Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: pKP2KmwDRLTtpOx4jfWyMNcE54+nRP2fJx3qLlkgFrQ=
Subject key identifier: FC:E8:61:C0:F5:AF:19:BB:4A:47:AD:94:5E:93:75:E2:2A:5C:A5:D8
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01964B90959C1CDD7BF05F706E1B2E1BC5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 158B
Signing time: Sat 19 Apr 2025 01:01:28 +0000
Manifest this update: Sat 19 Apr 2025 01:01:28 +0000
Manifest next update: Sun 20 Apr 2025 01:01:28 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: VOJ0lIuZHU44azsBN6GGKPV7eUcFhHemf3tjZsQECbA=)
3: znbCSfa62MjugadmDs4WgFylkOE.roa (hash: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:95:9c:1c:dd:7b:f0:5f:70:6e:1b:2e:1b:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Apr 19 01:01:28 2025 GMT
Not After : Apr 20 01:01:28 2025 GMT
Subject: CN=fce861c0f5af19bb4a47ad945e9375e22a5ca5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:bf:89:9c:bb:f2:f9:99:f1:19:3e:10:f1:
b4:d7:84:4c:1e:58:66:db:0d:8e:98:3c:fa:4b:82:
e0:7d:80:ca:c9:8d:90:60:df:68:b4:ef:16:f2:94:
e4:02:c8:a2:1f:a7:1a:80:23:59:e9:ae:5b:20:ba:
26:9e:2b:78:29:73:c3:a2:dd:5a:e8:4c:da:1e:6f:
01:2f:8a:72:f3:54:14:7e:cd:75:d8:a0:ca:a5:39:
90:df:51:9a:5c:f6:0f:60:f5:f0:ea:0d:a9:da:00:
02:28:f0:ef:af:80:c2:06:d4:49:7f:a3:9b:19:c1:
b5:20:06:75:ca:f9:95:2b:53:0a:7e:0b:c1:6c:e6:
ea:30:e5:2e:32:2d:0f:00:15:2e:60:b3:3d:a3:4e:
f6:0b:72:93:80:6e:2b:27:d7:88:49:ee:c0:14:8e:
54:6b:6c:3c:67:a6:6d:85:42:7f:63:e3:a2:b3:e2:
d7:62:44:b7:bc:37:53:2c:b8:68:bf:93:a1:6e:79:
20:f1:c5:7d:b5:48:36:5d:42:fa:dc:d0:be:37:d3:
bf:5d:47:e0:af:d2:6e:05:c9:f7:49:86:7c:bf:0e:
44:a7:92:7c:bb:bf:fe:7c:81:fa:99:ec:01:ce:70:
1e:a1:44:ec:6d:36:2f:53:af:78:d6:e1:b2:73:b0:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E8:61:C0:F5:AF:19:BB:4A:47:AD:94:5E:93:75:E2:2A:5C:A5:D8
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:59:8a:df:6f:1c:b0:fd:d0:87:c8:ad:20:66:56:56:cf:
82:39:7b:01:59:f3:d7:cc:7f:d9:6e:45:b8:f0:4e:99:97:69:
66:f6:46:09:e3:74:ae:0c:0d:1c:47:c1:48:7d:7c:28:23:55:
73:48:0c:a2:b3:2a:8a:6e:b0:b5:be:41:f6:99:c5:c3:fd:f3:
24:9a:81:4b:3f:0f:32:bf:18:88:e6:25:78:9a:31:eb:c6:5b:
ef:97:5e:90:8d:21:2c:f7:79:3b:3d:72:40:c3:54:76:48:3c:
70:cc:9b:33:37:d1:e5:cd:f0:b5:65:ce:e9:d4:80:96:ad:6b:
97:45:52:72:c6:f6:0e:cc:2d:40:9e:0b:1b:bc:5e:56:42:69:
83:fd:82:33:a1:ac:5f:b2:1c:62:2b:7a:3e:14:4e:cf:7c:c9:
28:c9:fe:92:bf:e9:03:3a:2b:ea:46:e7:85:51:73:bd:d6:2c:
f5:c1:2e:fd:c0:6f:07:ea:90:9e:d8:a8:8d:e2:32:25:75:c5:
e4:76:2c:44:ea:bf:10:29:b0:88:8c:71:d3:48:68:0b:80:b1:
01:1b:36:b0:f3:c6:fe:9d:5e:ba:9c:0a:54:9e:55:08:c2:6c:
54:70:12:c4:49:9c:22:93:74:98:5b:16:b8:65:c6:5a:07:4e:
d4:87:56:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkJWcHN178F9wbhsuG8XhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwNDE5MDEwMTI4WhcNMjUwNDIwMDEwMTI4WjAzMTEwLwYDVQQD
EyhmY2U4NjFjMGY1YWYxOWJiNGE0N2FkOTQ1ZTkzNzVlMjJhNWNhNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiq/iZy78vmZ8Rk+EPG014RMHlhm
2w2OmDz6S4LgfYDKyY2QYN9otO8W8pTkAsiiH6cagCNZ6a5bILomnit4KXPDot1a
6EzaHm8BL4py81QUfs112KDKpTmQ31GaXPYPYPXw6g2p2gACKPDvr4DCBtRJf6Ob
GcG1IAZ1yvmVK1MKfgvBbObqMOUuMi0PABUuYLM9o072C3KTgG4rJ9eISe7AFI5U
a2w8Z6ZthUJ/Y+Ois+LXYkS3vDdTLLhov5Ohbnkg8cV9tUg2XUL63NC+N9O/XUfg
r9JuBcn3SYZ8vw5Ep5J8u7/+fIH6mewBznAeoUTsbTYvU6941uGyc7C/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzoYcD1rxm7SketlF6TdeIqXKXYMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAdZit9v
HLD90IfIrSBmVlbPgjl7AVnz18x/2W5FuPBOmZdpZvZGCeN0rgwNHEfBSH18KCNV
c0gMorMqim6wtb5B9pnFw/3zJJqBSz8PMr8YiOYleJox68Zb75dekI0hLPd5Oz1y
QMNUdkg8cMybMzfR5c3wtWXO6dSAlq1rl0VScsb2DswtQJ4LG7xeVkJpg/2CM6Gs
X7IcYit6PhROz3zJKMn+kr/pAzor6kbnhVFzvdYs9cEu/cBvB+qQntiojeIyJXXF
5HYsROq/ECmwiIxx00hoC4CxARs2sPPG/p1eupwKVJ5VCMJsVHASxEmcIpN0mFsW
uGXGWgdO1IdW4w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:37:57 2025 by rpki-client