Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: gvMASlwiN6Yo44ss4An10VfCJfDQrlhNbZ+STH7uWYA=
Subject key identifier: D2:4F:69:97:47:21:1F:84:B9:87:7B:FC:D1:85:1B:9F:26:A0:39:0A
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 01965492CF002A550752BD8E9023DC8F3F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 91
Signing time: Sun 20 Apr 2025 19:00:29 +0000
Manifest this update: Sun 20 Apr 2025 19:00:29 +0000
Manifest next update: Mon 21 Apr 2025 19:00:29 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: o+XFiDUqNIP5/5h4Ep+KF/gUQkSCP0pcznFQj7KBXz0=)
2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:cf:00:2a:55:07:52:bd:8e:90:23:dc:8f:3f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Apr 20 19:00:29 2025 GMT
Not After : Apr 21 19:00:29 2025 GMT
Subject: CN=d24f699747211f84b9877bfcd1851b9f26a0390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:f2:45:72:8f:e1:e3:30:81:40:bb:a2:23:
40:cf:c5:43:24:1d:98:b1:ba:85:61:09:25:ca:8b:
50:46:db:54:23:96:71:c8:12:be:dc:6d:49:76:39:
6f:b6:f9:d2:e2:8f:f3:bf:3c:60:a9:06:1f:2b:24:
01:d0:d9:fd:52:02:ab:24:5b:d1:73:cd:f9:4a:63:
da:da:65:68:a3:70:04:5e:ab:5b:27:25:07:fb:7c:
7c:9b:d5:19:49:c1:51:7b:11:f1:b1:39:5e:de:f3:
64:f0:d5:7a:f5:b0:06:8c:43:9a:50:9c:dc:97:a1:
89:68:35:25:7a:64:01:5f:1e:5c:d2:2f:0c:10:ad:
70:78:6f:cc:c9:df:12:0d:77:fe:eb:6a:8f:1d:6f:
20:77:c9:8f:91:11:13:11:a1:a2:d1:29:12:e7:32:
1e:95:d8:70:c9:c4:6b:2e:f7:35:96:ae:3e:82:ad:
d3:ff:8f:1b:e1:fe:b3:1e:f8:80:dd:a4:07:ad:7c:
ee:0a:bd:b2:70:2c:98:79:78:9f:b0:25:cc:8b:db:
0b:97:90:7f:30:31:00:2e:6f:84:91:ee:71:bc:bb:
5c:80:30:1f:aa:70:6a:18:12:ec:65:56:25:0e:db:
1d:4d:cd:41:67:c4:9c:79:cf:2e:e6:de:b6:ed:46:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:69:97:47:21:1F:84:B9:87:7B:FC:D1:85:1B:9F:26:A0:39:0A
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:62:73:3e:93:4e:b3:2d:a5:97:99:b6:c0:88:27:a9:4f:32:
63:be:ab:08:87:1b:9a:ea:9c:5b:a3:3b:09:ec:85:80:a4:ce:
77:1d:7f:82:88:ad:37:f0:f3:8d:b0:e2:42:b9:98:6a:58:ae:
d8:65:47:8c:11:96:23:25:e1:a0:1c:a3:7c:e6:1d:c6:15:54:
5c:3c:96:a7:44:6e:3b:94:1a:00:2c:3c:be:99:23:5f:38:f5:
1a:d8:8d:47:c9:53:33:2f:43:00:96:c0:40:40:47:14:6c:fa:
6a:16:13:4a:1a:c8:c0:24:d3:ac:f4:1a:1c:43:d4:49:2c:77:
88:4c:11:5c:94:f2:cd:f9:0a:5e:70:06:da:bb:57:d2:f7:d8:
8f:1e:38:66:71:53:17:e4:0a:0c:38:0a:94:d5:a1:f6:45:f8:
b6:d3:ce:25:f8:05:28:46:eb:67:8b:b2:7a:99:af:e3:0c:89:
bd:8d:aa:b8:f2:b6:54:aa:0a:e5:a5:8a:dd:7b:48:d8:1f:77:
bf:f9:31:7a:4a:32:80:64:2b:8d:e0:cc:8b:e7:a5:43:6d:0f:
34:9f:fe:92:a3:03:61:6c:e5:88:75:e5:ee:23:14:9f:a3:f8:
ed:12:6c:37:da:bf:d6:d1:30:11:e7:16:a3:a9:7f:f7:0f:ea:
f6:00:25:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUks8AKlUHUr2OkCPcjz8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjUyM2ZlMGQ2YmQ5YzY3ZTBiY2IwMDk4YTNjMzYzZjJm
OTBmN2MwHhcNMjUwNDIwMTkwMDI5WhcNMjUwNDIxMTkwMDI5WjAzMTEwLwYDVQQD
EyhkMjRmNjk5NzQ3MjExZjg0Yjk4NzdiZmNkMTg1MWI5ZjI2YTAzOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3yRXKP4eMwgUC7oiNAz8VDJB2Y
sbqFYQklyotQRttUI5ZxyBK+3G1JdjlvtvnS4o/zvzxgqQYfKyQB0Nn9UgKrJFvR
c835SmPa2mVoo3AEXqtbJyUH+3x8m9UZScFRexHxsTle3vNk8NV69bAGjEOaUJzc
l6GJaDUlemQBXx5c0i8MEK1weG/Myd8SDXf+62qPHW8gd8mPkRETEaGi0SkS5zIe
ldhwycRrLvc1lq4+gq3T/48b4f6zHviA3aQHrXzuCr2ycCyYeXifsCXMi9sLl5B/
MDEALm+Eke5xvLtcgDAfqnBqGBLsZVYlDtsdTc1BZ8Scec8u5t627UZtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJPaZdHIR+EuYd7/NGFG58moDkKMB8GA1UdIwQY
MBaAFBllI/4Na9nGfgvLAJijw2Py+Q98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAt
ZGU4MzU0NThkYThkLzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAtZGU4MzU0NThkYThk
LzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmJzPpNO
sy2ll5m2wIgnqU8yY76rCIcbmuqcW6M7CeyFgKTOdx1/goitN/DzjbDiQrmYaliu
2GVHjBGWIyXhoByjfOYdxhVUXDyWp0RuO5QaACw8vpkjXzj1GtiNR8lTMy9DAJbA
QEBHFGz6ahYTShrIwCTTrPQaHEPUSSx3iEwRXJTyzfkKXnAG2rtX0vfYjx44ZnFT
F+QKDDgKlNWh9kX4ttPOJfgFKEbrZ4uyepmv4wyJvY2quPK2VKoK5aWK3XtI2B93
v/kxekoygGQrjeDMi+elQ20PNJ/+kqMDYWzliHXl7iMUn6P47RJsN9q/1tEwEecW
o6l/9w/q9gAlww==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:29:56 2025 by rpki-client