Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: 3M21VeM992RlgpeMMcOQVSWhGntBgBJly8GfIpH+LV8=
Subject key identifier: 05:A7:C3:E5:EC:FF:CD:F1:45:EA:4D:5C:4B:50:7C:95:5D:D3:3C:FD
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 0196BF6F34F86B880D9797EDDA6FF01E1872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0BA3
Signing time: Sun 11 May 2025 13:00:58 +0000
Manifest this update: Sun 11 May 2025 13:00:58 +0000
Manifest next update: Mon 12 May 2025 13:00:58 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: prPJRVca0uqtwE/sdYwX9FCtjADNBsLBLvVYkOA2j+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:34:f8:6b:88:0d:97:97:ed:da:6f:f0:1e:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: May 11 13:00:58 2025 GMT
Not After : May 12 13:00:58 2025 GMT
Subject: CN=05a7c3e5ecffcdf145ea4d5c4b507c955dd33cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:1d:b9:24:dd:28:07:24:7a:14:99:dc:91:
4d:1e:fd:84:4d:4e:84:c4:e1:ae:03:cf:75:6e:9f:
d9:5e:ef:a6:1d:00:25:e2:d3:ae:26:db:b0:24:6f:
02:3b:19:3c:cf:38:a1:e1:ef:a8:d6:86:50:12:8b:
db:50:fe:e3:04:db:7f:1a:59:9a:6c:4c:83:7b:0c:
98:cd:7f:ec:f7:3d:de:36:f8:69:c7:6e:ec:60:40:
14:ac:df:ba:82:95:83:ad:31:9a:ee:83:d5:e1:5f:
2c:85:ca:de:61:11:96:16:76:c1:8c:85:e3:cf:f1:
15:c0:6b:73:c6:b8:1a:71:bc:7a:ac:59:a5:fa:db:
15:3d:7c:85:ba:26:5d:96:73:f8:d7:a6:fc:4f:cd:
a1:c3:6b:05:5a:9a:9c:18:a9:e9:fc:1c:d9:da:ea:
da:2c:70:88:7c:eb:b4:b5:55:8f:0e:ab:6a:f6:51:
1d:e4:24:51:60:60:9f:db:67:36:72:54:8a:3b:4f:
bd:75:a2:5b:08:25:99:2a:83:f9:6a:bd:c7:f6:8f:
bb:a9:aa:ab:5a:71:e5:5e:61:70:3e:e3:d8:5f:dc:
3a:2a:03:2e:f0:e3:e9:e3:13:36:a0:4e:14:25:66:
da:b2:48:f4:49:27:09:91:33:4c:34:91:a9:8a:e5:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A7:C3:E5:EC:FF:CD:F1:45:EA:4D:5C:4B:50:7C:95:5D:D3:3C:FD
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:86:82:d6:37:f0:b7:b5:3d:d0:a8:85:fb:47:d4:fd:a0:1e:
24:59:ba:5a:ed:fc:67:b4:41:b8:15:ed:94:6b:b1:09:27:2a:
7d:9d:d7:25:95:da:33:2e:13:84:81:9a:78:b3:2e:73:23:4b:
45:44:a6:b7:f9:64:97:33:64:b5:07:98:01:47:fd:9e:27:0d:
99:1c:aa:b7:8e:c2:5b:6a:11:bd:3e:ff:61:46:13:30:7e:4e:
e4:78:de:3e:8f:fb:43:27:26:3d:89:39:ea:6d:97:8f:3a:bc:
22:67:a4:8c:88:be:a1:d4:4f:23:b0:96:78:08:f5:91:26:28:
07:86:54:84:d3:2d:1e:60:23:64:df:14:90:01:ba:e4:3f:f0:
9e:39:28:05:8e:3c:6a:f2:e3:a0:3b:f9:bf:3f:9e:37:d1:d1:
f5:f8:b4:47:c8:fa:a7:4f:8e:7b:8b:3b:f9:28:22:e6:57:c4:
5c:a6:69:9f:90:08:57:31:33:9e:b4:4b:51:ce:d6:13:f5:21:
a3:14:1a:cb:80:40:d5:3d:e6:7a:63:70:52:f2:aa:de:15:3a:
24:e4:30:4d:d4:ee:e0:f1:4d:65:58:cd:2a:0b:8d:e6:70:c5:
a3:7d:02:16:d6:02:c3:48:a2:ce:a4:0d:59:1b:de:8e:e2:7d:
c2:68:46:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bzT4a4gNl5ft2m/wHhhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGZmZjNjZjkwMGU3NmFhZTBkMmNkMmU3N2RmZWFlMjRj
NWQyNGMwHhcNMjUwNTExMTMwMDU4WhcNMjUwNTEyMTMwMDU4WjAzMTEwLwYDVQQD
EygwNWE3YzNlNWVjZmZjZGYxNDVlYTRkNWM0YjUwN2M5NTVkZDMzY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HYduSTdKAckehSZ3JFNHv2ETU6E
xOGuA891bp/ZXu+mHQAl4tOuJtuwJG8COxk8zzih4e+o1oZQEovbUP7jBNt/Glma
bEyDewyYzX/s9z3eNvhpx27sYEAUrN+6gpWDrTGa7oPV4V8shcreYRGWFnbBjIXj
z/EVwGtzxrgacbx6rFml+tsVPXyFuiZdlnP416b8T82hw2sFWpqcGKnp/BzZ2ura
LHCIfOu0tVWPDqtq9lEd5CRRYGCf22c2clSKO0+9daJbCCWZKoP5ar3H9o+7qaqr
WnHlXmFwPuPYX9w6KgMu8OPp4xM2oE4UJWbaskj0SScJkTNMNJGpiuVE4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWnw+Xs/83xRepNXEtQfJVd0zz9MB8GA1UdIwQY
MBaAFBhP/zz5AOdqrg0s0ud9/q4kxdJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTIt
MzhiMzkyYzZlMWJmLzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTItMzhiMzkyYzZlMWJm
LzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIaC1jfw
t7U90KiF+0fU/aAeJFm6Wu38Z7RBuBXtlGuxCScqfZ3XJZXaMy4ThIGaeLMucyNL
RUSmt/lklzNktQeYAUf9nicNmRyqt47CW2oRvT7/YUYTMH5O5HjePo/7QycmPYk5
6m2Xjzq8ImekjIi+odRPI7CWeAj1kSYoB4ZUhNMtHmAjZN8UkAG65D/wnjkoBY48
avLjoDv5vz+eN9HR9fi0R8j6p0+Oe4s7+Sgi5lfEXKZpn5AIVzEznrRLUc7WE/Uh
oxQay4BA1T3memNwUvKq3hU6JOQwTdTu4PFNZVjNKguN5nDFo30CFtYCw0iizqQN
WRvejuJ9wmhGpQ==
-----END CERTIFICATE-----
Generated at Sun May 11 21:14:56 2025 by rpki-client