Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: aK+S4ggQ1mWiAWjgpBiWqhxzWKOysXX5gc192Mr8bew=
Subject key identifier: D7:18:1C:A1:E5:E7:62:E0:CF:04:EB:BD:C8:F7:63:C2:D5:F1:F6:C7
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 01964F353A6E26D45F7BDE137BDBFA5D853D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 01D4
Signing time: Sat 19 Apr 2025 18:00:10 +0000
Manifest this update: Sat 19 Apr 2025 18:00:10 +0000
Manifest next update: Sun 20 Apr 2025 18:00:10 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: Kp8+vtcOehnLbk02zwhfQTmYBI7QWz331qLH0V22w+g=)
2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:3a:6e:26:d4:5f:7b:de:13:7b:db:fa:5d:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Apr 19 18:00:10 2025 GMT
Not After : Apr 20 18:00:10 2025 GMT
Subject: CN=d7181ca1e5e762e0cf04ebbdc8f763c2d5f1f6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7a:e0:9a:18:a4:ef:7d:df:85:e6:91:c5:19:
a8:d2:64:f2:60:e3:62:a4:39:d2:03:32:12:d2:24:
92:a4:e2:79:44:c8:2c:6e:9d:cd:9c:86:b7:e7:ca:
66:80:5a:ad:00:42:b1:f7:21:da:b3:1f:ad:d6:a5:
b2:6d:56:f5:c4:0e:5a:23:39:de:d4:27:46:2c:08:
2f:34:33:82:d5:48:45:ee:a7:e3:28:32:92:cf:8d:
5f:3e:0e:ef:bd:f7:93:b4:c7:57:09:3e:31:e7:be:
8c:87:c8:b0:dc:47:fc:ef:cc:56:75:b2:cb:6a:9d:
8e:bf:2d:5b:cc:58:6a:cb:2d:58:e4:23:fd:fd:3c:
00:83:a1:dc:30:bf:ef:b2:49:74:a3:75:06:da:a2:
a2:cb:1f:e8:70:76:7e:2f:ce:f8:2a:c0:98:f3:8b:
d9:c0:cc:9b:ab:ed:26:97:47:6b:8d:3c:99:59:20:
46:e1:4a:2d:38:fc:65:af:76:e6:9d:ab:cb:8e:ac:
67:37:ad:8f:2a:c0:9e:77:b7:55:4b:7b:7b:fd:c2:
40:c5:81:af:da:92:0c:b2:04:d4:9d:1e:71:4c:1f:
bb:6b:6c:eb:bf:c3:72:d8:6e:8a:17:c1:ce:3e:cb:
24:e3:00:c9:5f:83:38:7a:64:07:7c:c6:a9:1e:3d:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:1C:A1:E5:E7:62:E0:CF:04:EB:BD:C8:F7:63:C2:D5:F1:F6:C7
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:35:d7:ff:d7:82:ae:37:60:9a:f4:fd:f2:81:3d:c2:eb:69:
c7:d8:07:2f:58:5d:15:68:cd:58:45:7b:e7:0e:f9:0a:26:0d:
f0:a6:7a:a4:f8:8d:9a:39:48:85:72:e6:52:51:42:5d:ea:6b:
c2:53:34:3e:41:54:78:4a:b7:63:33:13:f0:10:11:28:66:66:
e5:01:c9:31:25:9b:fd:b6:d7:70:e1:f4:bc:1d:f9:a3:ec:72:
f7:c2:cd:20:a1:b9:ad:7d:22:9a:0d:48:1c:0f:0b:94:9a:5a:
cf:d8:c3:04:e1:89:c5:b8:7b:48:99:2c:a1:c7:0e:5f:30:36:
93:b1:d8:f2:06:97:67:fe:5b:34:d3:cc:11:08:07:95:4d:55:
2c:08:de:20:05:64:b3:c5:76:0d:9c:f4:85:21:0e:3c:c4:43:
80:a5:27:85:f4:79:c9:ff:b1:fe:ca:f1:ff:d5:91:07:85:3a:
49:ed:ae:5a:45:85:9c:51:f9:8c:b6:84:35:17:01:72:c8:5e:
e5:3e:11:e8:6e:28:f8:fc:46:4a:8b:29:09:71:b5:92:1d:5c:
b5:b1:32:04:08:99:bf:82:e2:58:4b:d1:19:74:07:e0:bf:84:
06:30:0b:67:2d:60:5b:8d:80:ac:b6:17:b9:52:79:44:ae:4e:
70:ca:bc:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNTpuJtRfe94Te9v6XYU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw
OTA2MTMwHhcNMjUwNDE5MTgwMDEwWhcNMjUwNDIwMTgwMDEwWjAzMTEwLwYDVQQD
EyhkNzE4MWNhMWU1ZTc2MmUwY2YwNGViYmRjOGY3NjNjMmQ1ZjFmNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83rgmhik733fheaRxRmo0mTyYONi
pDnSAzIS0iSSpOJ5RMgsbp3NnIa358pmgFqtAEKx9yHasx+t1qWybVb1xA5aIzne
1CdGLAgvNDOC1UhF7qfjKDKSz41fPg7vvfeTtMdXCT4x576Mh8iw3Ef878xWdbLL
ap2Ovy1bzFhqyy1Y5CP9/TwAg6HcML/vskl0o3UG2qKiyx/ocHZ+L874KsCY84vZ
wMybq+0ml0drjTyZWSBG4UotOPxlr3bmnavLjqxnN62PKsCed7dVS3t7/cJAxYGv
2pIMsgTUnR5xTB+7a2zrv8Ny2G6KF8HOPssk4wDJX4M4emQHfMapHj339wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcYHKHl52LgzwTrvcj3Y8LV8fbHMB8GA1UdIwQY
MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt
OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5
LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzTXX/9eC
rjdgmvT98oE9wutpx9gHL1hdFWjNWEV75w75CiYN8KZ6pPiNmjlIhXLmUlFCXepr
wlM0PkFUeEq3YzMT8BARKGZm5QHJMSWb/bbXcOH0vB35o+xy98LNIKG5rX0img1I
HA8LlJpaz9jDBOGJxbh7SJksoccOXzA2k7HY8gaXZ/5bNNPMEQgHlU1VLAjeIAVk
s8V2DZz0hSEOPMRDgKUnhfR5yf+x/srx/9WRB4U6Se2uWkWFnFH5jLaENRcBcshe
5T4R6G4o+PxGSospCXG1kh1ctbEyBAiZv4LiWEvRGXQH4L+EBjALZy1gW42ArLYX
uVJ5RK5OcMq8eQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:19 2025 by rpki-client