Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: Y6Ccr3lQ8wvcPY2c4eZHs5JevxDN8kLUe0YAflPFqaU=
Subject key identifier: 04:80:E7:12:49:7C:05:64:11:7E:B9:AB:41:C8:AE:7D:82:19:94:1B
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 01965914FDEBC58562939C0F5D45A2B3982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 16:01:09 +0000
Manifest this update: Mon 21 Apr 2025 16:01:09 +0000
Manifest next update: Tue 22 Apr 2025 16:01:09 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: mCSIzer7dXeLg349dUrtwvjJZtjB2Iw62AMwqHGz04M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:fd:eb:c5:85:62:93:9c:0f:5d:45:a2:b3:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Apr 21 16:01:09 2025 GMT
Not After : Apr 22 16:01:09 2025 GMT
Subject: CN=0480e712497c0564117eb9ab41c8ae7d8219941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:7f:d6:fa:62:c7:44:1d:3f:0b:b2:c4:a3:
54:fc:1f:6b:87:ef:9d:c5:2b:7f:52:76:b0:9e:d3:
98:42:db:56:5b:c2:b5:9c:db:05:7c:db:2d:73:52:
ed:63:92:75:0f:6e:9c:0c:af:51:e6:63:bf:c6:93:
4c:a6:db:17:45:07:55:54:8e:04:3e:7e:56:40:75:
9e:7a:98:71:2c:f4:af:2b:ca:a0:19:83:f5:a6:13:
b7:55:9c:9d:d0:68:e6:cb:bb:f1:17:02:dc:6c:50:
56:61:0d:a0:22:87:c4:f0:34:1c:dd:26:14:64:27:
af:d0:aa:78:30:9f:4d:2b:57:82:bf:c7:b4:f0:d7:
19:f9:b9:f3:ed:82:9d:d7:56:07:4c:8a:6d:57:27:
22:4e:5b:72:d1:d5:e2:bd:f8:e2:5d:51:5b:7d:89:
05:fc:b7:c5:5d:c5:2b:f6:7a:b1:4f:8c:24:59:f0:
1e:7f:44:ba:c9:3c:e7:e5:88:f5:a3:56:c5:0a:ed:
37:00:18:73:f4:27:b9:3d:23:fd:50:15:bf:b4:15:
54:b3:90:32:42:a8:5f:98:04:aa:96:11:86:70:7b:
a0:88:85:8d:de:ed:96:f8:e0:5f:20:80:1b:e4:89:
88:44:7f:5a:2b:4d:2b:d2:a0:0e:43:b3:43:26:76:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:E7:12:49:7C:05:64:11:7E:B9:AB:41:C8:AE:7D:82:19:94:1B
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fc:c1:78:ed:a0:b1:5a:e9:d6:4c:8c:b6:3d:a8:e2:e4:27:
b4:e7:da:e3:81:7f:0f:39:86:45:32:3e:f7:35:ff:06:0f:97:
62:8f:00:f9:30:a1:59:86:0c:27:ca:e9:66:67:98:b8:bb:af:
63:87:67:fb:66:64:9f:ec:30:dd:02:49:96:32:38:5f:fb:94:
93:ce:65:12:11:af:61:0e:8c:dd:9b:a9:3a:96:b3:e3:90:c8:
aa:03:d7:a8:1e:84:7e:ea:da:8c:28:31:f8:5a:87:87:26:8c:
15:f0:b2:36:5a:5e:b1:1d:50:b9:fa:94:44:6a:6e:5f:e8:2f:
da:81:eb:e6:91:8c:2c:70:db:f5:97:f1:0d:ba:97:cb:99:c7:
b0:20:25:bc:6a:2c:c0:99:8d:da:e4:2f:64:15:20:04:2b:6b:
62:8d:2e:e4:dc:8c:4a:08:2f:35:30:c7:a6:1d:49:7d:ed:ad:
0b:d1:89:86:93:1d:7c:0b:5c:a0:ce:07:d0:1f:2c:b9:20:c7:
fe:55:a7:f1:e5:8b:5a:9f:36:b2:f6:3a:9f:b9:54:c3:e9:53:
85:5b:49:9c:ef:53:04:cb:1a:5e:00:b0:08:ed:6b:8a:66:86:
82:ac:f2:e1:6c:a5:b0:f8:15:94:0c:4e:ef:14:a4:d2:af:04:
67:74:d8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFP3rxYVik5wPXUWis5gqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzYwYmI4YTBlOTczYTk4YTMxN2RmYmFhMzdhYzNjMTRj
NTg3MDUwHhcNMjUwNDIxMTYwMTA5WhcNMjUwNDIyMTYwMTA5WjAzMTEwLwYDVQQD
EygwNDgwZTcxMjQ5N2MwNTY0MTE3ZWI5YWI0MWM4YWU3ZDgyMTk5NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivJ/1vpix0QdPwuyxKNU/B9rh++d
xSt/UnawntOYQttWW8K1nNsFfNstc1LtY5J1D26cDK9R5mO/xpNMptsXRQdVVI4E
Pn5WQHWeephxLPSvK8qgGYP1phO3VZyd0Gjmy7vxFwLcbFBWYQ2gIofE8DQc3SYU
ZCev0Kp4MJ9NK1eCv8e08NcZ+bnz7YKd11YHTIptVyciTlty0dXivfjiXVFbfYkF
/LfFXcUr9nqxT4wkWfAef0S6yTzn5Yj1o1bFCu03ABhz9Ce5PSP9UBW/tBVUs5Ay
QqhfmASqlhGGcHugiIWN3u2W+OBfIIAb5ImIRH9aK00r0qAOQ7NDJnbfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASA5xJJfAVkEX65q0HIrn2CGZQbMB8GA1UdIwQY
MBaAFBo2C7ig6XOpijF9+6o3rDwUxYcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAt
MzA3ZTViODFiYmNlLzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAtMzA3ZTViODFiYmNl
LzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvzBeO2g
sVrp1kyMtj2o4uQntOfa44F/DzmGRTI+9zX/Bg+XYo8A+TChWYYMJ8rpZmeYuLuv
Y4dn+2Zkn+ww3QJJljI4X/uUk85lEhGvYQ6M3ZupOpaz45DIqgPXqB6EfurajCgx
+FqHhyaMFfCyNlpesR1QufqURGpuX+gv2oHr5pGMLHDb9ZfxDbqXy5nHsCAlvGos
wJmN2uQvZBUgBCtrYo0u5NyMSggvNTDHph1Jfe2tC9GJhpMdfAtcoM4H0B8suSDH
/lWn8eWLWp82svY6n7lUw+lThVtJnO9TBMsaXgCwCO1rimaGgqzy4WylsPgVlAxO
7xSk0q8EZ3TYFw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:35 2025 by rpki-client