Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: BJ1irFUCX+hWWx8ZxfoVCDKoMJb66dhiZ8s/5f3Uphg=
Subject key identifier: BC:92:25:02:46:39:AE:C0:C0:31:94:69:E1:B3:BA:26:69:7C:70:C1
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 0196564A37FD3A1E006AA25CE7C88EF477DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 05D9
Signing time: Mon 21 Apr 2025 03:00:26 +0000
Manifest this update: Mon 21 Apr 2025 03:00:26 +0000
Manifest next update: Tue 22 Apr 2025 03:00:26 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: 4kyU+E7OYRdra8299ccfKUEhmhQZ9bwvXL/6B0dSwmk=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:37:fd:3a:1e:00:6a:a2:5c:e7:c8:8e:f4:77:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Apr 21 03:00:26 2025 GMT
Not After : Apr 22 03:00:26 2025 GMT
Subject: CN=bc9225024639aec0c0319469e1b3ba26697c70c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:a2:0c:94:c3:45:63:46:79:85:6b:6b:b7:
59:0f:d6:72:04:3f:1d:76:3a:f9:10:84:62:ad:65:
18:24:6b:86:bd:29:42:0a:5d:bd:03:17:ab:4f:33:
35:75:9c:da:1e:37:07:9b:40:76:da:81:ae:79:aa:
0a:6b:6d:c2:21:e4:6c:13:28:b7:7b:23:01:17:de:
9f:99:37:1a:ed:eb:e3:e2:aa:e3:86:ee:10:0a:7a:
37:85:de:68:72:73:d7:4d:78:fe:30:75:d8:44:be:
20:52:2a:b0:3a:c0:dc:be:2c:fa:d0:b0:3d:3d:e8:
88:5b:f4:fe:6c:fb:4b:45:50:c5:d0:76:05:74:a3:
b2:db:55:7f:3f:3d:a2:11:33:d5:cc:5e:68:f8:2b:
95:75:14:f1:59:5f:b6:d4:b8:a7:27:8e:95:f2:94:
ce:b0:9d:7c:a1:cb:7d:ec:c3:95:31:1c:08:fa:c3:
71:43:27:d5:4a:76:4b:2b:82:63:66:9a:39:11:19:
7e:0d:05:97:95:91:23:b6:31:07:e3:d2:c9:df:a4:
cb:a8:df:f6:67:a2:0f:7b:0e:ce:8d:d9:29:db:be:
ca:14:58:42:fb:8b:26:02:be:b8:14:4e:62:79:0c:
e5:ce:a9:05:35:62:42:b5:72:94:7e:5c:74:12:3f:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:92:25:02:46:39:AE:C0:C0:31:94:69:E1:B3:BA:26:69:7C:70:C1
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:34:51:6f:0f:86:2c:e1:44:68:20:ec:bc:2b:d4:7a:3d:
e5:23:00:78:a6:45:e9:11:08:6c:e3:ab:a4:76:21:81:6b:5f:
8a:48:d2:f4:69:e4:3d:f8:49:5f:bd:39:45:57:ff:04:5c:d0:
c0:67:de:35:c8:b2:fb:2e:fa:5f:37:3c:31:bf:51:72:0e:4e:
a8:50:03:5e:45:82:de:92:e7:a5:c5:71:f5:3a:51:ed:79:11:
69:49:50:bd:f6:ba:ce:25:f7:01:84:a7:34:d6:38:47:c9:e5:
38:30:91:5f:ae:6e:bf:7c:fc:b8:30:55:a4:6c:9d:47:c8:d3:
69:4c:85:88:4b:f1:87:cc:62:34:b9:5a:18:f7:f1:1a:68:88:
e9:78:73:a7:56:08:8f:01:a3:e8:20:6f:ed:e3:78:89:aa:c1:
3d:77:65:c5:e0:63:64:44:64:b3:01:ab:e6:ed:86:cb:68:50:
cf:e0:8f:0f:be:80:a5:86:b8:ea:cc:7f:c7:e1:51:d8:0e:16:
b7:6c:14:79:ce:38:9b:54:12:f8:30:e2:77:44:29:85:24:dd:
03:0e:1d:c9:77:2c:2d:6e:11:e8:37:03:2e:20:50:73:1f:22:
f7:60:3b:78:4e:cb:df:b4:df:c6:7d:81:68:a8:4d:f7:90:28:
de:29:ec:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSjf9Oh4AaqJc58iO9HfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjUwNDIxMDMwMDI2WhcNMjUwNDIyMDMwMDI2WjAzMTEwLwYDVQQD
EyhiYzkyMjUwMjQ2MzlhZWMwYzAzMTk0NjllMWIzYmEyNjY5N2M3MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmiiDJTDRWNGeYVra7dZD9ZyBD8d
djr5EIRirWUYJGuGvSlCCl29AxerTzM1dZzaHjcHm0B22oGueaoKa23CIeRsEyi3
eyMBF96fmTca7evj4qrjhu4QCno3hd5ocnPXTXj+MHXYRL4gUiqwOsDcviz60LA9
PeiIW/T+bPtLRVDF0HYFdKOy21V/Pz2iETPVzF5o+CuVdRTxWV+21LinJ46V8pTO
sJ18oct97MOVMRwI+sNxQyfVSnZLK4JjZpo5ERl+DQWXlZEjtjEH49LJ36TLqN/2
Z6IPew7Ojdkp277KFFhC+4smAr64FE5ieQzlzqkFNWJCtXKUflx0Ej+9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLySJQJGOa7AwDGUaeGzuiZpfHDBMB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh080UW8P
hizhRGgg7Lwr1Ho95SMAeKZF6REIbOOrpHYhgWtfikjS9GnkPfhJX705RVf/BFzQ
wGfeNciy+y76Xzc8Mb9Rcg5OqFADXkWC3pLnpcVx9TpR7XkRaUlQvfa6ziX3AYSn
NNY4R8nlODCRX65uv3z8uDBVpGydR8jTaUyFiEvxh8xiNLlaGPfxGmiI6Xhzp1YI
jwGj6CBv7eN4iarBPXdlxeBjZERkswGr5u2Gy2hQz+CPD76ApYa46sx/x+FR2A4W
t2wUec44m1QS+DDid0QphSTdAw4dyXcsLW4R6DcDLiBQcx8i92A7eE7L37Tfxn2B
aKhN95Ao3insjg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:57:53 2025 by rpki-client