Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: IVEq7N9getJzwXMVtNqvYWUU89nKABYT4OqNmzfjt+g=
Subject key identifier: 72:B3:18:B4:48:43:D8:E1:45:2F:4A:C0:A2:A4:C3:8E:F3:C1:E0:17
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 01964EC7BF841FB1740926E68454908AAED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 16:00:35 +0000
Manifest this update: Sat 19 Apr 2025 16:00:35 +0000
Manifest next update: Sun 20 Apr 2025 16:00:35 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: WpDW5+uXtj4MAE4gGKMokGzECu45OlaRLlVxqLVQ79o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:bf:84:1f:b1:74:09:26:e6:84:54:90:8a:ae:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Apr 19 16:00:35 2025 GMT
Not After : Apr 20 16:00:35 2025 GMT
Subject: CN=72b318b44843d8e1452f4ac0a2a4c38ef3c1e017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:a8:2a:70:63:88:3c:11:07:df:2e:63:b8:
d9:65:3b:ef:23:3b:40:a5:4e:c3:9e:b0:33:b7:97:
88:a9:b3:78:b5:d2:38:16:bd:25:7b:27:20:ab:c6:
1f:59:e8:87:0c:64:a8:16:77:88:5d:bf:c3:d1:68:
d5:ac:e9:3a:c0:32:78:d1:84:13:46:5f:0d:b2:b5:
f5:dc:da:33:2a:f6:bb:cc:64:d6:1b:71:8e:bf:f5:
70:96:b9:e8:e5:cc:b3:f8:c3:87:2c:e3:77:a8:f6:
16:64:88:6a:d6:6a:e9:11:69:44:c6:aa:0c:d1:29:
6e:39:97:22:1d:28:2e:3b:0a:7e:aa:97:8e:9a:32:
4a:34:56:36:de:42:9d:54:a7:0a:d8:cd:79:15:24:
4d:28:c5:4d:6d:cc:9a:82:f4:11:92:f6:8b:d8:56:
8a:cc:9c:54:35:37:0b:d3:c7:71:b4:a7:fc:ca:09:
fa:06:44:a6:25:36:16:03:5f:f8:d9:e2:0a:30:d5:
f0:b2:fa:35:c5:dc:a4:75:52:14:e6:2d:60:df:c3:
b0:c3:14:9e:3d:8d:25:1e:7d:3e:e0:4f:2b:2a:ca:
3d:aa:6a:e1:5c:a2:d2:2d:c5:dd:c0:b0:cc:8b:16:
5f:3d:df:62:e9:cd:3b:3d:84:ec:ed:db:1c:b4:99:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:18:B4:48:43:D8:E1:45:2F:4A:C0:A2:A4:C3:8E:F3:C1:E0:17
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:99:2e:78:4f:7b:6e:e7:4f:a9:49:75:7d:e1:f9:c8:82:
ad:31:f4:2e:ab:b1:32:72:2d:8a:f8:cb:41:88:2e:15:11:0a:
60:7e:3d:53:94:1e:94:04:77:ef:79:ac:ec:7e:be:6b:e6:5b:
32:14:1b:50:f2:ad:c3:84:4c:ad:37:f9:c6:85:45:5a:b3:38:
27:9a:bf:26:8c:d1:56:e6:18:1c:54:ff:f8:cc:b0:7d:63:76:
53:83:4a:03:69:fd:b7:36:d7:ca:37:fc:fb:c3:dc:ec:c7:16:
cc:0d:8f:5f:3f:02:d9:17:ba:02:72:97:10:ee:0d:a9:85:a8:
f9:50:0e:be:21:51:07:86:3b:78:6f:22:81:a0:aa:4e:24:db:
b1:bf:80:52:97:94:6d:aa:f1:f1:34:55:3e:1a:ad:5d:c9:36:
1a:9a:a5:b4:89:4b:3b:29:13:9f:48:3f:60:d9:d2:73:83:bc:
62:d3:e4:7a:a8:65:68:2f:ac:d6:11:6a:27:4a:7b:13:cf:12:
d3:69:6e:7c:9a:c1:e1:72:74:20:c0:eb:50:61:2e:84:15:23:
22:7c:d7:d8:e1:c4:6d:fc:a2:2f:48:48:9f:0e:96:38:70:ad:
d9:8b:8f:0b:c8:a0:e8:02:5e:23:c2:19:c3:37:9f:10:e5:40:
2b:f0:5c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx7+EH7F0CSbmhFSQiq7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZjdiY2IwNTA1ZDQ5Njk3ZDZjNTE3MzI0MTU4NjczNmU3
YjBkNzAwHhcNMjUwNDE5MTYwMDM1WhcNMjUwNDIwMTYwMDM1WjAzMTEwLwYDVQQD
Eyg3MmIzMThiNDQ4NDNkOGUxNDUyZjRhYzBhMmE0YzM4ZWYzYzFlMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzyoKnBjiDwRB98uY7jZZTvvIztA
pU7DnrAzt5eIqbN4tdI4Fr0leycgq8YfWeiHDGSoFneIXb/D0WjVrOk6wDJ40YQT
Rl8NsrX13NozKva7zGTWG3GOv/Vwlrno5cyz+MOHLON3qPYWZIhq1mrpEWlExqoM
0SluOZciHSguOwp+qpeOmjJKNFY23kKdVKcK2M15FSRNKMVNbcyagvQRkvaL2FaK
zJxUNTcL08dxtKf8ygn6BkSmJTYWA1/42eIKMNXwsvo1xdykdVIU5i1g38OwwxSe
PY0lHn0+4E8rKso9qmrhXKLSLcXdwLDMixZfPd9i6c07PYTs7dsctJkn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKzGLRIQ9jhRS9KwKKkw47zweAXMB8GA1UdIwQY
MBaAFBj3vLBQXUlpfWxRcyQVhnNuew1wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzct
ZTU4NGQ5ZTQ4MDIyLzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzctZTU4NGQ5ZTQ4MDIy
LzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA+ZLnhP
e27nT6lJdX3h+ciCrTH0LquxMnItivjLQYguFREKYH49U5QelAR373ms7H6+a+Zb
MhQbUPKtw4RMrTf5xoVFWrM4J5q/JozRVuYYHFT/+MywfWN2U4NKA2n9tzbXyjf8
+8Pc7McWzA2PXz8C2Re6AnKXEO4NqYWo+VAOviFRB4Y7eG8igaCqTiTbsb+AUpeU
barx8TRVPhqtXck2GpqltIlLOykTn0g/YNnSc4O8YtPkeqhlaC+s1hFqJ0p7E88S
02lufJrB4XJ0IMDrUGEuhBUjInzX2OHEbfyiL0hInw6WOHCt2YuPC8ig6AJeI8IZ
wzefEOVAK/BcOw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:17:33 2025 by rpki-client