Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: TK+USdE0RT34f6rfRXc9l4cVJgqlMtDoIAtJqZp49sg=
Subject key identifier: 5F:E1:2F:2B:3B:12:54:04:DA:DA:30:40:DE:7A:D1:EE:AD:AB:E6:3C
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 0196A1D2D2F6025CFE714A96CBE03293C8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 139C
Signing time: Mon 05 May 2025 19:01:10 +0000
Manifest this update: Mon 05 May 2025 19:01:10 +0000
Manifest next update: Tue 06 May 2025 19:01:10 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: HkkYUfUgMV1F7WQAufJeRAKU8QlsI6QOsZmKOhj64y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:d2:f6:02:5c:fe:71:4a:96:cb:e0:32:93:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: May 5 19:01:10 2025 GMT
Not After : May 6 19:01:10 2025 GMT
Subject: CN=5fe12f2b3b125404dada3040de7ad1eeadabe63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:3c:19:74:a5:77:77:50:c5:15:e2:86:34:
dc:5c:e5:bb:96:b0:af:be:e0:3b:95:e4:27:68:7a:
6b:5a:56:1c:d2:1e:0f:9f:ec:02:fe:08:d1:0a:04:
4a:3d:e9:c6:10:cc:fe:6d:d3:3c:f1:8c:d4:47:7b:
bd:38:ec:c0:61:70:5c:54:a9:06:00:eb:db:02:4d:
59:b7:6d:f3:3f:54:e9:df:33:4a:97:ee:2c:fe:70:
a8:92:a8:5d:e4:61:41:17:e6:30:51:86:3d:1c:4d:
66:2d:bb:69:d5:7f:ca:35:de:35:f7:ba:3a:62:31:
60:9b:5d:08:d6:c3:29:31:1a:9f:50:2c:99:83:7f:
c7:c2:9a:74:69:91:cc:5b:76:01:03:4b:60:7f:93:
db:0d:24:b8:c0:05:0c:f3:06:65:8d:12:ca:21:c9:
e5:99:3f:ee:fd:f2:75:a4:a9:db:d7:e5:96:cd:6f:
dd:3f:8a:23:f4:85:66:ab:53:c7:76:75:a3:48:99:
1f:42:d4:1c:44:c9:b3:33:90:ac:ef:f4:a1:17:d3:
88:1f:8d:47:ab:42:73:28:39:b9:51:b9:c0:bd:31:
16:f2:80:8e:51:ed:94:a7:29:d8:01:a3:55:cf:11:
c9:69:aa:e1:51:50:66:6a:bf:57:54:05:5d:7b:2c:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:2F:2B:3B:12:54:04:DA:DA:30:40:DE:7A:D1:EE:AD:AB:E6:3C
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:04:29:eb:69:b6:13:fa:af:1d:f7:d1:35:b7:4f:12:f0:2c:
05:13:f1:50:d4:a8:ae:1d:d7:1c:a0:c7:bd:51:3a:ef:0d:1e:
41:5f:cd:2e:6a:f3:4e:e1:d3:a7:0e:9d:2c:73:2f:7c:4c:a6:
c7:eb:51:80:c0:0d:bd:72:3f:dd:13:ce:0c:dc:21:14:1c:89:
76:4c:d1:89:a3:5c:9d:83:47:2f:0c:3d:9c:05:dc:fa:17:0e:
8c:01:95:20:59:98:3e:66:47:e6:c1:66:0b:bc:78:7f:de:3c:
da:34:e8:8e:4b:bc:2d:6b:b7:20:44:b1:27:3c:f3:ec:cb:36:
e3:8e:5b:ed:0c:5c:14:64:17:c1:3b:28:4f:27:ed:34:e5:9f:
34:7e:7b:b1:e1:e5:94:17:27:a4:7d:51:da:69:a3:92:df:a9:
1e:c6:8f:93:a0:b4:65:79:cb:d9:df:69:61:15:51:b8:a9:55:
7e:89:24:2f:a5:27:7c:dd:29:9e:a8:35:60:39:75:16:89:fb:
be:c6:e7:fb:99:ba:a0:a5:d6:e8:00:9f:60:22:27:66:6d:4c:
9f:45:6f:84:a6:80:42:2f:2f:e9:c7:98:0d:7b:18:8e:88:6a:
e5:eb:6f:5a:90:52:8e:1a:9c:96:10:67:25:84:44:4d:a9:49:
21:de:e8:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0tL2Alz+cUqWy+Ayk8ixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjUwNTA1MTkwMTEwWhcNMjUwNTA2MTkwMTEwWjAzMTEwLwYDVQQD
Eyg1ZmUxMmYyYjNiMTI1NDA0ZGFkYTMwNDBkZTdhZDFlZWFkYWJlNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh88GXSld3dQxRXihjTcXOW7lrCv
vuA7leQnaHprWlYc0h4Pn+wC/gjRCgRKPenGEMz+bdM88YzUR3u9OOzAYXBcVKkG
AOvbAk1Zt23zP1Tp3zNKl+4s/nCokqhd5GFBF+YwUYY9HE1mLbtp1X/KNd4197o6
YjFgm10I1sMpMRqfUCyZg3/Hwpp0aZHMW3YBA0tgf5PbDSS4wAUM8wZljRLKIcnl
mT/u/fJ1pKnb1+WWzW/dP4oj9IVmq1PHdnWjSJkfQtQcRMmzM5Cs7/ShF9OIH41H
q0JzKDm5UbnAvTEW8oCOUe2UpynYAaNVzxHJaarhUVBmar9XVAVdeyxLrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/hLys7ElQE2towQN560e6tq+Y8MB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQQp62m2
E/qvHffRNbdPEvAsBRPxUNSorh3XHKDHvVE67w0eQV/NLmrzTuHTpw6dLHMvfEym
x+tRgMANvXI/3RPODNwhFByJdkzRiaNcnYNHLww9nAXc+hcOjAGVIFmYPmZH5sFm
C7x4f9482jTojku8LWu3IESxJzzz7Ms2445b7QxcFGQXwTsoTyftNOWfNH57seHl
lBcnpH1R2mmjkt+pHsaPk6C0ZXnL2d9pYRVRuKlVfokkL6UnfN0pnqg1YDl1Fon7
vsbn+5m6oKXW6ACfYCInZm1Mn0VvhKaAQi8v6ceYDXsYjohq5etvWpBSjhqclhBn
JYRETalJId7oLA==
-----END CERTIFICATE-----
Generated at Mon May 5 23:57:28 2025 by rpki-client