Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: XAdheZi+iQcqLUh6Kwz69C6TxqMiTH7nmHMVySr/qHY=
Subject key identifier: E8:CA:8A:AA:CB:4D:D3:1D:28:83:56:BD:23:7E:74:F8:DE:5C:3A:BA
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0196556E69072D198A01B350D497E4A5D131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 066E
Signing time: Sun 20 Apr 2025 23:00:21 +0000
Manifest this update: Sun 20 Apr 2025 23:00:21 +0000
Manifest next update: Mon 21 Apr 2025 23:00:21 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: 3WlJeMpYz1m7r3DBMVFr43t7u57m0fKwn0Yw82LlWtE=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:69:07:2d:19:8a:01:b3:50:d4:97:e4:a5:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Apr 20 23:00:21 2025 GMT
Not After : Apr 21 23:00:21 2025 GMT
Subject: CN=e8ca8aaacb4dd31d288356bd237e74f8de5c3aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:16:6a:46:a6:f1:3c:20:c9:3b:6e:cc:b7:
d6:2d:c6:42:9c:38:f3:c1:48:67:3f:62:90:14:a6:
96:41:4e:b9:e1:5b:03:3d:29:3c:a8:b2:eb:9b:44:
66:8e:0e:eb:6e:a5:cc:75:bd:46:bf:6e:41:68:77:
08:47:81:c3:6c:e1:84:9b:b4:f8:2a:77:a6:57:e6:
c6:95:99:dd:06:19:a1:68:4a:c3:de:e7:52:d4:9f:
2c:eb:05:6b:98:c9:2e:60:82:bb:18:42:2f:22:8c:
e2:88:a8:1c:d7:6a:55:a0:ac:55:73:e6:62:b4:85:
95:fa:4d:cf:e2:a7:36:95:da:b0:25:59:bc:5e:52:
c8:98:c1:94:42:4b:17:b7:06:f2:2b:3a:a8:cb:c7:
40:27:73:ea:27:6d:f6:e0:eb:7b:8e:ae:44:00:83:
ae:1f:c1:77:81:dc:40:f1:c0:ca:da:b3:b7:cf:f5:
8b:39:11:93:fa:44:2a:dc:11:43:55:1d:79:b6:47:
55:2a:94:d4:ea:44:90:e3:a1:ef:61:cc:73:b2:d9:
bf:ba:0d:b9:31:24:ea:38:be:78:cc:63:d6:10:06:
ae:bd:19:c4:f2:61:73:61:f3:e8:63:50:b2:9a:17:
da:00:60:fa:04:48:20:6b:67:b2:41:b7:02:57:63:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:8A:AA:CB:4D:D3:1D:28:83:56:BD:23:7E:74:F8:DE:5C:3A:BA
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9d:85:7e:f6:8d:09:4c:1a:7a:59:ea:40:30:c5:ee:7f:55:
43:b4:f0:e8:df:af:4c:bc:80:f4:eb:82:79:ec:f3:db:51:d3:
52:b3:72:11:35:91:b5:e8:70:94:b5:c6:bc:63:2e:b0:9f:15:
2d:84:1f:79:bb:19:41:55:1c:ab:13:d0:a8:f0:75:10:13:12:
65:c7:12:35:3c:0f:b8:ee:10:d2:c0:f0:b3:b4:48:41:c6:d2:
8d:fe:e5:83:cd:af:ec:2a:74:2f:03:91:1e:ce:6e:a0:95:13:
27:c7:a3:fc:3b:36:60:3c:68:81:95:31:85:88:4b:ee:73:cd:
d0:e9:86:82:76:74:0b:a6:38:38:37:3a:95:90:ae:60:87:eb:
c7:62:3f:b1:c1:3d:a1:59:dd:ce:bf:cd:52:c1:26:6b:db:38:
95:49:a1:54:fe:8d:ee:cb:04:17:7e:f9:a8:31:22:ec:7f:9f:
6f:62:a1:fa:78:ea:2d:41:75:2b:71:94:19:9d:40:b3:e9:39:
40:58:3d:bd:50:d6:0e:7a:61:60:cb:ad:7a:48:9f:ef:f8:8d:
d6:cc:8a:6f:14:af:02:a7:ea:19:69:bf:4d:7a:e9:42:44:ef:
f8:a6:44:fd:d9:7b:e4:d2:57:93:3a:17:45:ea:21:0d:d5:e2:
96:0e:12:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbmkHLRmKAbNQ1JfkpdExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1
NjVkNTcwHhcNMjUwNDIwMjMwMDIxWhcNMjUwNDIxMjMwMDIxWjAzMTEwLwYDVQQD
EyhlOGNhOGFhYWNiNGRkMzFkMjg4MzU2YmQyMzdlNzRmOGRlNWMzYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXcWakam8TwgyTtuzLfWLcZCnDjz
wUhnP2KQFKaWQU654VsDPSk8qLLrm0Rmjg7rbqXMdb1Gv25BaHcIR4HDbOGEm7T4
KnemV+bGlZndBhmhaErD3udS1J8s6wVrmMkuYIK7GEIvIoziiKgc12pVoKxVc+Zi
tIWV+k3P4qc2ldqwJVm8XlLImMGUQksXtwbyKzqoy8dAJ3PqJ2324Ot7jq5EAIOu
H8F3gdxA8cDK2rO3z/WLORGT+kQq3BFDVR15tkdVKpTU6kSQ46HvYcxzstm/ug25
MSTqOL54zGPWEAauvRnE8mFzYfPoY1CymhfaAGD6BEgga2eyQbcCV2OJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjKiqrLTdMdKINWvSN+dPjeXDq6MB8GA1UdIwQY
MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt
ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0
LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ2FfvaN
CUwaelnqQDDF7n9VQ7Tw6N+vTLyA9OuCeezz21HTUrNyETWRtehwlLXGvGMusJ8V
LYQfebsZQVUcqxPQqPB1EBMSZccSNTwPuO4Q0sDws7RIQcbSjf7lg82v7Cp0LwOR
Hs5uoJUTJ8ej/Ds2YDxogZUxhYhL7nPN0OmGgnZ0C6Y4ODc6lZCuYIfrx2I/scE9
oVndzr/NUsEma9s4lUmhVP6N7ssEF375qDEi7H+fb2Kh+njqLUF1K3GUGZ1As+k5
QFg9vVDWDnphYMutekif7/iN1syKbxSvAqfqGWm/TXrpQkTv+KZE/dl75NJXkzoX
ReohDdXilg4Syw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:48 2025 by rpki-client