Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: 3gm8+clxWuLX8Xu6c5lcZPcbchWPKwjzaVj8IfVZANw=
Subject key identifier: 54:47:BE:1B:A3:2E:44:5B:F9:0A:BF:E3:A7:F5:20:65:0F:69:50:D6
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 0196BDB70A7F189B9A92A0037BFDAEF72FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 068F
Signing time: Sun 11 May 2025 05:00:11 +0000
Manifest this update: Sun 11 May 2025 05:00:11 +0000
Manifest next update: Mon 12 May 2025 05:00:11 +0000
Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=)
2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: Wv7pvT3NWMEtw+KPqjs4bXiLq0FERHenM5qHJ1TJdzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:0a:7f:18:9b:9a:92:a0:03:7b:fd:ae:f7:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: May 11 05:00:11 2025 GMT
Not After : May 12 05:00:11 2025 GMT
Subject: CN=5447be1ba32e445bf90abfe3a7f520650f6950d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:90:a0:0a:12:13:a4:dc:b9:20:cb:c1:23:
f3:7c:8e:e9:ef:5b:b2:cd:b6:1f:e1:93:2d:e8:aa:
37:10:ea:1e:f3:49:e6:a4:6e:dd:8b:94:14:62:c1:
1a:a5:5c:42:f6:7d:63:19:4c:57:a8:ed:14:f1:28:
c6:9d:49:d1:d1:e8:f0:30:38:1b:14:65:82:10:00:
26:71:34:7a:cf:33:20:1e:68:59:c3:79:97:28:88:
b4:54:c7:db:e4:41:1b:29:fb:46:56:96:3b:d0:13:
6f:64:2c:27:85:94:0a:3d:40:a1:ac:be:a1:bf:b5:
dc:1a:24:e5:c7:58:f1:95:e2:e7:98:ab:2a:17:1b:
ed:f1:1d:30:6e:ad:fc:79:b6:f7:0c:a0:3b:7f:91:
2e:d3:b6:37:f3:10:40:8c:1e:59:bf:e0:34:7c:f8:
f4:fa:1c:e5:b8:23:b9:6b:13:74:a8:5d:5a:e1:99:
89:b2:4c:77:eb:e5:b3:67:70:9f:41:d1:7c:6b:44:
4d:0c:d4:74:73:94:cc:a5:68:f8:0d:88:79:3f:70:
c2:d0:5e:6f:21:2e:66:93:16:a2:b3:9f:76:f6:68:
8e:82:46:62:65:28:a0:6b:c0:b7:54:f5:28:1c:71:
0b:90:34:e3:7c:c2:56:d2:59:3b:76:a0:30:e0:65:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:BE:1B:A3:2E:44:5B:F9:0A:BF:E3:A7:F5:20:65:0F:69:50:D6
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:84:2e:a8:98:59:db:31:44:27:8d:be:be:37:cc:70:88:85:
4e:2a:dc:e6:87:b4:85:10:23:6d:3f:cc:f2:45:f8:17:09:30:
f5:ad:65:f1:21:ab:8e:f0:c7:93:96:33:c1:16:28:84:8c:f3:
68:85:6a:65:37:32:8e:9b:e6:5e:35:59:55:c0:ad:a2:cf:8c:
ee:71:d4:c4:a7:70:7d:27:37:af:ec:c9:c8:68:b8:c9:b4:c7:
8c:04:54:c9:30:1f:43:66:2e:07:37:2c:de:ba:bb:c2:f9:52:
af:5f:bb:12:b0:8e:05:f8:f6:a7:30:f4:4d:74:99:50:af:d3:
4d:e8:cb:2e:dd:b9:3a:8c:d0:eb:a9:6b:c6:24:88:66:36:cc:
18:7c:f5:96:79:ce:17:a1:9d:3e:7d:51:11:6e:5d:7d:4d:80:
1c:d1:ec:7a:c5:b4:55:bb:cd:f2:e6:c3:0a:ee:49:d8:2d:0e:
65:0f:a7:72:fe:24:5c:f6:68:83:11:23:2a:77:a8:55:cc:1a:
7c:1c:ea:17:67:26:e9:d0:6c:33:26:7a:88:a7:8d:70:02:87:
b8:ca:75:79:35:60:e2:f6:b8:ba:ca:0d:f0:2b:b5:bc:82:5e:
77:f3:56:ca:3a:5f:2e:11:e0:13:e2:ab:d2:72:cb:9d:cf:08:
d6:31:97:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9twp/GJuakqADe/2u9y+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx
Njg4YzgwHhcNMjUwNTExMDUwMDExWhcNMjUwNTEyMDUwMDExWjAzMTEwLwYDVQQD
Eyg1NDQ3YmUxYmEzMmU0NDViZjkwYWJmZTNhN2Y1MjA2NTBmNjk1MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUaQoAoSE6TcuSDLwSPzfI7p71uy
zbYf4ZMt6Ko3EOoe80nmpG7di5QUYsEapVxC9n1jGUxXqO0U8SjGnUnR0ejwMDgb
FGWCEAAmcTR6zzMgHmhZw3mXKIi0VMfb5EEbKftGVpY70BNvZCwnhZQKPUChrL6h
v7XcGiTlx1jxleLnmKsqFxvt8R0wbq38ebb3DKA7f5Eu07Y38xBAjB5Zv+A0fPj0
+hzluCO5axN0qF1a4ZmJskx36+WzZ3CfQdF8a0RNDNR0c5TMpWj4DYh5P3DC0F5v
IS5mkxais5929miOgkZiZSiga8C3VPUoHHELkDTjfMJW0lk7dqAw4GXlbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRHvhujLkRb+Qq/46f1IGUPaVDWMB8GA1UdIwQY
MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt
M2NiOGQ4MTdlMDI3LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3
LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIQuqJhZ
2zFEJ42+vjfMcIiFTirc5oe0hRAjbT/M8kX4Fwkw9a1l8SGrjvDHk5YzwRYohIzz
aIVqZTcyjpvmXjVZVcCtos+M7nHUxKdwfSc3r+zJyGi4ybTHjARUyTAfQ2YuBzcs
3rq7wvlSr1+7ErCOBfj2pzD0TXSZUK/TTejLLt25OozQ66lrxiSIZjbMGHz1lnnO
F6GdPn1REW5dfU2AHNHsesW0VbvN8ubDCu5J2C0OZQ+ncv4kXPZogxEjKneoVcwa
fBzqF2cm6dBsMyZ6iKeNcAKHuMp1eTVg4va4usoN8Cu1vIJed/NWyjpfLhHgE+Kr
0nLLnc8I1jGXjg==
-----END CERTIFICATE-----
Generated at Sun May 11 06:58:25 2025 by rpki-client