Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: 3qomVJOVLDZJBrVRLtUj9RHsu0azXapQjVBkccOdh6Q=
Subject key identifier: 26:FD:D6:71:4E:05:41:BF:33:27:71:F1:70:CA:0B:5F:79:B6:E4:73
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 0197488D2F7BF06593F5AC884764543EBFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 04:01:41 +0000
Manifest this update: Sat 07 Jun 2025 04:01:41 +0000
Manifest next update: Sun 08 Jun 2025 04:01:41 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: p5cSOF/eyUFKNB8u9QDITfbO9wyKuogRlaerGw6bEUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2f:7b:f0:65:93:f5:ac:88:47:64:54:3e:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Jun 7 04:01:41 2025 GMT
Not After : Jun 8 04:01:41 2025 GMT
Subject: CN=26fdd6714e0541bf332771f170ca0b5f79b6e473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:58:4f:f4:e4:c5:c5:6a:4a:56:87:02:62:
97:b0:8d:25:50:c2:37:a4:52:7e:d5:b2:a0:7a:03:
2d:8e:c5:fa:a9:fb:06:d8:29:8b:1f:45:fc:44:c4:
e1:b5:a7:e0:81:6f:20:c3:c1:42:66:c6:76:17:b8:
a7:90:67:5d:6e:32:ef:0f:ac:f2:24:28:91:86:f6:
b5:0a:e2:67:02:d6:a2:6f:0c:9a:d4:6c:b1:c7:4d:
6c:bb:81:b3:52:af:bf:52:7d:71:19:20:d2:d9:8b:
60:88:e2:32:6f:12:99:9c:1a:e8:4f:b2:83:0d:b0:
69:fd:79:22:65:b3:a1:b7:2e:95:b0:f0:09:02:db:
52:b9:df:fb:a6:36:3b:40:04:57:d6:e6:fa:a2:18:
99:42:3b:72:82:8f:f0:b9:9a:e0:1a:a9:55:98:69:
75:7d:ea:2c:83:cd:53:b6:7a:b5:a7:0f:21:7a:4a:
63:34:7a:60:27:d2:a5:d3:c2:6d:ca:5c:bb:f1:88:
0c:46:d6:7a:ab:fd:0a:64:7c:68:47:0c:19:e6:14:
89:8b:45:e3:27:46:cb:76:5e:74:ae:f9:70:fd:88:
e4:3f:52:8f:fd:5d:58:d5:d3:ed:85:3a:4c:52:1b:
cd:19:e6:4b:63:4d:d4:27:05:5b:9c:b7:51:45:be:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:D6:71:4E:05:41:BF:33:27:71:F1:70:CA:0B:5F:79:B6:E4:73
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:04:7a:e0:03:2d:69:e9:a1:68:e5:21:2b:25:87:67:af:50:
4a:f1:d5:25:a9:61:b7:dc:81:40:e7:8c:9f:96:95:9d:fe:c5:
96:06:6c:2d:1c:10:27:71:48:fe:ec:58:0e:34:d0:94:08:cd:
bc:dd:66:61:ae:26:0c:c4:47:80:e6:4f:f5:d7:a9:0e:60:c0:
fd:84:ed:a4:2a:98:67:55:d3:ab:5c:5d:46:ec:db:24:70:4b:
2d:fe:7f:da:21:2e:e6:d6:1e:7b:32:0b:4c:37:bb:5c:a1:7d:
36:7c:4f:01:7f:7b:70:54:3e:d9:82:3e:68:63:6a:ac:c8:b1:
29:e0:a4:ff:e5:5c:56:9b:91:f6:ae:f8:52:a4:b8:95:e9:aa:
c0:e9:59:4f:ca:8a:09:05:45:70:03:fd:e1:e4:98:e5:ca:1c:
f4:d6:aa:0d:89:59:f6:23:d4:bd:ff:83:80:53:3a:74:13:7a:
0b:e2:6f:83:2e:46:cc:90:40:a4:35:b3:3d:b2:ba:74:45:cd:
15:87:08:30:c1:32:71:1c:3b:42:f1:c7:53:f7:fe:69:75:a5:
6a:fa:d5:c7:56:23:4a:2a:f0:5f:e3:40:89:51:9c:cd:a4:59:
97:99:13:03:d1:a6:21:b5:fb:9e:26:e4:fe:8e:40:29:14:b6:
84:be:2c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjS978GWT9ayIR2RUPr+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzYwYmI4YTBlOTczYTk4YTMxN2RmYmFhMzdhYzNjMTRj
NTg3MDUwHhcNMjUwNjA3MDQwMTQxWhcNMjUwNjA4MDQwMTQxWjAzMTEwLwYDVQQD
EygyNmZkZDY3MTRlMDU0MWJmMzMyNzcxZjE3MGNhMGI1Zjc5YjZlNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPxYT/TkxcVqSlaHAmKXsI0lUMI3
pFJ+1bKgegMtjsX6qfsG2CmLH0X8RMThtafggW8gw8FCZsZ2F7inkGddbjLvD6zy
JCiRhva1CuJnAtaibwya1Gyxx01su4GzUq+/Un1xGSDS2YtgiOIybxKZnBroT7KD
DbBp/XkiZbOhty6VsPAJAttSud/7pjY7QARX1ub6ohiZQjtygo/wuZrgGqlVmGl1
feosg81Ttnq1pw8hekpjNHpgJ9Kl08Jtyly78YgMRtZ6q/0KZHxoRwwZ5hSJi0Xj
J0bLdl50rvlw/YjkP1KP/V1Y1dPthTpMUhvNGeZLY03UJwVbnLdRRb4w6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCb91nFOBUG/Mydx8XDKC195tuRzMB8GA1UdIwQY
MBaAFBo2C7ig6XOpijF9+6o3rDwUxYcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAt
MzA3ZTViODFiYmNlLzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAtMzA3ZTViODFiYmNl
LzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAR64AMt
aemhaOUhKyWHZ69QSvHVJalht9yBQOeMn5aVnf7FlgZsLRwQJ3FI/uxYDjTQlAjN
vN1mYa4mDMRHgOZP9depDmDA/YTtpCqYZ1XTq1xdRuzbJHBLLf5/2iEu5tYeezIL
TDe7XKF9NnxPAX97cFQ+2YI+aGNqrMixKeCk/+VcVpuR9q74UqS4lemqwOlZT8qK
CQVFcAP94eSY5coc9NaqDYlZ9iPUvf+DgFM6dBN6C+Jvgy5GzJBApDWzPbK6dEXN
FYcIMMEycRw7QvHHU/f+aXWlavrVx1YjSirwX+NAiVGczaRZl5kTA9GmIbX7nibk
/o5AKRS2hL4s8A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:49 2025 by rpki-client