Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: Kxx3pMVZM2yZWD1ZWDHgFeHo/7gU6JnDKY5CwppkaQk=
Subject key identifier: 3A:27:74:54:A0:AD:5E:61:26:E2:49:01:D5:17:93:3C:79:39:EA:7E
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 01965794094992FB7CF309875E340FA9DA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0C5D
Signing time: Mon 21 Apr 2025 09:00:41 +0000
Manifest this update: Mon 21 Apr 2025 09:00:41 +0000
Manifest next update: Tue 22 Apr 2025 09:00:41 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: 3o77wnJj/C51OdXFTvMmPyNVxO5J2SGDnCaoWdcExqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:09:49:92:fb:7c:f3:09:87:5e:34:0f:a9:da:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Apr 21 09:00:41 2025 GMT
Not After : Apr 22 09:00:41 2025 GMT
Subject: CN=3a277454a0ad5e6126e24901d517933c7939ea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:7f:09:97:0d:ea:7e:d0:06:0a:5d:b2:99:
0a:4e:c0:56:fb:a4:20:b2:16:37:f0:db:51:d5:92:
b2:c2:13:9a:ff:df:45:0a:4f:24:48:99:5e:53:ba:
34:2a:3d:fd:7a:e4:c6:74:66:01:e7:bf:db:e1:eb:
6a:31:06:30:81:89:b5:55:2b:fa:06:3d:a3:dc:c9:
b4:11:95:07:49:21:13:33:33:e3:89:2c:57:2c:d2:
56:da:99:5b:7f:79:b3:7f:78:d3:8b:c7:00:b9:72:
3a:57:40:4d:0d:6f:34:06:58:10:40:8f:49:49:ec:
0c:7d:c5:e4:72:94:b3:ae:0a:5d:1e:5c:47:17:a6:
ca:7e:da:8b:c5:5e:23:17:8d:52:71:be:1e:33:e0:
79:7a:ba:da:7c:99:3d:56:a3:4f:ee:9a:96:8d:0c:
63:8b:93:f3:e7:3b:7f:58:02:46:d7:5e:fb:49:a6:
99:90:d9:ab:44:1c:a7:56:72:2d:ef:f2:a4:cf:f0:
59:60:9d:e0:4d:70:63:c9:31:a9:b3:b4:89:eb:f1:
3a:58:d2:22:de:b6:7f:76:4f:79:07:01:95:8b:80:
c7:b6:bf:9f:cb:07:2b:2f:90:08:37:c8:cb:b2:1d:
6f:6f:4b:97:a3:59:2a:1f:aa:3b:bf:11:ec:1a:b5:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:74:54:A0:AD:5E:61:26:E2:49:01:D5:17:93:3C:79:39:EA:7E
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b5:72:d7:87:28:0c:77:da:fd:ce:46:3f:40:08:6d:fe:9a:
f7:02:28:8c:37:26:b8:ea:02:a3:5b:24:a5:fa:fc:c9:c4:43:
1e:fb:70:6b:ce:2a:3b:ee:86:23:26:33:84:f4:0f:ca:ff:26:
db:fa:f9:99:43:1d:c3:ec:bf:7a:b7:93:63:9e:0d:ca:93:cd:
ea:6a:b1:e5:33:15:f7:eb:22:5f:bc:af:f8:a3:b0:42:f1:4e:
ca:42:4d:fc:11:45:70:0b:b2:7c:41:74:3b:e7:38:85:b9:20:
6b:2b:ee:5b:c6:04:d7:76:c8:b8:a5:6e:25:24:5a:14:3e:e6:
a0:96:15:88:d5:6d:2c:2f:3a:9d:16:be:b7:56:0c:fd:ac:66:
96:05:9c:b1:37:37:38:d5:3a:4a:7e:1b:fe:c8:89:c3:eb:e0:
78:59:17:c3:bb:85:1a:68:9d:ed:c2:07:8c:65:fc:18:93:2b:
e7:a5:4e:de:64:da:9d:91:69:d8:54:58:0e:cb:ac:99:7d:6d:
d2:fa:e0:82:6d:d1:7f:96:d7:9e:34:65:96:c3:16:b4:dc:62:
7c:10:d9:1d:97:98:e0:d5:44:31:74:df:fc:7d:dc:fe:49:28:
71:13:6c:fd:00:c8:83:0e:bf:32:59:83:e0:bd:d1:9f:dd:2d:
a4:35:62:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlAlJkvt88wmHXjQPqdqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGMyZTY2OWY2NTU3ZGY0ZTNkNDlhNGYyNjViNTQxMTc5
MmZmYTAwHhcNMjUwNDIxMDkwMDQxWhcNMjUwNDIyMDkwMDQxWjAzMTEwLwYDVQQD
EygzYTI3NzQ1NGEwYWQ1ZTYxMjZlMjQ5MDFkNTE3OTMzYzc5MzllYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokZ/CZcN6n7QBgpdspkKTsBW+6Qg
shY38NtR1ZKywhOa/99FCk8kSJleU7o0Kj39euTGdGYB57/b4etqMQYwgYm1VSv6
Bj2j3Mm0EZUHSSETMzPjiSxXLNJW2plbf3mzf3jTi8cAuXI6V0BNDW80BlgQQI9J
SewMfcXkcpSzrgpdHlxHF6bKftqLxV4jF41Scb4eM+B5errafJk9VqNP7pqWjQxj
i5Pz5zt/WAJG1177SaaZkNmrRBynVnIt7/Kkz/BZYJ3gTXBjyTGps7SJ6/E6WNIi
3rZ/dk95BwGVi4DHtr+fywcrL5AIN8jLsh1vb0uXo1kqH6o7vxHsGrUzkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDondFSgrV5hJuJJAdUXkzx5Oep+MB8GA1UdIwQY
MBaAFBlMLmafZVffTj1JpPJltUEXkv+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEt
YTlmZjdhNTM3NTNhLzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEtYTlmZjdhNTM3NTNh
LzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrVy14co
DHfa/c5GP0AIbf6a9wIojDcmuOoCo1skpfr8ycRDHvtwa84qO+6GIyYzhPQPyv8m
2/r5mUMdw+y/ereTY54NypPN6mqx5TMV9+siX7yv+KOwQvFOykJN/BFFcAuyfEF0
O+c4hbkgayvuW8YE13bIuKVuJSRaFD7moJYViNVtLC86nRa+t1YM/axmlgWcsTc3
ONU6Sn4b/siJw+vgeFkXw7uFGmid7cIHjGX8GJMr56VO3mTanZFp2FRYDsusmX1t
0vrggm3Rf5bXnjRllsMWtNxifBDZHZeY4NVEMXTf/H3c/kkocRNs/QDIgw6/MlmD
4L3Rn90tpDVimQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:42:00 2025 by rpki-client