Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: oK5D7tgYsO4U5w3FzVxG577eGxqqkFrAq3bB+dF/3rA=
Subject key identifier: B9:CD:3F:F7:49:18:91:5F:53:BE:35:DF:D2:03:4E:93:6B:72:7A:A1
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 0196AAD5AC85CDF93820CE20F19EBD3215D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: CE
Signing time: Wed 07 May 2025 13:00:52 +0000
Manifest this update: Wed 07 May 2025 13:00:52 +0000
Manifest next update: Thu 08 May 2025 13:00:52 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: +F9RX5bB05TSUOzNjVmD2V08SZtBBCQ05WAlxJOtUEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:ac:85:cd:f9:38:20:ce:20:f1:9e:bd:32:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: May 7 13:00:52 2025 GMT
Not After : May 8 13:00:52 2025 GMT
Subject: CN=b9cd3ff74918915f53be35dfd2034e936b727aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:d3:22:a8:b3:91:3b:60:72:f5:5d:e4:29:
3d:6e:f8:cd:c5:ac:b0:02:11:05:0b:09:fd:c1:84:
a4:b8:c2:52:2d:47:4e:b6:19:4b:45:e9:c2:72:2e:
8d:98:45:3e:40:fa:3a:4a:78:3f:68:76:fe:70:b2:
4f:4e:c6:7a:af:d6:a0:aa:89:4c:f0:e8:59:7d:e8:
e6:81:d2:51:b5:1b:ab:a5:65:da:0f:6e:ab:e0:a5:
af:e7:ce:01:e8:5a:c1:36:c8:20:a9:dc:12:51:96:
df:0e:a2:68:d5:a2:61:d4:02:fc:53:39:55:8a:e6:
52:e8:c7:2f:4c:7e:3b:35:73:46:f6:65:59:5d:23:
73:4a:a0:11:b6:57:1f:1a:fb:75:84:77:77:72:ef:
0a:48:bb:34:c1:42:98:88:dd:61:3d:a5:b5:42:e0:
ea:b4:99:60:5e:76:e2:8f:b0:c3:e4:78:09:fa:9e:
8c:38:e2:90:79:bc:0e:8a:b9:85:3b:79:5f:19:bf:
f3:36:07:c6:49:be:11:4e:f7:99:79:99:3a:13:ad:
72:92:a9:15:d5:34:73:25:ac:fb:7b:95:aa:24:12:
a3:dc:70:88:fd:dd:6c:ad:29:cc:58:92:71:52:0a:
41:fc:9f:52:eb:91:fb:3f:36:62:a0:72:84:2e:a7:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:3F:F7:49:18:91:5F:53:BE:35:DF:D2:03:4E:93:6B:72:7A:A1
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:2e:dd:51:3f:6d:f5:8d:ca:24:12:14:3a:ee:bb:d4:20:
7d:27:8c:0d:9a:19:6d:88:06:7d:e9:9c:0d:1e:0c:45:2c:e1:
d2:28:c1:8f:e3:8d:c8:f8:7c:c6:a5:b2:56:3c:51:70:e7:62:
6b:06:f9:57:97:da:5f:ee:7a:74:6e:03:4f:dd:c8:eb:1f:49:
de:81:ed:b9:0a:a0:63:11:fa:fd:8f:21:4f:4f:f5:84:e1:81:
52:e1:7a:48:07:29:40:67:3a:7f:86:fb:51:b2:32:78:fc:ed:
46:98:79:85:52:fb:e5:bf:2f:83:3a:95:6b:de:df:44:24:12:
c9:20:6e:3d:5b:72:cf:d9:88:39:57:ec:b0:43:4c:89:46:48:
69:c0:bf:11:6b:9d:05:fc:2c:a6:95:07:cf:8a:96:90:8d:57:
4c:9a:9b:df:9c:c4:9d:ce:db:e1:c1:83:24:e5:ee:fc:ac:cf:
9a:94:ae:20:dc:80:07:da:cb:9e:89:05:91:2e:75:54:fa:b5:
e9:2e:f8:77:b2:9b:2d:a8:5c:42:ba:87:b2:e6:06:01:21:7a:
60:81:d8:42:ba:3d:0a:eb:3f:15:97:81:a8:14:d4:0c:24:f2:
24:33:f3:ff:d2:18:86:f6:8a:d0:95:d0:e5:52:a4:4a:fe:21:
63:39:eb:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaq1ayFzfk4IM4g8Z69MhXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy
ZjdmOTUwHhcNMjUwNTA3MTMwMDUyWhcNMjUwNTA4MTMwMDUyWjAzMTEwLwYDVQQD
EyhiOWNkM2ZmNzQ5MTg5MTVmNTNiZTM1ZGZkMjAzNGU5MzZiNzI3YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjfTIqizkTtgcvVd5Ck9bvjNxayw
AhEFCwn9wYSkuMJSLUdOthlLRenCci6NmEU+QPo6Sng/aHb+cLJPTsZ6r9agqolM
8OhZfejmgdJRtRurpWXaD26r4KWv584B6FrBNsggqdwSUZbfDqJo1aJh1AL8UzlV
iuZS6McvTH47NXNG9mVZXSNzSqARtlcfGvt1hHd3cu8KSLs0wUKYiN1hPaW1QuDq
tJlgXnbij7DD5HgJ+p6MOOKQebwOirmFO3lfGb/zNgfGSb4RTveZeZk6E61ykqkV
1TRzJaz7e5WqJBKj3HCI/d1srSnMWJJxUgpB/J9S65H7PzZioHKELqf0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnNP/dJGJFfU74139IDTpNrcnqhMB8GA1UdIwQY
MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt
NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw
LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJMu3VE/
bfWNyiQSFDruu9QgfSeMDZoZbYgGfemcDR4MRSzh0ijBj+ONyPh8xqWyVjxRcOdi
awb5V5faX+56dG4DT93I6x9J3oHtuQqgYxH6/Y8hT0/1hOGBUuF6SAcpQGc6f4b7
UbIyePztRph5hVL75b8vgzqVa97fRCQSySBuPVtyz9mIOVfssENMiUZIacC/EWud
BfwsppUHz4qWkI1XTJqb35zEnc7b4cGDJOXu/KzPmpSuINyAB9rLnokFkS51VPq1
6S74d7KbLahcQrqHsuYGASF6YIHYQro9Cus/FZeBqBTUDCTyJDPz/9IYhvaK0JXQ
5VKkSv4hYznrnA==
-----END CERTIFICATE-----
Generated at Wed May 7 16:14:15 2025 by rpki-client