Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: 0sJ9G/i/vporpue8NOenKCqeTPtm8n94bf7KiVL1dAo=
Subject key identifier: D0:3D:FD:1C:44:B8:08:DD:02:6E:75:1C:93:14:71:8C:82:4E:09:02
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01974A0C8210DE7F521A049AE30527A228A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 23
Signing time: Sat 07 Jun 2025 11:00:22 +0000
Manifest this update: Sat 07 Jun 2025 11:00:22 +0000
Manifest next update: Sun 08 Jun 2025 11:00:22 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: l45bWXXNBwWk6mZ/DdR1/oQrbDLgQ9jHtI5z+uh4rx4=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:82:10:de:7f:52:1a:04:9a:e3:05:27:a2:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Jun 7 11:00:22 2025 GMT
Not After : Jun 8 11:00:22 2025 GMT
Subject: CN=d03dfd1c44b808dd026e751c9314718c824e0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:8a:e3:8f:36:3d:26:63:30:5c:5e:5d:99:
2f:89:51:30:cc:95:69:9c:fd:eb:f0:c4:a2:86:4d:
99:bb:2f:a5:d0:f5:1e:f4:cf:c4:ba:2e:84:2f:0c:
17:b0:38:4d:45:b0:16:42:85:c3:c1:97:5b:54:66:
2d:95:44:bf:3e:aa:66:52:49:b0:f9:b6:8c:60:12:
24:c8:43:ed:ca:dc:bd:cf:ae:8f:99:02:04:bd:c8:
2e:b2:98:28:18:6b:28:19:b1:e8:da:07:c7:6a:ec:
f5:24:1f:1b:5e:d8:38:0a:cd:72:8e:ee:cd:f9:ba:
9c:29:48:0b:dc:cd:1d:d1:72:2f:f0:b3:6a:86:2b:
35:5b:04:5b:e8:48:b7:e1:3e:0e:e7:5e:bf:42:22:
5d:61:98:87:57:ac:96:53:1a:07:49:69:c5:04:85:
d9:d3:cd:75:c9:bd:f8:3d:a3:66:e0:b7:9e:41:e2:
2f:be:f5:2a:81:df:c7:61:6a:c9:31:31:56:3b:1e:
c5:0c:ec:54:68:0a:cb:76:e9:69:6e:09:70:66:e2:
26:80:b9:1d:de:67:3a:ca:a7:e5:e5:b1:20:78:58:
55:43:9c:d5:cb:a8:f8:ec:f2:6f:f5:7c:f8:2a:c5:
92:5c:30:12:c0:43:4e:6b:65:c0:8a:06:d2:45:97:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:FD:1C:44:B8:08:DD:02:6E:75:1C:93:14:71:8C:82:4E:09:02
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:98:e7:2e:b9:d8:3f:11:5c:b1:25:ca:66:32:be:d6:5f:ce:
ea:57:73:2c:cc:b2:85:17:ab:f0:f5:e5:99:75:91:85:71:6d:
9a:6f:23:93:e4:9b:34:16:de:56:0f:06:de:41:b7:43:d9:45:
e7:f9:7b:ea:e2:7c:bb:52:4c:62:ce:59:4b:c1:a8:13:0c:52:
55:18:f1:fe:83:a7:fb:63:7b:2f:02:40:c8:97:6d:be:f8:12:
8c:6e:ec:d5:63:6c:c1:59:30:ae:22:44:cb:55:f1:e1:57:18:
00:8c:58:1b:b0:0d:38:d8:6c:42:03:f9:b5:56:60:5b:ba:13:
49:31:db:59:3d:20:6e:c3:b9:51:c4:50:5c:8d:26:65:dd:9b:
ad:61:28:b7:54:92:9f:4e:4c:7c:b2:13:26:53:a1:44:ec:be:
f2:14:eb:53:22:03:58:db:9d:37:5c:18:b1:fd:f1:72:78:90:
b5:4f:15:03:ad:26:41:ee:f4:80:f7:7c:ee:17:be:51:41:6d:
13:95:c8:70:36:72:7f:d5:9f:b6:7b:11:c7:24:b7:e2:e7:a1:
35:fc:3c:54:57:a3:de:e9:dc:70:ec:5c:fd:a8:66:21:d2:0d:
97:30:64:c1:5a:04:e9:11:11:db:97:51:f4:df:84:8a:ea:04:
d7:7c:aa:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDIIQ3n9SGgSa4wUnoiipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4
M2Q2MmIwHhcNMjUwNjA3MTEwMDIyWhcNMjUwNjA4MTEwMDIyWjAzMTEwLwYDVQQD
EyhkMDNkZmQxYzQ0YjgwOGRkMDI2ZTc1MWM5MzE0NzE4YzgyNGUwOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0qK4482PSZjMFxeXZkviVEwzJVp
nP3r8MSihk2Zuy+l0PUe9M/Eui6ELwwXsDhNRbAWQoXDwZdbVGYtlUS/PqpmUkmw
+baMYBIkyEPtyty9z66PmQIEvcguspgoGGsoGbHo2gfHauz1JB8bXtg4Cs1yju7N
+bqcKUgL3M0d0XIv8LNqhis1WwRb6Ei34T4O516/QiJdYZiHV6yWUxoHSWnFBIXZ
0811yb34PaNm4LeeQeIvvvUqgd/HYWrJMTFWOx7FDOxUaArLdulpbglwZuImgLkd
3mc6yqfl5bEgeFhVQ5zVy6j47PJv9Xz4KsWSXDASwENOa2XAigbSRZdzywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA9/RxEuAjdAm51HJMUcYyCTgkCMB8GA1UdIwQY
MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct
NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm
LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5jnLrnY
PxFcsSXKZjK+1l/O6ldzLMyyhRer8PXlmXWRhXFtmm8jk+SbNBbeVg8G3kG3Q9lF
5/l76uJ8u1JMYs5ZS8GoEwxSVRjx/oOn+2N7LwJAyJdtvvgSjG7s1WNswVkwriJE
y1Xx4VcYAIxYG7ANONhsQgP5tVZgW7oTSTHbWT0gbsO5UcRQXI0mZd2brWEot1SS
n05MfLITJlOhROy+8hTrUyIDWNudN1wYsf3xcniQtU8VA60mQe70gPd87he+UUFt
E5XIcDZyf9WftnsRxyS34uehNfw8VFej3unccOxc/ahmIdINlzBkwVoE6RER25dR
9N+EiuoE13yqQA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:09 2025 by rpki-client