:
cf:71:53:f2:59:71:42:f2:02:0a:90:47:52:42:c4:
ec:37:99:7a:19:08:be:e0:64:a3:ce:9a:cd:ee:e4:
40:2d:d4:36:05:6d:bf:49:4a:05:23:77:ff:9b:4c:
5c:4f:f4:67:d3:11:e0:b2:84:24:ee:e3:9e:01:4c:
1b:10:aa:db:96:7f:73:79:94:cf:17:a9:02:27:09:
2a:4d:39:a2:2a:ad:ff:f2:e5:7e:62:a3:0e:6e:4c:
74:f3:1b:36:e0:ea:29:41:ab:25:07:ce:9e:2c:11:
0f:65:5b:ae:f6:34:f2:25:83:16:64:af:cc:c9:b6:
a5:fd:fe:ae:d3:8b:63:c0:58:8a:f6:7a:0f:32:88:
f1:f0:64:a5:ad:6b:f6:a6:00:8e:1f:a7:23:62:61:
1f:03:f7:4d:e0:0b:84:5c:05:ef:45:84:c9:ca:a7:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:34:DB:B5:36:D1:33:46:D1:1B:2D:D7:95:63:33:3C:20:15:B6
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:b5:08:9d:01:dd:25:f4:35:0a:62:de:b9:5f:d4:f9:40:
a7:14:7f:7d:70:64:30:ad:d0:99:40:6a:3f:5d:63:d9:2f:af:
47:63:94:49:b8:ce:a6:75:75:eb:46:5a:03:b9:91:d7:f8:7e:
5e:ac:7a:41:cb:ba:a7:e4:73:06:73:c6:46:1a:f7:d8:88:19:
dd:bb:e5:0b:a0:a6:ca:09:a3:1f:a4:12:b1:3f:bb:01:75:f1:
4a:fa:31:ff:0d:56:8e:90:21:69:d8:76:8a:5c:31:40:8d:35:
cc:a9:b0:0b:c0:c9:07:74:a2:a6:cc:e6:2f:19:86:92:8b:72:
7e:35:db:7f:dc:a6:3a:4d:ad:f7:bf:dd:52:fb:3c:c6:5d:b6:
b7:93:a3:92:26:cd:c2:9e:02:4d:17:36:31:da:45:b3:cb:1d:
9a:ce:9f:82:ab:bc:7d:a3:ad:1b:0c:fd:21:f2:e0:48:84:8e:
4a:d5:b1:23:73:4e:98:72:f8:89:0a:22:7b:05:ae:b8:9e:1f:
1a:17:7c:25:68:11:82:1a:e3:8d:00:88:56:1d:4e:9b:cb:fa:
2f:a4:cb:e3:9b:ab:51:f0:9f:1d:0a:d4:f6:fd:40:22:59:a7:
87:a6:67:ca:96:19:63:bb:94:02:a2:89:65:94:9c:14:67:a0:
c8:a1:79:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxDmjMtDeDBQUVLaUwOUZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODc2YmZiYjVhZThjZmUxMTZiYjVmNWYyODY0YTExNjIx
M2FhNGYwHhcNMjUwNTA4MTgwMDMzWhcNMjUwNTA5MTgwMDMzWjAzMTEwLwYDVQQD
EygwYzM0MzRkYmI1MzZkMTMzNDZkMTFiMmRkNzk1NjMzMzNjMjAxNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GOcbVc1bbSq/X1pRou5/3xVNUSf
NKvhz3MNc6DZS4dOaR95ioxVSUz8QVVgEAWjW12eQK4L0bGvmXt6ac/UWOVIWv4s
XPcq+QjiVYaTEvj+0ZGGl1+aei/PcVPyWXFC8gIKkEdSQsTsN5l6GQi+4GSjzprN
7uRALdQ2BW2/SUoFI3f/m0xcT/Rn0xHgsoQk7uOeAUwbEKrbln9zeZTPF6kCJwkq
TTmiKq3/8uV+YqMObkx08xs24OopQaslB86eLBEPZVuu9jTyJYMWZK/Mybal/f6u
04tjwFiK9noPMojx8GSlrWv2pgCOH6cjYmEfA/dN4AuEXAXvRYTJyqfzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw0NNu1NtEzRtEbLdeVYzM8IBW2MB8GA1UdIwQY
MBaAFIOHa/u1roz+EWu19fKGShFiE6pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTct
N2U3MDlhZjA1N2Q1LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTctN2U3MDlhZjA1N2Q1
LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfam1CJ0B
3SX0NQpi3rlf1PlApxR/fXBkMK3QmUBqP11j2S+vR2OUSbjOpnV160ZaA7mR1/h+
Xqx6Qcu6p+RzBnPGRhr32IgZ3bvlC6CmygmjH6QSsT+7AXXxSvox/w1WjpAhadh2
ilwxQI01zKmwC8DJB3SipszmLxmGkotyfjXbf9ymOk2t97/dUvs8xl22t5OjkibN
wp4CTRc2MdpFs8sdms6fgqu8faOtGwz9IfLgSISOStWxI3NOmHL4iQoiewWuuJ4f
Ghd8JWgRghrjjQCIVh1Om8v6L6TL45urUfCfHQrU9v1AIlmnh6ZnypYZY7uUAqKJ
ZZScFGegyKF5aQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:30:10 2025 by rpki-client