Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: WfulExfVuTDu7MptMpSIfXWveY1hKeKy42zuXUXvSdA=
Subject key identifier: 26:A0:AE:5E:B5:F4:DD:33:88:69:F9:51:25:F2:23:73:25:0F:63:69
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 01964F6D8B4BA58052535346142852D5C09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0679
Signing time: Sat 19 Apr 2025 19:01:41 +0000
Manifest this update: Sat 19 Apr 2025 19:01:41 +0000
Manifest next update: Sun 20 Apr 2025 19:01:41 +0000
Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=)
2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=)
3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: 3FwMJ+dI7/4sdUlVo4QyaZIVcwYCw2rvuvsAoXSZ/MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:8b:4b:a5:80:52:53:53:46:14:28:52:d5:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Apr 19 19:01:41 2025 GMT
Not After : Apr 20 19:01:41 2025 GMT
Subject: CN=26a0ae5eb5f4dd338869f95125f22373250f6369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:ca:5b:7d:31:eb:98:7b:cf:a7:09:ea:93:
8f:d1:76:e9:4a:3b:77:bc:cb:a1:d5:b3:53:e6:9e:
32:73:89:fb:07:97:29:0c:a1:75:bb:04:a2:40:d3:
40:ed:56:67:3b:53:84:1b:f7:47:d2:17:a1:de:45:
70:9a:fd:70:7e:0e:36:6f:ce:81:22:c2:66:90:ed:
b6:bc:50:45:fa:18:42:2f:f6:40:c4:bc:51:84:6d:
b9:69:e1:26:3d:5c:6f:9f:84:da:c8:4f:14:d6:21:
87:01:33:81:ee:bd:d5:a9:68:7f:6a:9a:c0:f0:5e:
a4:dd:ac:47:c6:73:01:40:4e:b4:2f:84:e8:e0:09:
5c:8e:71:39:8c:91:53:69:a3:17:5e:c8:f3:d0:65:
93:58:3a:26:56:96:31:c8:74:4e:01:6d:04:5b:51:
cd:34:a9:d1:b2:a6:48:2b:7c:cd:65:e3:d9:0a:13:
40:77:ae:0f:9b:db:5f:a2:f7:7e:cc:c6:be:43:3c:
3f:75:a7:d0:c2:0e:14:92:42:d2:dc:cb:de:92:d4:
85:31:98:82:c9:10:9e:b9:66:ea:ba:64:da:4d:b6:
d8:c5:e1:ad:0f:11:59:db:92:9f:6f:40:8a:36:95:
89:1b:e3:94:93:4f:2c:67:a6:04:d5:80:54:ba:ff:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:AE:5E:B5:F4:DD:33:88:69:F9:51:25:F2:23:73:25:0F:63:69
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:96:04:db:16:de:6c:b5:38:eb:7e:cb:74:e8:62:4b:77:0a:
ee:db:e4:15:b2:7d:d2:f0:fa:05:45:63:7d:71:d4:a3:0d:15:
0a:e7:3d:e4:ce:d8:a0:83:18:1a:9e:f3:e0:bc:33:c0:41:87:
59:5c:71:a2:18:fb:66:83:65:d6:b1:38:89:08:95:38:86:d2:
c1:5c:a3:c6:3b:f3:85:08:af:56:1e:15:00:10:81:dd:27:85:
39:4c:9f:1d:90:0e:bf:22:ab:88:e7:18:b6:c6:40:51:7b:9d:
29:f4:17:21:df:33:19:13:df:a0:e4:5a:74:b5:17:33:d2:bf:
cc:e4:15:9c:8d:54:a2:22:1c:b7:85:42:b3:ef:f1:d0:09:d2:
87:84:95:37:77:56:6e:85:96:e6:b7:91:20:67:70:7a:7f:81:
27:8c:92:40:26:f4:28:a4:1b:b0:36:64:d6:1d:1b:84:ba:05:
d8:97:11:bd:22:a6:63:8a:39:4e:cf:b0:78:6a:da:c6:11:35:
6b:d8:c2:cf:46:c2:58:16:80:a7:d0:d6:5f:44:3c:34:aa:39:
1a:ec:53:8e:dc:2e:e1:ed:d0:a4:95:30:19:2e:08:d6:e1:04:
19:b0:8c:aa:24:9b:13:0d:70:fd:a0:b8:62:ce:f9:60:a7:6f:
2a:79:85:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbYtLpYBSU1NGFChS1cCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy
NDc3OGIwHhcNMjUwNDE5MTkwMTQxWhcNMjUwNDIwMTkwMTQxWjAzMTEwLwYDVQQD
EygyNmEwYWU1ZWI1ZjRkZDMzODg2OWY5NTEyNWYyMjM3MzI1MGY2MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr7KW30x65h7z6cJ6pOP0XbpSjt3
vMuh1bNT5p4yc4n7B5cpDKF1uwSiQNNA7VZnO1OEG/dH0heh3kVwmv1wfg42b86B
IsJmkO22vFBF+hhCL/ZAxLxRhG25aeEmPVxvn4TayE8U1iGHATOB7r3VqWh/aprA
8F6k3axHxnMBQE60L4To4AlcjnE5jJFTaaMXXsjz0GWTWDomVpYxyHROAW0EW1HN
NKnRsqZIK3zNZePZChNAd64Pm9tfovd+zMa+Qzw/dafQwg4UkkLS3MvektSFMZiC
yRCeuWbqumTaTbbYxeGtDxFZ25Kfb0CKNpWJG+OUk08sZ6YE1YBUuv8BaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCagrl619N0ziGn5USXyI3MlD2NpMB8GA1UdIwQY
MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt
Mjk4YjU1OTY5NzZhLzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh
LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJYE2xbe
bLU4637LdOhiS3cK7tvkFbJ90vD6BUVjfXHUow0VCuc95M7YoIMYGp7z4LwzwEGH
WVxxohj7ZoNl1rE4iQiVOIbSwVyjxjvzhQivVh4VABCB3SeFOUyfHZAOvyKriOcY
tsZAUXudKfQXId8zGRPfoORadLUXM9K/zOQVnI1UoiIct4VCs+/x0AnSh4SVN3dW
boWW5reRIGdwen+BJ4ySQCb0KKQbsDZk1h0bhLoF2JcRvSKmY4o5Ts+weGraxhE1
a9jCz0bCWBaAp9DWX0Q8NKo5GuxTjtwu4e3QpJUwGS4I1uEEGbCMqiSbEw1w/aC4
Ys75YKdvKnmFHA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:21 2025 by rpki-client