Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: UNl21743eJIi69wVM8TZaaO3ELa59fDSgp7QnkOiIPE=
Subject key identifier: BF:6B:3A:0C:A8:5C:BA:F9:E4:E0:7D:C6:9F:EB:E3:4A:2E:82:0C:3B
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019643D7102336E64CD10EDEFA3CA2AAAF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 12B3
Signing time: Thu 17 Apr 2025 13:01:29 +0000
Manifest this update: Thu 17 Apr 2025 13:01:29 +0000
Manifest next update: Fri 18 Apr 2025 13:01:29 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: kzwPlpeE837eb36wr9xc9jZ5Y6Ani0/rM1JZIb3bM3w=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:10:23:36:e6:4c:d1:0e:de:fa:3c:a2:aa:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Apr 17 13:01:29 2025 GMT
Not After : Apr 18 13:01:29 2025 GMT
Subject: CN=bf6b3a0ca85cbaf9e4e07dc69febe34a2e820c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:7a:6d:9a:5d:ce:b3:a5:99:94:33:55:fb:
4e:d7:ea:01:b0:fe:f6:f6:c8:15:54:6d:67:f0:17:
16:a5:c0:1b:94:e5:73:b3:28:df:cd:d3:52:2e:db:
4a:93:6e:df:20:9d:72:e4:1c:e1:a5:88:a2:a8:49:
b5:af:58:1e:64:77:73:33:82:10:ab:8f:8d:86:b8:
ea:89:a3:22:9d:a2:62:4a:36:63:e9:78:bf:96:9b:
16:2c:c6:8e:b1:31:7e:f3:7b:c9:9b:cb:dd:f7:79:
35:9c:7d:43:92:ab:93:64:50:a0:1f:2e:89:c1:05:
33:b9:5c:29:6c:6d:34:60:59:68:ef:da:c2:cb:f2:
62:b9:65:c2:a2:c5:37:6b:79:00:87:32:02:f6:eb:
98:7c:e6:30:73:1b:a7:72:10:58:53:31:a4:65:34:
87:de:62:f5:ab:45:23:70:33:99:21:86:cf:b8:78:
4c:37:3c:5b:21:ea:4c:e5:d0:21:df:fc:63:83:9b:
ed:3a:1d:43:97:37:1e:85:38:f3:db:9f:ad:dd:ee:
db:66:3e:27:d3:2b:c8:21:37:db:30:24:3c:f3:72:
ae:a8:31:60:e4:d5:df:cf:2b:90:f6:4f:c4:dd:ad:
83:52:02:ef:39:1f:9b:2c:ca:c5:74:90:2c:4b:e8:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:3A:0C:A8:5C:BA:F9:E4:E0:7D:C6:9F:EB:E3:4A:2E:82:0C:3B
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:39:f1:12:81:d1:3f:bb:a5:64:6f:a5:8f:3a:96:6f:17:5c:
c8:e7:33:93:01:87:b8:9e:4c:c2:21:2f:72:f6:5a:e2:16:66:
f4:6a:5c:1d:6d:d0:15:bd:91:e5:3a:13:d8:35:02:25:5e:74:
5a:ba:da:20:46:1b:f6:9c:90:76:ec:ca:3d:60:ad:92:c6:19:
97:27:be:bf:c6:df:67:7c:e3:9e:b4:83:a6:30:79:d0:2e:5f:
e8:83:54:06:bf:3e:ed:24:62:84:bb:c0:c7:d9:10:37:29:a7:
e0:94:59:57:d7:99:64:e8:59:51:b8:2b:14:e8:b5:13:1e:7f:
16:4a:cb:f5:34:3a:70:e1:35:d0:da:30:b4:cd:a2:17:95:d8:
ca:4b:f0:bd:f5:44:10:d7:0f:55:c8:fe:0e:26:45:b5:47:3e:
69:b1:88:89:52:33:5a:2f:2c:cc:ea:99:ed:31:2e:68:2f:83:
e0:ee:8b:ba:75:ef:61:3d:85:3f:68:92:12:95:d3:c5:59:c1:
0f:d0:3f:32:24:20:e8:64:36:1f:5f:f5:41:61:93:99:20:64:
89:ea:f2:9b:61:e8:73:dc:e1:e8:56:50:3a:72:21:36:b9:02:
00:98:5a:01:7a:77:6a:2c:de:cd:4e:b8:76:d4:a9:94:33:28:
dd:86:47:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1xAjNuZM0Q7e+jyiqq8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTE5YzkyZTk2Njc3ZjVmOTZmNjhmMWNhMGFhZDlmYTMx
MWViNDUwHhcNMjUwNDE3MTMwMTI5WhcNMjUwNDE4MTMwMTI5WjAzMTEwLwYDVQQD
EyhiZjZiM2EwY2E4NWNiYWY5ZTRlMDdkYzY5ZmViZTM0YTJlODIwYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB96bZpdzrOlmZQzVftO1+oBsP72
9sgVVG1n8BcWpcAblOVzsyjfzdNSLttKk27fIJ1y5BzhpYiiqEm1r1geZHdzM4IQ
q4+NhrjqiaMinaJiSjZj6Xi/lpsWLMaOsTF+83vJm8vd93k1nH1DkquTZFCgHy6J
wQUzuVwpbG00YFlo79rCy/JiuWXCosU3a3kAhzIC9uuYfOYwcxunchBYUzGkZTSH
3mL1q0UjcDOZIYbPuHhMNzxbIepM5dAh3/xjg5vtOh1DlzcehTjz25+t3e7bZj4n
0yvIITfbMCQ883KuqDFg5NXfzyuQ9k/E3a2DUgLvOR+bLMrFdJAsS+g5hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9rOgyoXLr55OB9xp/r40ouggw7MB8GA1UdIwQY
MBaAFBqhnJLpZnf1+W9o8coKrZ+jEetFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMt
NGFkMGFiZWMyNzVlLzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMtNGFkMGFiZWMyNzVl
LzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjnxEoHR
P7ulZG+ljzqWbxdcyOczkwGHuJ5MwiEvcvZa4hZm9GpcHW3QFb2R5ToT2DUCJV50
WrraIEYb9pyQduzKPWCtksYZlye+v8bfZ3zjnrSDpjB50C5f6INUBr8+7SRihLvA
x9kQNymn4JRZV9eZZOhZUbgrFOi1Ex5/FkrL9TQ6cOE10NowtM2iF5XYykvwvfVE
ENcPVcj+DiZFtUc+abGIiVIzWi8szOqZ7TEuaC+D4O6LunXvYT2FP2iSEpXTxVnB
D9A/MiQg6GQ2H1/1QWGTmSBkierym2Hoc9zh6FZQOnIhNrkCAJhaAXp3aizezU64
dtSplDMo3YZHaA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:42 2025 by rpki-client