Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: AJpx20K+pqekxsfKYGAWW6sLIcCROJliL4DameehhZM=
Subject key identifier: 66:46:47:4A:3A:28:98:C9:B3:7F:64:DF:ED:1B:67:BF:17:2C:45:67
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0196496AB7DA0873DC722CA0849201AEFCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 15:00:52 +0000
Manifest this update: Fri 18 Apr 2025 15:00:52 +0000
Manifest next update: Sat 19 Apr 2025 15:00:52 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: IQx0iF9UwR85241iSuo2CvNGNl1QsEdWJSs+91Vqjqc=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:b7:da:08:73:dc:72:2c:a0:84:92:01:ae:fc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Apr 18 15:00:52 2025 GMT
Not After : Apr 19 15:00:52 2025 GMT
Subject: CN=6646474a3a2898c9b37f64dfed1b67bf172c4567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:74:b5:4e:e9:64:25:5b:68:85:80:7f:0c:
95:e3:b0:22:5e:0b:c6:80:69:4f:c5:d5:4d:40:cc:
f3:17:e7:79:41:04:51:96:2e:ad:a4:7b:e5:2b:dd:
17:57:cb:61:ba:bf:8f:14:9c:87:b9:c0:cc:ed:45:
46:97:9a:c5:3b:e3:9c:b4:e5:64:4c:38:0c:4b:9a:
66:28:ad:69:bb:ae:25:30:dd:e3:74:1c:1a:ad:42:
e2:93:69:11:68:83:50:3c:23:f4:08:5d:85:83:44:
a8:f8:57:26:5a:97:b4:df:64:6b:e8:a4:f7:89:b0:
0a:5b:9a:16:89:f8:89:c0:10:1d:7f:5f:58:be:5c:
1c:91:2e:9e:2a:cf:b2:4f:ac:88:00:23:9a:00:42:
6f:09:ff:0d:78:38:f5:c7:4a:cc:34:24:70:2b:33:
46:67:f6:a0:ea:8f:a1:9b:71:96:11:51:0a:7b:b9:
f1:13:32:50:9f:6d:48:95:1e:bf:61:c6:c7:c9:0e:
90:eb:c0:d2:56:ec:0e:76:d5:88:2d:60:91:10:91:
d2:a0:ee:6b:a3:d7:ed:3f:68:be:10:d8:1b:46:a4:
bf:84:51:f0:62:f8:5c:4c:2b:b6:58:3c:fb:80:64:
5e:1a:51:85:5b:09:38:51:5a:21:55:a6:01:66:57:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:47:4A:3A:28:98:C9:B3:7F:64:DF:ED:1B:67:BF:17:2C:45:67
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5c:1b:0a:ea:4d:a2:b3:b0:e0:ea:d2:52:6e:e6:01:d0:5e:
ff:b4:a5:21:90:e4:d9:84:9c:54:b7:6a:89:03:62:09:8a:41:
19:bd:04:ee:d7:cf:70:20:49:76:4c:c9:23:e8:54:28:80:34:
a2:3b:3d:43:c3:12:0f:01:d5:c6:82:3e:92:7b:2f:b9:bb:ec:
51:8c:d1:8f:1f:98:ed:b1:d6:c2:ff:4b:7f:6a:30:18:25:2b:
10:bb:9c:c0:e7:1f:2a:2b:3d:3a:19:1c:cc:ab:99:38:11:78:
0e:24:ce:ef:a9:4d:b5:16:77:63:a9:d5:90:36:f5:fc:74:1e:
d8:9f:b7:da:b6:e8:f8:bd:5e:36:9d:65:84:c6:95:6b:92:2e:
e4:27:7d:40:7a:4b:b2:30:fd:05:fe:e9:9d:72:a4:99:2b:06:
6d:9d:9e:45:a3:78:b8:83:3b:cd:8a:01:f7:9c:a1:22:97:9f:
c9:74:ff:11:4d:3f:ec:7b:bd:52:61:dc:3f:64:57:12:3b:34:
ce:30:83:3c:07:9e:a0:48:44:68:b1:57:1e:23:f2:cb:35:4d:
04:10:1b:ce:15:c2:41:db:d1:eb:99:14:1b:25:4d:0a:fa:69:
b5:19:dd:8a:76:a1:50:75:74:a6:78:bb:6b:f6:3c:c0:15:5f:
18:0e:58:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJarfaCHPcciyghJIBrvzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I4YTcwZjkwOWFlM2UxZmMxZGJkNmJkYzQyNWUwOGVl
YzgxYjkwHhcNMjUwNDE4MTUwMDUyWhcNMjUwNDE5MTUwMDUyWjAzMTEwLwYDVQQD
Eyg2NjQ2NDc0YTNhMjg5OGM5YjM3ZjY0ZGZlZDFiNjdiZjE3MmM0NTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQd0tU7pZCVbaIWAfwyV47AiXgvG
gGlPxdVNQMzzF+d5QQRRli6tpHvlK90XV8thur+PFJyHucDM7UVGl5rFO+OctOVk
TDgMS5pmKK1pu64lMN3jdBwarULik2kRaINQPCP0CF2Fg0So+FcmWpe032Rr6KT3
ibAKW5oWifiJwBAdf19YvlwckS6eKs+yT6yIACOaAEJvCf8NeDj1x0rMNCRwKzNG
Z/ag6o+hm3GWEVEKe7nxEzJQn21IlR6/YcbHyQ6Q68DSVuwOdtWILWCREJHSoO5r
o9ftP2i+ENgbRqS/hFHwYvhcTCu2WDz7gGReGlGFWwk4UVohVaYBZlc7JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZGR0o6KJjJs39k3+0bZ78XLEVnMB8GA1UdIwQY
MBaAFBrLinD5Ca4+H8Hb1r3EJeCO7IG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYt
NjBkZTIyNGNmYTRiLzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYtNjBkZTIyNGNmYTRi
LzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVwbCupN
orOw4OrSUm7mAdBe/7SlIZDk2YScVLdqiQNiCYpBGb0E7tfPcCBJdkzJI+hUKIA0
ojs9Q8MSDwHVxoI+knsvubvsUYzRjx+Y7bHWwv9Lf2owGCUrELucwOcfKis9Ohkc
zKuZOBF4DiTO76lNtRZ3Y6nVkDb1/HQe2J+32rbo+L1eNp1lhMaVa5Iu5Cd9QHpL
sjD9Bf7pnXKkmSsGbZ2eRaN4uIM7zYoB95yhIpefyXT/EU0/7Hu9UmHcP2RXEjs0
zjCDPAeeoEhEaLFXHiPyyzVNBBAbzhXCQdvR65kUGyVNCvpptRndinahUHV0pni7
a/Y8wBVfGA5YNg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:29 2025 by rpki-client