Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: 8CsXsjz5lNZ/M3qjd+afrh7qsreW9KfiNYzOionZm2Y=
Subject key identifier: F3:91:CF:AC:79:A4:BA:F5:18:03:16:EF:DD:1D:91:51:E4:AD:35:F6
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 01969CE2A9FA2F93E9D29A04CDDA75E32FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1525
Signing time: Sun 04 May 2025 20:00:22 +0000
Manifest this update: Sun 04 May 2025 20:00:22 +0000
Manifest next update: Mon 05 May 2025 20:00:22 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: mhxfmUdm/lOQ2tTgvgRC0MgYDTN400PLHFnB7HCIRuo=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:a9:fa:2f:93:e9:d2:9a:04:cd:da:75:e3:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: May 4 20:00:22 2025 GMT
Not After : May 5 20:00:22 2025 GMT
Subject: CN=f391cfac79a4baf5180316efdd1d9151e4ad35f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:ee:6b:a9:d7:6a:cd:9b:16:22:bb:17:1a:
13:0d:42:2a:b6:e0:df:1b:69:89:1b:5b:27:cc:0d:
ab:8a:65:81:4f:b8:45:c0:0d:4a:06:08:b1:f3:7f:
52:2d:5a:62:6e:74:fc:a7:65:6b:c7:75:42:ca:48:
67:36:4a:9f:8d:cf:88:6d:e9:e6:df:d8:33:d9:42:
b0:09:d4:42:be:7d:d2:98:a8:96:85:14:4a:ef:bc:
9d:7b:c0:ab:2c:b1:7b:33:6d:95:1e:d0:28:3a:4e:
98:c8:9e:ee:7e:aa:ea:09:03:18:cc:1d:0b:0a:7d:
71:47:87:e3:6e:92:cf:ee:b4:b5:3f:2f:a1:42:59:
94:93:57:fb:df:d3:f9:83:9f:8d:e6:d4:c6:29:8b:
70:8a:41:ce:67:1e:6e:75:85:81:07:f4:0b:a2:f4:
20:12:a5:99:cd:92:f9:58:ee:9d:6a:fd:cf:3a:68:
1c:7f:e2:4d:74:3d:65:87:1e:25:5b:c7:bc:c6:3e:
3e:a5:b4:bb:9e:3a:3e:8c:6d:11:39:ce:28:66:91:
a7:71:b9:36:51:fb:62:71:50:03:69:2f:31:03:e2:
29:47:66:e9:8b:be:4a:cc:ec:6c:c6:d2:5e:f3:85:
94:de:bc:0c:d6:aa:8b:47:4a:1f:18:ac:9e:39:2f:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:CF:AC:79:A4:BA:F5:18:03:16:EF:DD:1D:91:51:E4:AD:35:F6
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:b1:58:32:40:20:17:66:c6:eb:a6:00:63:a1:a6:b0:0d:
05:62:59:90:9b:ea:f7:45:02:8f:c3:e2:17:ae:15:c1:52:26:
e4:5e:63:7e:8f:a2:2a:0e:07:34:c8:00:bb:d2:bb:bd:23:c6:
b5:b8:87:e5:00:d7:b9:a4:60:93:18:33:d3:af:6f:a0:73:a4:
23:64:f9:3d:1e:59:96:30:b9:26:37:2a:e1:98:38:f4:29:11:
39:73:43:b6:48:ca:52:0a:4f:99:f5:d1:f5:58:63:4f:81:3e:
a3:34:a8:ef:f9:b7:ea:c6:75:10:17:00:4e:4c:14:e5:2b:83:
d3:ac:64:e4:11:ea:fd:f8:02:66:e0:d9:5d:35:a4:c0:bf:b0:
58:e2:c9:94:8a:fc:b9:e2:1e:ec:4e:02:88:12:97:73:e0:24:
47:25:22:45:04:6e:38:1e:53:98:94:6f:35:0c:6c:d1:3d:70:
9f:05:fd:0a:04:b2:34:8e:05:26:a3:69:ec:81:9c:b7:a1:82:
28:b6:8a:bb:0f:91:f4:e7:34:80:96:58:bf:de:5a:6a:b7:8b:
7e:e4:c1:6c:d4:de:c7:5a:54:11:1a:58:d7:c2:d6:3a:7d:1b:
20:54:5c:eb:eb:70:ae:c1:57:1e:fb:83:02:a2:56:67:76:28:
d0:6a:9f:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZac4qn6L5Pp0poEzdp14y+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDAxZDc3MDI1ZjA1MmFmN2QwZTYyZTE3MDEwMTZiOWUy
MmUwMDIwHhcNMjUwNTA0MjAwMDIyWhcNMjUwNTA1MjAwMDIyWjAzMTEwLwYDVQQD
EyhmMzkxY2ZhYzc5YTRiYWY1MTgwMzE2ZWZkZDFkOTE1MWU0YWQzNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/ua6nXas2bFiK7FxoTDUIqtuDf
G2mJG1snzA2rimWBT7hFwA1KBgix839SLVpibnT8p2Vrx3VCykhnNkqfjc+Ibenm
39gz2UKwCdRCvn3SmKiWhRRK77yde8CrLLF7M22VHtAoOk6YyJ7ufqrqCQMYzB0L
Cn1xR4fjbpLP7rS1Py+hQlmUk1f739P5g5+N5tTGKYtwikHOZx5udYWBB/QLovQg
EqWZzZL5WO6dav3POmgcf+JNdD1lhx4lW8e8xj4+pbS7njo+jG0ROc4oZpGncbk2
UfticVADaS8xA+IpR2bpi75KzOxsxtJe84WU3rwM1qqLR0ofGKyeOS+bQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPORz6x5pLr1GAMW790dkVHkrTX2MB8GA1UdIwQY
MBaAFBoAHXcCXwUq99DmLhcBAWueIuACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYt
MDliZGViNmFmYWJkLzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYtMDliZGViNmFmYWJk
LzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgixWDJA
IBdmxuumAGOhprANBWJZkJvq90UCj8PiF64VwVIm5F5jfo+iKg4HNMgAu9K7vSPG
tbiH5QDXuaRgkxgz069voHOkI2T5PR5ZljC5Jjcq4Zg49CkROXNDtkjKUgpPmfXR
9VhjT4E+ozSo7/m36sZ1EBcATkwU5SuD06xk5BHq/fgCZuDZXTWkwL+wWOLJlIr8
ueIe7E4CiBKXc+AkRyUiRQRuOB5TmJRvNQxs0T1wnwX9CgSyNI4FJqNp7IGct6GC
KLaKuw+R9Oc0gJZYv95aareLfuTBbNTex1pUERpY18LWOn0bIFRc6+twrsFXHvuD
AqJWZ3Yo0GqfHg==
-----END CERTIFICATE-----
Generated at Mon May 5 05:56:21 2025 by rpki-client