Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: b/FRviLvJ4q8oxjqbpsLEGC+bXxijtuUspT43AGmz1o=
Subject key identifier: 1B:B2:71:AD:EC:04:31:96:7E:3C:95:E0:1F:F4:39:C5:4A:EB:7B:43
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 0197481E3016466DE02C132AC12339899214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 02:00:27 +0000
Manifest this update: Sat 07 Jun 2025 02:00:27 +0000
Manifest next update: Sun 08 Jun 2025 02:00:27 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: qDf59YZf+uFzWBJ1a67o26Wf5lUWt7q/efD3PXBF5qY=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:30:16:46:6d:e0:2c:13:2a:c1:23:39:89:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jun 7 02:00:27 2025 GMT
Not After : Jun 8 02:00:27 2025 GMT
Subject: CN=1bb271adec0431967e3c95e01ff439c54aeb7b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:42:45:b0:51:8e:2b:5f:a3:d1:56:10:4e:
2a:37:6f:11:2f:f0:f3:0c:25:b6:1c:d4:a0:64:3c:
52:51:49:42:19:3d:98:37:bc:af:81:41:c9:0b:ff:
7d:45:f1:10:7c:f5:a7:68:4b:17:b5:f8:93:3a:a7:
4c:13:79:e9:dd:c4:0c:03:d8:d5:3c:cf:1d:ae:52:
8a:ff:c4:fd:93:ed:05:74:73:4c:e3:cf:b7:67:8a:
36:1e:cf:87:18:df:d6:87:94:ee:c4:ca:a5:d9:9a:
5c:c8:07:13:04:34:47:f8:26:ac:c5:f7:09:f8:d6:
90:12:dd:cb:0d:a7:80:31:2e:85:a9:7e:46:8b:d6:
d6:3f:6c:92:a0:6c:02:73:96:52:89:40:79:88:0f:
da:89:d7:dc:9a:8a:86:12:ce:f6:18:0b:bb:c1:8a:
36:b7:bb:6f:42:93:56:c7:34:32:83:a6:a4:4f:eb:
64:a7:bc:42:d1:dd:4c:0b:70:78:2d:6b:14:1f:7a:
5c:91:2d:bd:26:0a:6d:22:de:03:98:a5:ea:06:eb:
7d:23:37:9a:b9:83:bd:79:2d:d5:ef:0a:82:01:d3:
65:43:df:1e:3d:55:8d:18:bd:9a:86:13:39:72:09:
bb:3b:81:57:d7:19:ad:77:0d:60:ec:c0:1c:fb:1c:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:71:AD:EC:04:31:96:7E:3C:95:E0:1F:F4:39:C5:4A:EB:7B:43
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:e5:5d:67:73:bf:6c:6e:7b:4d:8e:15:3e:52:36:8b:39:
bf:d9:13:e2:0c:26:f4:e9:d1:62:eb:44:36:f9:5f:55:3c:c2:
51:64:3e:6f:0e:78:22:88:dd:a7:56:ca:fa:a9:e7:46:32:c6:
c6:a0:e3:80:b3:94:ac:65:25:82:d0:47:c0:7f:8e:e3:57:ee:
0a:ac:a0:bd:87:fc:3a:37:5d:0f:4c:56:24:48:40:5d:15:bd:
c1:0c:6e:42:35:3c:b5:23:a8:9f:c7:dd:b1:ec:12:cf:55:98:
29:68:c5:c8:1e:ba:14:a5:92:4e:59:4a:af:b1:08:35:58:9d:
3b:00:b4:df:18:85:8a:2a:09:3d:fb:20:25:f4:fb:22:ab:d9:
fc:9b:fa:38:ee:7c:f4:be:6c:7f:13:5e:95:e0:65:16:5d:de:
6e:74:dc:be:0e:09:bc:2b:53:38:4f:a1:6a:98:ba:bd:2a:d6:
d2:c0:74:7a:d6:23:d4:17:84:cd:1a:b7:24:0e:88:c4:09:c2:
da:4a:ab:fe:25:50:d6:97:3c:f3:ae:80:12:77:36:a8:6a:ac:
f0:2f:0c:b0:4d:38:49:a1:1e:44:3d:84:24:22:a3:c1:09:d8:
0c:08:46:16:90:9f:4f:38:43:9f:3d:1d:27:42:02:76:2e:f3:
8f:03:72:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHjAWRm3gLBMqwSM5iZIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4
MDU4ODYwHhcNMjUwNjA3MDIwMDI3WhcNMjUwNjA4MDIwMDI3WjAzMTEwLwYDVQQD
EygxYmIyNzFhZGVjMDQzMTk2N2UzYzk1ZTAxZmY0MzljNTRhZWI3YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GVCRbBRjitfo9FWEE4qN28RL/Dz
DCW2HNSgZDxSUUlCGT2YN7yvgUHJC/99RfEQfPWnaEsXtfiTOqdME3np3cQMA9jV
PM8drlKK/8T9k+0FdHNM48+3Z4o2Hs+HGN/Wh5TuxMql2ZpcyAcTBDRH+CasxfcJ
+NaQEt3LDaeAMS6FqX5Gi9bWP2ySoGwCc5ZSiUB5iA/aidfcmoqGEs72GAu7wYo2
t7tvQpNWxzQyg6akT+tkp7xC0d1MC3B4LWsUH3pckS29JgptIt4DmKXqBut9Izea
uYO9eS3V7wqCAdNlQ98ePVWNGL2ahhM5cgm7O4FX1xmtdw1g7MAc+xwPGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuyca3sBDGWfjyV4B/0OcVK63tDMB8GA1UdIwQY
MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt
ZWQ5MjMxZmJhZWQxLzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx
LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfblXWdz
v2xue02OFT5SNos5v9kT4gwm9OnRYutENvlfVTzCUWQ+bw54Iojdp1bK+qnnRjLG
xqDjgLOUrGUlgtBHwH+O41fuCqygvYf8OjddD0xWJEhAXRW9wQxuQjU8tSOon8fd
sewSz1WYKWjFyB66FKWSTllKr7EINVidOwC03xiFiioJPfsgJfT7IqvZ/Jv6OO58
9L5sfxNeleBlFl3ebnTcvg4JvCtTOE+hapi6vSrW0sB0etYj1BeEzRq3JA6IxAnC
2kqr/iVQ1pc8866AEnc2qGqs8C8MsE04SaEeRD2EJCKjwQnYDAhGFpCfTzhDnz0d
J0ICdi7zjwNyAA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:34 2025 by rpki-client