Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: 3Am+Gngo4bFSDSpm4s3k4YuRk3Uv8rD0ei/g2pGfaBM=
Subject key identifier: D1:16:71:0E:DC:D0:1E:F6:FC:63:EA:F4:DA:51:CE:58:DF:62:E4:1C
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019655DD125C7C4A832494C2370EFD8F11DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0A36
Signing time: Mon 21 Apr 2025 01:01:13 +0000
Manifest this update: Mon 21 Apr 2025 01:01:13 +0000
Manifest next update: Tue 22 Apr 2025 01:01:13 +0000
Files and hashes: 1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: cvgN2iJQu60xOC+1tr/wTNNlEaRsLqIxygYKHRQQsT0=)
2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:12:5c:7c:4a:83:24:94:c2:37:0e:fd:8f:11:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Apr 21 01:01:13 2025 GMT
Not After : Apr 22 01:01:13 2025 GMT
Subject: CN=d116710edcd01ef6fc63eaf4da51ce58df62e41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:8b:fa:1b:0c:2d:91:0d:fd:28:a1:44:b5:
ed:1a:16:50:f4:75:5a:b1:8f:39:72:d8:8a:12:e1:
85:e6:da:84:76:7a:10:72:b6:be:47:e7:91:78:cd:
d9:c5:05:33:b9:43:b2:d8:3e:e1:01:8f:d0:d6:c8:
e8:73:ec:34:01:4b:5f:f0:be:3b:24:28:a4:a4:a3:
9b:c9:8e:b6:c3:67:31:ee:c5:0f:9a:7c:33:78:8c:
c3:0a:07:d2:01:dc:f8:05:60:e4:7f:31:a5:b3:14:
20:ec:ca:bb:2f:91:20:23:a3:a5:2d:5a:26:85:c6:
17:0c:fb:eb:a5:b1:40:fa:81:7d:89:98:a6:bc:61:
db:51:75:4e:af:92:60:70:46:e3:a9:96:7f:75:67:
e4:5a:e3:b5:65:52:a0:91:cf:93:37:f8:22:76:35:
02:f8:47:dc:16:79:47:7e:08:7a:24:ee:54:9c:96:
ba:7c:36:62:6c:26:d1:ac:7d:7f:2b:b5:84:68:b7:
1c:c2:85:93:11:dc:3e:7b:e2:ea:af:bb:33:4a:db:
a1:77:f2:3d:ba:db:c0:65:84:83:e0:e5:2e:c5:73:
8d:b4:76:a7:b7:08:b7:98:b7:0a:f4:b5:25:34:ec:
d3:ed:30:da:eb:67:7b:c4:4e:d0:83:09:64:d2:26:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:71:0E:DC:D0:1E:F6:FC:63:EA:F4:DA:51:CE:58:DF:62:E4:1C
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:5a:b0:62:f7:ec:1b:87:7f:a1:85:1a:86:ee:52:18:3f:
ea:55:6e:8f:fb:32:26:3a:23:2e:54:57:e2:48:43:68:22:f2:
ac:70:da:59:26:2b:eb:d7:62:7e:fd:bc:95:ea:27:c1:9b:9f:
5e:df:05:e7:dc:db:9b:83:af:e6:b2:51:2e:fa:46:eb:49:aa:
c2:ae:07:b8:d4:43:c9:41:89:ca:a6:10:42:5b:ff:8e:d7:4f:
43:02:97:a2:5d:de:39:af:1d:ea:08:41:c6:2e:15:c8:c8:69:
70:87:c1:ae:61:c5:30:d8:bb:a9:60:1a:ed:76:80:25:6f:41:
17:b0:bd:9b:09:f9:77:e0:53:a5:06:f1:d2:44:49:07:7e:3a:
82:30:49:f0:64:d3:ed:d6:d5:03:3f:88:05:63:13:2e:72:1c:
a4:94:1f:a2:13:73:31:9c:e1:07:09:5c:a9:a0:9d:09:80:af:
fc:de:1d:e9:7e:40:e0:00:4e:dd:29:43:16:4a:fe:45:bb:fd:
7f:25:3c:aa:61:4e:45:62:6c:11:90:12:75:4e:6f:4b:d3:3a:
9e:cf:7a:c9:bb:5e:d7:1d:f7:9e:e0:70:23:6b:a7:7b:21:ad:
4d:b7:8a:e8:0a:b8:bc:3c:ee:b2:1e:72:08:4e:f4:23:0a:8e:
eb:3b:1e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3RJcfEqDJJTCNw79jxHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI4MTdhMjk4ODJkNDMzYmYxYmI4ZWJjNTliMmZmMjU2
ZTgwM2YwHhcNMjUwNDIxMDEwMTEzWhcNMjUwNDIyMDEwMTEzWjAzMTEwLwYDVQQD
EyhkMTE2NzEwZWRjZDAxZWY2ZmM2M2VhZjRkYTUxY2U1OGRmNjJlNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2imL+hsMLZEN/SihRLXtGhZQ9HVa
sY85ctiKEuGF5tqEdnoQcra+R+eReM3ZxQUzuUOy2D7hAY/Q1sjoc+w0AUtf8L47
JCikpKObyY62w2cx7sUPmnwzeIzDCgfSAdz4BWDkfzGlsxQg7Mq7L5EgI6OlLVom
hcYXDPvrpbFA+oF9iZimvGHbUXVOr5JgcEbjqZZ/dWfkWuO1ZVKgkc+TN/gidjUC
+EfcFnlHfgh6JO5UnJa6fDZibCbRrH1/K7WEaLccwoWTEdw+e+Lqr7szStuhd/I9
utvAZYSD4OUuxXONtHantwi3mLcK9LUlNOzT7TDa62d7xE7Qgwlk0ibIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEWcQ7c0B72/GPq9NpRzljfYuQcMB8GA1UdIwQY
MBaAFBlCgXopiC1DO/G7jrxZsv8lboA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUt
ZmRkZTU4YWIyOWY5LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUtZmRkZTU4YWIyOWY5
LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM99asGL3
7BuHf6GFGobuUhg/6lVuj/syJjojLlRX4khDaCLyrHDaWSYr69difv28leonwZuf
Xt8F59zbm4Ov5rJRLvpG60mqwq4HuNRDyUGJyqYQQlv/jtdPQwKXol3eOa8d6ghB
xi4VyMhpcIfBrmHFMNi7qWAa7XaAJW9BF7C9mwn5d+BTpQbx0kRJB346gjBJ8GTT
7dbVAz+IBWMTLnIcpJQfohNzMZzhBwlcqaCdCYCv/N4d6X5A4ABO3SlDFkr+Rbv9
fyU8qmFORWJsEZASdU5vS9M6ns96ybte1x33nuBwI2uneyGtTbeK6Aq4vDzush5y
CE70IwqO6zseBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:54:00 2025 by rpki-client