Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: F4ovOQj6pPzqkAy+X77E0u4L6tm6feWG1bJXVlhbM20=
Subject key identifier: 61:D9:CE:17:23:B2:1B:D6:4F:A0:DF:45:17:A4:7A:07:14:52:9C:9D
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01965537DF7C4FC760549ABD7DF59EF99168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 22:00:47 +0000
Manifest this update: Sun 20 Apr 2025 22:00:47 +0000
Manifest next update: Mon 21 Apr 2025 22:00:47 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: 0V6Oz+tms6ilnf5uZ0gK3axxGjkPGvKdgvyq8rmksiM=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:df:7c:4f:c7:60:54:9a:bd:7d:f5:9e:f9:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Apr 20 22:00:47 2025 GMT
Not After : Apr 21 22:00:47 2025 GMT
Subject: CN=61d9ce1723b21bd64fa0df4517a47a0714529c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:cf:a3:fe:57:80:1d:3a:25:93:63:57:b2:
fc:4d:5f:ef:4d:3c:8b:de:8f:8a:47:cb:08:d8:1a:
87:7a:9d:bd:13:67:76:20:72:16:e8:26:9b:1d:30:
84:22:7e:e2:2b:ae:1d:79:9e:e9:b6:5e:1d:7a:c4:
09:da:d4:16:63:b8:da:78:d5:f7:09:98:c8:84:be:
d0:1c:37:cf:b1:5e:46:e7:0e:03:b7:6b:a0:21:09:
54:ee:1a:41:52:92:c2:dd:e5:d7:51:60:e6:73:24:
0e:cc:de:a6:62:d7:1b:de:73:32:7c:44:c8:ab:e5:
c0:c7:96:02:ff:ba:6e:09:64:5b:6c:01:20:ac:5f:
44:8b:b7:ae:db:aa:9f:0d:53:fa:2c:7b:ca:62:5d:
4c:d5:86:84:7a:ec:8d:f6:8a:a6:71:72:fe:b2:01:
6d:64:2a:c6:c2:b1:45:1d:83:d1:d5:d2:d6:9f:af:
6b:be:37:82:99:dd:62:43:e5:62:b5:84:53:77:ba:
bf:dc:f1:bc:7d:88:04:60:f3:cb:49:7d:e1:77:fb:
3f:ad:77:31:38:6e:74:a0:9d:cb:e0:51:0f:a5:ee:
f4:d9:bb:7e:72:6e:61:aa:69:96:d5:c0:c8:c3:49:
b8:3e:7a:2c:85:0d:f5:a1:27:49:dc:b8:db:9a:0c:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:CE:17:23:B2:1B:D6:4F:A0:DF:45:17:A4:7A:07:14:52:9C:9D
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:eb:5e:b9:2c:4a:3a:31:07:08:e9:ee:26:55:ce:59:bc:
9d:6d:80:28:7e:7e:f7:9e:50:42:d0:b3:62:35:5d:7a:bf:2d:
36:62:41:5f:96:1f:29:04:26:09:58:62:37:b2:67:4b:71:68:
d6:85:87:a6:c5:b0:62:67:61:0e:f4:18:83:31:17:f7:7b:8c:
cc:3c:60:1d:e7:82:cd:31:2c:5c:5b:c0:40:a2:a2:51:8d:f2:
24:07:ab:87:d2:dc:e3:41:18:c7:85:2e:cf:b0:0d:d2:e3:d1:
e7:87:f6:67:bc:54:4f:03:37:50:31:2e:8e:d5:79:a3:24:1a:
3a:ae:f7:d2:32:13:89:e4:c6:24:a7:fe:91:85:71:79:de:a0:
90:be:65:b8:17:85:87:3c:41:d6:f9:bf:f1:bf:bf:a9:0d:ff:
26:ae:58:61:3f:88:7e:72:5b:bb:80:37:70:a1:90:81:07:ed:
5b:3e:53:88:0f:5d:24:cd:73:59:b9:60:08:96:6b:b7:a3:a8:
6a:a8:95:04:00:e1:ed:6d:2a:45:57:6a:d9:84:e2:b7:13:e2:
63:bb:86:0b:ec:8a:b4:43:a6:78:e2:9d:6e:30:35:29:9d:27:
1f:2d:80:55:8a:b6:fc:53:f3:2c:45:1f:da:a5:3a:2e:cb:7e:
2e:26:2a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN998T8dgVJq9ffWe+ZFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjM3OTc2OWM1N2NhNWIyNmEyYzYxZmE1ZDlhY2M1Mjdi
ZWE3ODkwHhcNMjUwNDIwMjIwMDQ3WhcNMjUwNDIxMjIwMDQ3WjAzMTEwLwYDVQQD
Eyg2MWQ5Y2UxNzIzYjIxYmQ2NGZhMGRmNDUxN2E0N2EwNzE0NTI5YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4rPo/5XgB06JZNjV7L8TV/vTTyL
3o+KR8sI2BqHep29E2d2IHIW6CabHTCEIn7iK64deZ7ptl4desQJ2tQWY7jaeNX3
CZjIhL7QHDfPsV5G5w4Dt2ugIQlU7hpBUpLC3eXXUWDmcyQOzN6mYtcb3nMyfETI
q+XAx5YC/7puCWRbbAEgrF9Ei7eu26qfDVP6LHvKYl1M1YaEeuyN9oqmcXL+sgFt
ZCrGwrFFHYPR1dLWn69rvjeCmd1iQ+VitYRTd7q/3PG8fYgEYPPLSX3hd/s/rXcx
OG50oJ3L4FEPpe702bt+cm5hqmmW1cDIw0m4PnoshQ31oSdJ3LjbmgwgPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHZzhcjshvWT6DfRRekegcUUpydMB8GA1UdIwQY
MBaAFBljeXacV8pbJqLGH6XZrMUnvqeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQt
OTQ5YWE1Yjc1YTQ1LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQtOTQ5YWE1Yjc1YTQ1
LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2XrXrks
SjoxBwjp7iZVzlm8nW2AKH5+955QQtCzYjVder8tNmJBX5YfKQQmCVhiN7JnS3Fo
1oWHpsWwYmdhDvQYgzEX93uMzDxgHeeCzTEsXFvAQKKiUY3yJAerh9Lc40EYx4Uu
z7AN0uPR54f2Z7xUTwM3UDEujtV5oyQaOq730jITieTGJKf+kYVxed6gkL5luBeF
hzxB1vm/8b+/qQ3/Jq5YYT+IfnJbu4A3cKGQgQftWz5TiA9dJM1zWblgCJZrt6Oo
aqiVBADh7W0qRVdq2YTitxPiY7uGC+yKtEOmeOKdbjA1KZ0nHy2AVYq2/FPzLEUf
2qU6Lst+LiYqjg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:02 2025 by rpki-client