Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: 0phfyacQVJ2BP9DwUjLmqFtCY3WyIZyHlcFHa5Rj34E=
Subject key identifier: B9:54:78:C5:00:49:1E:97:7E:B8:AC:FD:89:92:75:21:CE:1E:6C:5E
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 01975DCB90BAF0127C2B1F79CEFEE8A304CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 07:01:51 +0000
Manifest this update: Wed 11 Jun 2025 07:01:51 +0000
Manifest next update: Thu 12 Jun 2025 07:01:51 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: NEBXhgjw7H5+UQUSHBueiitr+XKKLqjknOjLOs894f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:90:ba:f0:12:7c:2b:1f:79:ce:fe:e8:a3:04:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Jun 11 07:01:51 2025 GMT
Not After : Jun 12 07:01:51 2025 GMT
Subject: CN=b95478c500491e977eb8acfd89927521ce1e6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:cb:f5:68:41:d9:46:40:83:fc:6c:6a:3a:
e6:6f:69:3c:18:8b:8a:ac:2d:b2:8f:1f:9f:0e:a7:
ba:c2:23:7e:af:f7:0d:a7:5e:f2:0b:48:99:0d:b5:
d3:4b:0d:25:fb:8b:50:10:b7:af:2b:78:41:e3:91:
de:5f:2c:ae:87:30:6b:a5:d7:0e:e5:5c:ed:33:05:
54:87:16:70:97:bd:1d:9f:a5:5d:be:38:08:fa:ea:
0f:31:1a:c2:e8:53:ca:04:64:88:8c:c0:98:c9:39:
8b:78:39:7a:24:e8:3e:ef:88:ec:73:ab:00:0d:45:
c6:6a:77:bd:87:be:ba:07:93:b3:bc:c6:ec:a9:2b:
51:2d:ad:31:af:66:16:f6:b1:46:4e:39:2d:84:26:
bb:4d:d7:3d:55:33:b9:16:14:cf:49:af:86:cc:16:
95:46:d8:28:fa:80:68:04:39:0f:98:e3:ae:51:cf:
2d:e3:3e:b3:4e:08:e5:c0:f7:83:6c:fd:ed:a0:41:
f6:60:83:c2:4b:8f:03:d4:5e:d0:3b:71:73:b4:dc:
30:09:74:32:ee:76:87:fd:1f:81:85:e3:5b:20:b8:
59:a5:7b:06:6d:f1:59:e3:8a:72:31:90:5b:c3:ba:
38:3b:32:4f:9d:1a:58:c7:e9:a2:7d:e5:f8:f0:19:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:78:C5:00:49:1E:97:7E:B8:AC:FD:89:92:75:21:CE:1E:6C:5E
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:d7:4b:37:cd:a8:11:b5:d5:56:8e:dc:73:a5:dd:da:29:
6c:1f:1a:6e:96:19:3d:93:8c:86:44:c6:b4:9f:0e:95:f4:a8:
38:5f:9a:42:09:9b:57:05:70:25:8c:85:58:27:1c:34:95:a2:
3f:23:29:4f:01:f5:96:21:ba:04:fb:60:08:d1:53:db:12:91:
a1:1d:88:1a:cb:2b:29:8b:fd:98:a9:c3:10:e8:6f:48:06:20:
ad:77:8f:14:dd:8f:8d:fb:55:07:16:7b:db:a2:7a:ca:f5:a0:
f8:c4:17:59:ab:ef:9b:bd:f1:d7:79:18:ea:d8:95:55:b4:46:
fd:9a:ef:04:cb:3a:ae:b7:b9:a1:7e:84:63:a1:d5:d9:4e:59:
84:0f:b9:bb:1d:82:ef:f0:59:13:ba:58:14:cc:66:f0:2f:43:
04:10:16:2b:42:44:c1:53:f0:e2:90:5f:0a:bd:67:60:ac:12:
bc:2c:88:f5:ea:17:50:9b:08:c3:62:4b:fc:cb:87:d6:11:a1:
a0:0e:b5:43:6a:09:f2:b2:14:50:ab:e6:0b:d1:9d:82:a4:7f:
57:81:9a:4c:2e:57:e5:86:0f:5a:4a:d7:ac:b2:a1:d2:e7:2f:
24:b3:65:41:b1:b3:66:87:2e:fe:76:c1:6d:94:3f:17:9b:31:
c5:69:e4:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddy5C68BJ8Kx95zv7oowTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0
NjA0MjkwHhcNMjUwNjExMDcwMTUxWhcNMjUwNjEyMDcwMTUxWjAzMTEwLwYDVQQD
EyhiOTU0NzhjNTAwNDkxZTk3N2ViOGFjZmQ4OTkyNzUyMWNlMWU2YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztLL9WhB2UZAg/xsajrmb2k8GIuK
rC2yjx+fDqe6wiN+r/cNp17yC0iZDbXTSw0l+4tQELevK3hB45HeXyyuhzBrpdcO
5VztMwVUhxZwl70dn6VdvjgI+uoPMRrC6FPKBGSIjMCYyTmLeDl6JOg+74jsc6sA
DUXGane9h766B5OzvMbsqStRLa0xr2YW9rFGTjkthCa7Tdc9VTO5FhTPSa+GzBaV
Rtgo+oBoBDkPmOOuUc8t4z6zTgjlwPeDbP3toEH2YIPCS48D1F7QO3FztNwwCXQy
7naH/R+BheNbILhZpXsGbfFZ44pyMZBbw7o4OzJPnRpYx+mifeX48Bm9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlUeMUASR6Xfris/YmSdSHOHmxeMB8GA1UdIwQY
MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt
NzdlZmJjMzYyNTAzLzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz
LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfPXSzfN
qBG11VaO3HOl3dopbB8abpYZPZOMhkTGtJ8OlfSoOF+aQgmbVwVwJYyFWCccNJWi
PyMpTwH1liG6BPtgCNFT2xKRoR2IGssrKYv9mKnDEOhvSAYgrXePFN2PjftVBxZ7
26J6yvWg+MQXWavvm73x13kY6tiVVbRG/ZrvBMs6rre5oX6EY6HV2U5ZhA+5ux2C
7/BZE7pYFMxm8C9DBBAWK0JEwVPw4pBfCr1nYKwSvCyI9eoXUJsIw2JL/MuH1hGh
oA61Q2oJ8rIUUKvmC9GdgqR/V4GaTC5X5YYPWkrXrLKh0ucvJLNlQbGzZocu/nbB
bZQ/F5sxxWnknQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:35:49 2025 by rpki-client