Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: bBkbM6x8EM0baU1M+TcX2/SXuPqtk6DqrNCmrjXeUM4=
Subject key identifier: 65:CC:9C:3C:5D:53:33:2B:00:F5:A2:11:3C:83:5C:EE:2D:C6:31:7B
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 0196D09975C83F379F14B52AEC9EE815E5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0A64
Signing time: Wed 14 May 2025 21:00:40 +0000
Manifest this update: Wed 14 May 2025 21:00:40 +0000
Manifest next update: Thu 15 May 2025 21:00:40 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: ESbidXF7rnemmYop3sqAVuB49CL+HVGhwba6q4DsWBE=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:75:c8:3f:37:9f:14:b5:2a:ec:9e:e8:15:e5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: May 14 21:00:40 2025 GMT
Not After : May 15 21:00:40 2025 GMT
Subject: CN=65cc9c3c5d53332b00f5a2113c835cee2dc6317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:fe:7a:f6:ac:0d:2d:23:c8:2c:ba:50:8a:
8b:fc:07:c9:c5:e1:91:1d:64:4c:15:60:fc:a1:2c:
ce:7d:3d:42:f0:cb:a1:ba:37:3f:e4:71:3e:af:88:
74:1f:c1:5f:e1:c9:63:4f:10:f5:23:64:21:0b:80:
ec:ce:d5:9b:d1:9c:d7:21:25:32:b1:c4:8c:ce:dd:
64:03:ea:9d:a9:20:b7:2b:8d:a7:61:4f:5f:b9:fa:
ff:99:25:88:2a:06:03:ef:a4:7b:14:4d:d1:88:71:
06:e7:93:3c:2a:3e:5f:e0:76:4e:5c:da:fa:14:bf:
01:77:e0:23:0c:10:75:0d:21:ab:b5:a5:85:f2:05:
47:66:d4:e4:4c:87:02:e5:a8:31:37:05:82:ef:77:
86:c3:1d:54:8d:ad:15:58:b4:f2:dd:71:ac:07:98:
60:bd:0b:1b:ca:af:6d:bb:eb:ee:a6:ad:9a:3d:87:
2a:72:c3:df:9a:6c:64:f2:19:7e:cb:bb:65:c7:9c:
13:d4:3e:86:38:9b:a5:ac:78:af:ee:29:8c:c6:51:
5a:1e:1c:b2:06:ee:8f:19:35:24:4f:54:b3:a8:a7:
b3:09:22:91:b1:b6:1c:e8:c8:23:62:dc:3c:07:91:
95:cd:8c:44:cb:02:04:bb:6a:f4:7f:70:a2:15:12:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:9C:3C:5D:53:33:2B:00:F5:A2:11:3C:83:5C:EE:2D:C6:31:7B
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:b1:6b:6c:e6:39:ce:72:36:43:fd:37:09:d8:37:3c:f1:
34:f7:35:1a:19:38:72:84:c9:fc:dc:42:88:cc:7d:de:80:61:
02:69:b8:f3:58:a6:07:a7:d0:f4:e7:dc:28:d5:e7:7f:84:d9:
c4:74:a8:cd:57:d6:08:ec:54:ab:a2:5f:57:08:4d:78:a2:20:
53:28:02:cc:aa:1d:b9:88:9f:95:38:a5:b4:1c:3e:19:82:5e:
ec:3d:af:46:56:ce:1b:3c:da:ac:bd:91:5b:ef:10:ef:f9:a0:
52:c9:34:d6:50:88:81:c8:04:88:a5:70:be:14:df:e5:8d:cf:
56:f7:3e:2d:f8:77:de:b4:46:86:ef:e6:d5:15:b1:73:bb:19:
d9:90:93:f1:fa:9b:9a:0b:66:a1:19:62:3a:8b:4d:26:b7:00:
f6:9c:97:88:9e:19:7c:07:df:18:c3:11:7a:3e:0a:a6:4c:14:
3f:5f:14:cd:b7:b4:cd:f8:5d:43:ce:1e:6d:82:b9:ac:d1:68:
af:ff:e6:01:74:ec:5a:cb:62:a1:92:8c:c5:b7:f1:75:1a:07:
a5:75:1c:d1:ba:23:ee:da:a3:8e:00:5f:ae:76:92:e7:f5:d3:
25:4f:45:98:fa:36:7e:d7:27:70:f5:51:97:b0:c4:e7:fe:42:
a2:d6:e3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbQmXXIPzefFLUq7J7oFeWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzE4MTBmZWM4ZTdiMGI1ZWMyNjI5ZTk5Yzg5NjM1OTI2
YzYyNTEwHhcNMjUwNTE0MjEwMDQwWhcNMjUwNTE1MjEwMDQwWjAzMTEwLwYDVQQD
Eyg2NWNjOWMzYzVkNTMzMzJiMDBmNWEyMTEzYzgzNWNlZTJkYzYzMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDf+evasDS0jyCy6UIqL/AfJxeGR
HWRMFWD8oSzOfT1C8Muhujc/5HE+r4h0H8Ff4cljTxD1I2QhC4DsztWb0ZzXISUy
scSMzt1kA+qdqSC3K42nYU9fufr/mSWIKgYD76R7FE3RiHEG55M8Kj5f4HZOXNr6
FL8Bd+AjDBB1DSGrtaWF8gVHZtTkTIcC5agxNwWC73eGwx1Uja0VWLTy3XGsB5hg
vQsbyq9tu+vupq2aPYcqcsPfmmxk8hl+y7tlx5wT1D6GOJulrHiv7imMxlFaHhyy
Bu6PGTUkT1SzqKezCSKRsbYc6MgjYtw8B5GVzYxEywIEu2r0f3CiFRLGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXMnDxdUzMrAPWiETyDXO4txjF7MB8GA1UdIwQY
MBaAFBpxgQ/sjnsLXsJinpnIljWSbGJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzIt
NDAxN2NlZjViY2E5LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzItNDAxN2NlZjViY2E5
LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcqxa2zm
Oc5yNkP9NwnYNzzxNPc1Ghk4coTJ/NxCiMx93oBhAmm481imB6fQ9OfcKNXnf4TZ
xHSozVfWCOxUq6JfVwhNeKIgUygCzKoduYiflTiltBw+GYJe7D2vRlbOGzzarL2R
W+8Q7/mgUsk01lCIgcgEiKVwvhTf5Y3PVvc+Lfh33rRGhu/m1RWxc7sZ2ZCT8fqb
mgtmoRliOotNJrcA9pyXiJ4ZfAffGMMRej4KpkwUP18Uzbe0zfhdQ84ebYK5rNFo
r//mAXTsWstioZKMxbfxdRoHpXUc0boj7tqjjgBfrnaS5/XTJU9FmPo2ftcncPVR
l7DE5/5Cotbjyw==
-----END CERTIFICATE-----
Generated at Thu May 15 05:02:11 2025 by rpki-client