Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: C6692M0ve1ZTRzgX72N8BvUHkIaoXdeahbxA2qUSNso=
Subject key identifier: 23:3B:16:48:EB:2C:D6:8C:AB:5A:15:A0:95:14:FC:F5:BC:47:35:B7
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 0196C917736E563187937B67E86E5C5469E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1540
Signing time: Tue 13 May 2025 10:01:19 +0000
Manifest this update: Tue 13 May 2025 10:01:19 +0000
Manifest next update: Wed 14 May 2025 10:01:19 +0000
Files and hashes: 1: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: xAV7s17RVwVXOC4IqrCVIGfNCBT8lLNflLcz4RwfwB0=)
2: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
3: zYcJKaM6JzCKVxiyX4VCo_gC9ZM.roa (hash: mZBVVY1LVqtMV+cGPcfvfBAAoOoYhoi230NuYqjuA4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:73:6e:56:31:87:93:7b:67:e8:6e:5c:54:69:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: May 13 10:01:19 2025 GMT
Not After : May 14 10:01:19 2025 GMT
Subject: CN=233b1648eb2cd68cab5a15a09514fcf5bc4735b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:f5:a4:b9:a8:fd:9e:a5:b3:f9:a8:5f:44:
5d:84:f4:17:a6:95:f2:c8:1e:a0:ad:69:21:e2:f2:
93:8e:e6:68:13:3a:99:6c:f6:fa:1a:43:92:dd:d4:
5c:1f:2e:51:af:80:c8:4f:9a:4e:35:10:32:31:94:
d2:f7:3b:91:2d:ff:33:bd:8a:97:fc:28:f0:35:15:
7c:e2:2f:e6:e3:ce:fd:fe:ac:4d:ac:61:9a:fb:19:
6b:92:ba:28:8c:f6:27:29:27:a4:83:96:55:18:15:
95:b8:54:87:c3:31:ed:74:85:3d:8e:cf:84:1f:61:
85:8d:64:26:56:a3:a2:3f:fb:c2:f4:53:9e:a0:a3:
39:4f:2b:be:2d:06:22:9f:81:a8:91:70:df:44:c3:
86:5f:80:4d:b7:e6:28:3e:9b:8c:9c:ac:c1:68:67:
f7:4a:ec:b6:bb:2f:81:01:6e:7f:48:bb:a3:1b:da:
98:a5:f5:74:0c:ea:d1:0b:e2:66:de:e6:0f:25:27:
cf:6d:1f:1e:4d:61:b7:83:43:31:f9:8d:ce:57:5a:
6a:7b:5f:90:ca:d2:94:ba:e0:77:95:a0:36:60:4f:
91:47:cf:a5:83:41:ea:f8:f3:ee:72:eb:8f:4b:94:
dc:f2:82:c9:87:21:39:30:da:f8:56:9b:07:9b:d7:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3B:16:48:EB:2C:D6:8C:AB:5A:15:A0:95:14:FC:F5:BC:47:35:B7
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d7:cc:33:da:8b:2f:1d:4b:6a:cf:f9:f2:55:1d:9f:74:59:
a4:79:85:40:2a:f2:62:a4:5f:d9:ff:d4:b2:53:80:62:45:fe:
d9:96:63:e3:4c:ef:26:bd:7d:b5:48:ec:36:e4:aa:95:9a:c8:
65:82:80:d1:0d:e0:51:de:d3:e1:8a:34:27:4b:34:13:be:31:
8e:67:20:60:7e:a1:fa:69:59:09:54:f9:89:4f:54:e1:f0:aa:
e4:b4:91:7c:d3:c8:3f:46:03:ec:91:f6:18:da:93:3d:2c:dc:
39:2d:8f:41:95:a0:2b:82:d0:62:f7:b2:3c:06:79:3a:60:e1:
9c:25:92:b6:e9:3f:d1:94:e4:2e:d8:bf:95:33:e3:38:d0:34:
e3:a0:c4:58:e4:63:78:55:62:b5:36:58:ea:0b:68:66:4b:6b:
4e:fe:89:5e:7d:04:62:08:81:59:6c:77:dd:75:d7:25:ef:e7:
9c:99:b3:0f:4b:8f:4c:54:bb:1a:cf:c1:78:15:40:26:91:ad:
28:5b:09:94:a4:db:6b:c0:0a:4f:67:af:4a:18:cb:aa:6c:dc:
d4:24:9f:5d:40:6e:af:87:c1:07:ba:fe:81:04:34:cc:53:8b:
ac:e8:8a:05:c9:e6:fa:27:be:0b:93:75:5a:e1:36:4a:d5:91:
5c:d2:43:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJF3NuVjGHk3tn6G5cVGnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjUwNTEzMTAwMTE5WhcNMjUwNTE0MTAwMTE5WjAzMTEwLwYDVQQD
EygyMzNiMTY0OGViMmNkNjhjYWI1YTE1YTA5NTE0ZmNmNWJjNDczNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zv1pLmo/Z6ls/moX0RdhPQXppXy
yB6grWkh4vKTjuZoEzqZbPb6GkOS3dRcHy5Rr4DIT5pONRAyMZTS9zuRLf8zvYqX
/CjwNRV84i/m4879/qxNrGGa+xlrkroojPYnKSekg5ZVGBWVuFSHwzHtdIU9js+E
H2GFjWQmVqOiP/vC9FOeoKM5Tyu+LQYin4GokXDfRMOGX4BNt+YoPpuMnKzBaGf3
Suy2uy+BAW5/SLujG9qYpfV0DOrRC+Jm3uYPJSfPbR8eTWG3g0Mx+Y3OV1pqe1+Q
ytKUuuB3laA2YE+RR8+lg0Hq+PPucuuPS5Tc8oLJhyE5MNr4VpsHm9fA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM7FkjrLNaMq1oVoJUU/PW8RzW3MB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdfMM9qL
Lx1Las/58lUdn3RZpHmFQCryYqRf2f/UslOAYkX+2ZZj40zvJr19tUjsNuSqlZrI
ZYKA0Q3gUd7T4Yo0J0s0E74xjmcgYH6h+mlZCVT5iU9U4fCq5LSRfNPIP0YD7JH2
GNqTPSzcOS2PQZWgK4LQYveyPAZ5OmDhnCWStuk/0ZTkLti/lTPjONA046DEWORj
eFVitTZY6gtoZktrTv6JXn0EYgiBWWx33XXXJe/nnJmzD0uPTFS7Gs/BeBVAJpGt
KFsJlKTba8AKT2evShjLqmzc1CSfXUBur4fBB7r+gQQ0zFOLrOiKBcnm+ie+C5N1
WuE2StWRXNJD/w==
-----END CERTIFICATE-----
Generated at Tue May 13 13:25:56 2025 by rpki-client