Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: OLgUEEIFV//XrSZLzFJEmZEGbtDEJiB9HnrYwttefb8=
Subject key identifier: CB:EF:E0:E6:93:94:BE:91:09:5A:9B:A6:59:AA:4F:C6:BC:79:31:9D
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 0196B069FB1886F59BF376360A66001B5569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 67
Signing time: Thu 08 May 2025 15:00:57 +0000
Manifest this update: Thu 08 May 2025 15:00:57 +0000
Manifest next update: Fri 09 May 2025 15:00:57 +0000
Files and hashes: 1: 7aycDRTYf8P211UyjMoRLngFRos.roa (hash: 1hSkTrGl1NaKOimvmkvsZcL4F2FAkgvJlT6iCyQWKdc=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: vURIlEvzHlv4rXwAzOYw1dyXo63tLmtQCyyc0jpQ+4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:fb:18:86:f5:9b:f3:76:36:0a:66:00:1b:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: May 8 15:00:57 2025 GMT
Not After : May 9 15:00:57 2025 GMT
Subject: CN=cbefe0e69394be91095a9ba659aa4fc6bc79319d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:0e:4d:40:33:f9:7f:b6:b8:e3:16:3a:3e:
03:45:b8:4b:ec:11:f6:e7:3a:68:96:23:93:79:c0:
8f:4c:7b:b0:fa:e7:28:1a:a0:81:9e:cd:22:3f:50:
4b:b0:1b:ba:38:9e:74:b1:f1:e3:6f:80:02:80:fe:
e8:03:c7:63:94:cb:8d:a6:d4:a0:b0:2c:84:f1:fe:
f1:e3:45:c8:d6:6a:f5:61:f7:85:b8:da:a3:6d:14:
c7:82:66:b2:f4:c8:f9:f0:d7:7f:1e:b2:1b:5f:d2:
1a:9a:e4:ec:c4:da:94:cb:c2:66:42:13:fc:42:ea:
a8:b4:45:33:06:47:1d:07:45:1f:70:4a:ea:5d:04:
84:cc:ef:26:a7:59:60:0e:f2:b3:12:7f:d5:cc:34:
40:b7:1c:b4:e2:e0:9b:54:24:3b:cd:52:c1:e6:73:
b5:17:29:9e:d8:e3:21:bb:37:3c:b4:0e:fc:94:85:
f9:a7:b1:95:b1:e1:93:e2:53:37:19:0b:ff:64:0d:
77:ba:03:00:3c:c0:11:81:b2:bd:d7:ee:08:af:f3:
89:fb:8a:07:ad:0c:97:07:d8:c5:e7:0b:fa:ff:38:
84:93:99:4f:70:c7:6a:b0:49:3a:06:e4:30:df:e5:
d0:1b:1c:f4:80:8b:56:15:b6:b5:37:be:c6:27:30:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EF:E0:E6:93:94:BE:91:09:5A:9B:A6:59:AA:4F:C6:BC:79:31:9D
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:ef:20:aa:c2:e8:4a:a8:a6:c6:01:c8:d7:04:21:8b:30:
bb:3c:a5:82:ef:b2:a9:5d:fc:53:9b:93:a1:f5:a5:ae:7d:bf:
0a:65:ce:b7:d2:fe:d0:5e:6d:fe:ae:97:f1:7b:b8:0f:16:46:
93:31:99:71:c3:21:57:a9:84:de:1f:fe:ef:87:e1:7c:53:47:
f4:2b:6e:2d:26:3d:7d:49:b6:01:34:d0:d7:60:b9:fb:72:c9:
52:ca:54:ad:35:32:4d:e9:83:f6:13:60:99:33:86:fe:3a:23:
bd:64:eb:cf:46:b0:95:a1:44:f0:b8:51:dd:03:ad:21:8b:11:
a5:94:c4:9e:6e:ed:61:66:60:56:3a:ac:58:f4:97:dc:27:8f:
02:04:49:74:70:55:c9:79:df:bd:c2:73:4f:f4:8b:64:50:7e:
c7:63:a7:08:8f:c2:6b:cc:f6:b7:8d:2b:29:45:42:e7:e3:02:
b6:ee:7d:d0:6a:e4:02:de:f5:aa:1f:c8:54:64:b4:76:5f:4e:
9c:0a:b9:0d:b3:11:36:ec:f4:20:fd:76:ea:2c:7a:0e:9c:2c:
3c:62:f2:ca:73:d1:cc:46:96:e3:7a:79:b7:ae:ae:86:b5:c6:
e1:a7:27:2a:63:e2:58:42:c3:5b:90:cb:10:2f:31:e7:c8:81:
d3:dd:1a:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawafsYhvWb83Y2CmYAG1VpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4N2E3MDRmNDg1ZTExZGVkYWJjNTYyNjRlNWQ4MGMxNDg3
ZTA4NDIwHhcNMjUwNTA4MTUwMDU3WhcNMjUwNTA5MTUwMDU3WjAzMTEwLwYDVQQD
EyhjYmVmZTBlNjkzOTRiZTkxMDk1YTliYTY1OWFhNGZjNmJjNzkzMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEQOTUAz+X+2uOMWOj4DRbhL7BH2
5zpoliOTecCPTHuw+ucoGqCBns0iP1BLsBu6OJ50sfHjb4ACgP7oA8djlMuNptSg
sCyE8f7x40XI1mr1YfeFuNqjbRTHgmay9Mj58Nd/HrIbX9IamuTsxNqUy8JmQhP8
QuqotEUzBkcdB0UfcErqXQSEzO8mp1lgDvKzEn/VzDRAtxy04uCbVCQ7zVLB5nO1
Fyme2OMhuzc8tA78lIX5p7GVseGT4lM3GQv/ZA13ugMAPMARgbK91+4Ir/OJ+4oH
rQyXB9jF5wv6/ziEk5lPcMdqsEk6BuQw3+XQGxz0gItWFba1N77GJzANbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvv4OaTlL6RCVqbplmqT8a8eTGdMB8GA1UdIwQY
MBaAFBh6cE9IXhHe2rxWJk5dgMFIfghCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEt
Mjg1MTZiYjc1MDVjLzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEtMjg1MTZiYjc1MDVj
LzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9vvIKrC
6EqopsYByNcEIYswuzylgu+yqV38U5uTofWlrn2/CmXOt9L+0F5t/q6X8Xu4DxZG
kzGZccMhV6mE3h/+74fhfFNH9CtuLSY9fUm2ATTQ12C5+3LJUspUrTUyTemD9hNg
mTOG/jojvWTrz0awlaFE8LhR3QOtIYsRpZTEnm7tYWZgVjqsWPSX3CePAgRJdHBV
yXnfvcJzT/SLZFB+x2OnCI/Ca8z2t40rKUVC5+MCtu590GrkAt71qh/IVGS0dl9O
nAq5DbMRNuz0IP126ix6DpwsPGLyynPRzEaW43p5t66uhrXG4acnKmPiWELDW5DL
EC8x58iB090aRA==
-----END CERTIFICATE-----
Generated at Thu May 8 22:31:58 2025 by rpki-client