Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: nytTI0CS/dMzrPCC51iCAPt/R1xTDjGoalZU0H+srEk=
Subject key identifier: 50:11:62:36:EB:8E:10:6D:A3:52:0A:22:1D:53:28:60:D6:C4:58:73
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 01964DEC3BB6BFC0771E412EB9A0B3DC9F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 14D3
Signing time: Sat 19 Apr 2025 12:00:49 +0000
Manifest this update: Sat 19 Apr 2025 12:00:49 +0000
Manifest next update: Sun 20 Apr 2025 12:00:49 +0000
Files and hashes: 1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: HRReJsP3XGCA/uMeBdcOHmkeAeg9DcapcE5emyp8JuI=)
2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:3b:b6:bf:c0:77:1e:41:2e:b9:a0:b3:dc:9f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Apr 19 12:00:49 2025 GMT
Not After : Apr 20 12:00:49 2025 GMT
Subject: CN=50116236eb8e106da3520a221d532860d6c45873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:c1:d6:d0:c8:c0:ad:85:7e:b6:0f:87:6c:
2f:3b:b9:4c:a2:d4:d9:d7:99:62:e9:43:bb:dc:55:
27:bb:14:04:bd:56:b6:58:75:ef:e3:32:9c:bf:df:
25:39:d6:e3:4f:fa:76:da:b8:e0:0b:52:43:a0:e8:
b4:47:d9:c7:ff:2e:74:b9:d9:c7:b1:17:3a:84:b4:
39:a6:80:fb:26:22:83:fd:31:b4:f3:1b:7d:ea:3e:
20:89:37:1e:e7:95:65:9b:5a:3e:36:5f:6f:eb:50:
26:d6:b1:a3:5d:cd:70:52:02:9c:07:c6:a8:29:e3:
dd:79:6b:7e:27:1a:21:de:f8:83:4b:d9:eb:d9:83:
93:47:7b:f6:74:21:1b:fb:64:f3:69:40:5c:bf:15:
0c:e4:81:68:83:c0:51:f7:c7:7a:63:6d:bc:c4:bd:
46:c9:19:9d:c2:a4:a3:fb:f9:71:fa:e1:2f:92:9e:
fa:0e:45:74:e0:3c:ed:9e:86:36:e7:77:68:ed:1c:
37:15:86:7a:1d:cf:34:42:62:68:a6:27:45:23:20:
93:55:68:d7:f2:79:33:5e:85:aa:d6:11:5e:28:18:
05:c2:1a:11:55:1d:36:c9:7f:7c:ba:ad:b7:1f:b6:
09:fd:f9:24:18:d7:0a:c7:2f:8e:a9:26:32:ac:6d:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:62:36:EB:8E:10:6D:A3:52:0A:22:1D:53:28:60:D6:C4:58:73
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:13:56:40:91:e0:5d:f7:2a:7b:c2:cc:33:89:3e:6f:ef:1a:
ec:e2:63:4e:c6:d5:40:45:45:ea:01:a1:d2:e2:55:f4:8f:7f:
08:fa:e9:09:70:f9:3e:2b:16:a3:4f:a2:7d:48:52:2f:0b:ab:
ac:a5:b2:b4:8a:de:b1:ae:26:a0:ed:4e:98:df:f1:76:38:8a:
9f:73:25:32:e6:86:e9:91:5a:ab:da:d3:df:9a:43:b5:62:54:
4b:3f:4c:64:f3:2f:b5:00:25:49:cd:01:f7:0f:30:96:9b:bb:
29:aa:77:84:0b:e3:e9:ad:b5:34:23:2c:30:54:dd:47:b3:07:
b5:d6:69:14:99:40:0b:cc:fe:37:b1:74:22:8d:08:75:5f:85:
92:15:15:58:c5:5b:86:07:ad:46:a0:8e:68:db:56:96:cf:b4:
42:0f:eb:d4:8c:fb:c5:29:74:4f:c8:67:31:40:75:01:b6:11:
5d:24:40:42:45:5a:f1:96:61:b2:4a:23:2b:41:f2:51:e0:ee:
24:e0:b4:45:4d:b8:d7:89:ad:bd:62:3e:a0:b0:50:08:ec:71:
bc:a5:25:b4:90:f6:df:05:0e:48:ce:6c:2e:db:4a:bb:50:d7:
24:2f:06:01:4e:11:a3:d6:42:33:8a:b6:7a:ff:37:33:97:6e:
b8:87:89:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7Du2v8B3HkEuuaCz3J9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMGJiNTFhN2I1MzJiZTRkNDRiYTYwNGFlNmUwNjNmMDYz
ZjM3ZDQwHhcNMjUwNDE5MTIwMDQ5WhcNMjUwNDIwMTIwMDQ5WjAzMTEwLwYDVQQD
Eyg1MDExNjIzNmViOGUxMDZkYTM1MjBhMjIxZDUzMjg2MGQ2YzQ1ODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB7B1tDIwK2FfrYPh2wvO7lMotTZ
15li6UO73FUnuxQEvVa2WHXv4zKcv98lOdbjT/p22rjgC1JDoOi0R9nH/y50udnH
sRc6hLQ5poD7JiKD/TG08xt96j4giTce55Vlm1o+Nl9v61Am1rGjXc1wUgKcB8ao
KePdeWt+Jxoh3viDS9nr2YOTR3v2dCEb+2TzaUBcvxUM5IFog8BR98d6Y228xL1G
yRmdwqSj+/lx+uEvkp76DkV04DztnoY253do7Rw3FYZ6Hc80QmJopidFIyCTVWjX
8nkzXoWq1hFeKBgFwhoRVR02yX98uq23H7YJ/fkkGNcKxy+OqSYyrG1g8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFARYjbrjhBto1IKIh1TKGDWxFhzMB8GA1UdIwQY
MBaAFBsLtRp7Uyvk1EumBK5uBj8GPzfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMt
ZWVjZWU4OTNjNTI3LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMtZWVjZWU4OTNjNTI3
LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhNWQJHg
Xfcqe8LMM4k+b+8a7OJjTsbVQEVF6gGh0uJV9I9/CPrpCXD5PisWo0+ifUhSLwur
rKWytIresa4moO1OmN/xdjiKn3MlMuaG6ZFaq9rT35pDtWJUSz9MZPMvtQAlSc0B
9w8wlpu7Kap3hAvj6a21NCMsMFTdR7MHtdZpFJlAC8z+N7F0Io0IdV+FkhUVWMVb
hgetRqCOaNtWls+0Qg/r1Iz7xSl0T8hnMUB1AbYRXSRAQkVa8ZZhskojK0HyUeDu
JOC0RU2414mtvWI+oLBQCOxxvKUltJD23wUOSM5sLttKu1DXJC8GAU4Ro9ZCM4q2
ev83M5duuIeJDA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:04 2025 by rpki-client