Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: 2y7k96Y9dWvzl2ApO0nG4UlqDAyaCcWAyXbOdkGC9do=
Subject key identifier: 56:2F:22:E4:66:45:75:91:AC:32:EB:44:AE:CD:F5:30:4B:A6:0C:B3
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 0196C1267C161459C380FB4F79279D0B4D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 21:00:46 +0000
Manifest this update: Sun 11 May 2025 21:00:46 +0000
Manifest next update: Mon 12 May 2025 21:00:46 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: g4ZM3vY5qGK49ZJ9LVnG1tKvBwe+j7QdbblCSQmATo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:7c:16:14:59:c3:80:fb:4f:79:27:9d:0b:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: May 11 21:00:46 2025 GMT
Not After : May 12 21:00:46 2025 GMT
Subject: CN=562f22e466457591ac32eb44aecdf5304ba60cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:ca:78:c4:6b:88:6c:b0:fb:56:a4:b5:57:
10:b6:ea:0f:5c:39:21:97:c5:eb:23:7e:71:af:89:
1b:bc:8a:2d:8f:b4:e7:58:45:37:9e:30:b7:57:be:
14:12:b4:ff:3e:56:d4:38:56:15:f7:8e:87:18:9b:
33:5f:fd:42:2b:47:50:bb:68:fa:35:14:7b:a8:f4:
23:53:04:be:75:96:dd:20:13:b7:51:98:e3:8b:93:
ac:7e:df:5d:47:00:70:01:3e:26:f6:7f:8e:dc:98:
72:76:d0:1e:4a:2a:23:ca:3c:6d:ad:86:5a:92:d4:
5c:ee:9a:7a:f0:23:9c:03:b9:f2:df:c7:f3:4e:09:
c1:f2:d0:dd:2b:10:34:8a:dc:5d:ef:42:cd:36:d5:
22:dd:d4:c7:99:3a:3e:65:96:d0:9e:e4:22:e2:f5:
52:39:c6:ee:da:64:f8:b5:24:aa:b7:e5:e2:4f:71:
0c:2d:74:9c:db:8e:c0:cd:2b:02:1e:59:f7:62:47:
d5:df:6c:f8:96:23:89:0e:d1:4a:58:2d:a8:da:53:
e8:bd:f0:a7:03:32:e9:7f:53:48:6a:ad:f6:ab:7a:
a1:4b:e6:f4:84:c3:ac:99:1c:71:09:7f:81:14:e8:
d9:2b:4c:44:0c:ab:29:75:56:7e:11:50:f6:db:d5:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:22:E4:66:45:75:91:AC:32:EB:44:AE:CD:F5:30:4B:A6:0C:B3
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:55:5b:00:31:93:1f:73:e2:41:1e:33:8c:10:c2:cd:19:58:
88:70:eb:ce:4d:9c:20:ef:10:a6:ad:71:c2:ec:77:17:6c:7e:
02:bb:42:1e:11:33:21:89:19:9a:22:7a:b7:5e:e7:8d:c3:31:
57:b5:a2:88:15:06:5b:47:e0:a5:e8:9c:9f:58:3c:6b:64:61:
65:c0:03:be:6c:41:0e:10:e4:fd:bb:b2:a2:0f:df:8d:ba:f2:
1a:d4:a8:e3:d8:c5:b1:83:b9:b3:3c:ff:bf:6e:62:19:70:83:
28:f4:92:f1:19:46:5a:1e:0d:cb:88:cb:e3:d0:4f:a9:6a:b1:
7f:48:97:b1:24:5c:d5:db:39:d0:20:a4:e5:5d:cb:5b:03:56:
02:90:12:a7:29:a4:05:3f:5b:84:24:97:95:16:50:9f:14:cf:
31:33:9d:d3:94:8b:7a:07:bb:e0:f5:cc:39:9e:66:43:1a:ad:
95:f4:d3:ab:3a:d8:38:98:32:28:9b:69:2f:8d:6b:06:43:07:
06:b4:70:1e:10:60:ff:b5:5a:74:c4:46:c4:8d:df:29:6b:26:
b2:8f:cb:5d:6b:48:d0:5c:d4:ed:2e:5f:61:19:42:15:9f:b9:
22:ee:73:98:38:d4:37:f5:34:9d:06:95:82:74:fd:30:eb:05:
1f:44:bb:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJnwWFFnDgPtPeSedC00wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTA2MzM3MzkyNDNmNzFhMjllZWQxOGRjMTNkMDA2NzZj
N2NlM2MwHhcNMjUwNTExMjEwMDQ2WhcNMjUwNTEyMjEwMDQ2WjAzMTEwLwYDVQQD
Eyg1NjJmMjJlNDY2NDU3NTkxYWMzMmViNDRhZWNkZjUzMDRiYTYwY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdvKeMRriGyw+1aktVcQtuoPXDkh
l8XrI35xr4kbvIotj7TnWEU3njC3V74UErT/PlbUOFYV946HGJszX/1CK0dQu2j6
NRR7qPQjUwS+dZbdIBO3UZjji5Osft9dRwBwAT4m9n+O3JhydtAeSiojyjxtrYZa
ktRc7pp68COcA7ny38fzTgnB8tDdKxA0itxd70LNNtUi3dTHmTo+ZZbQnuQi4vVS
Ocbu2mT4tSSqt+XiT3EMLXSc247AzSsCHln3YkfV32z4liOJDtFKWC2o2lPovfCn
AzLpf1NIaq32q3qhS+b0hMOsmRxxCX+BFOjZK0xEDKspdVZ+EVD229WLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYvIuRmRXWRrDLrRK7N9TBLpgyzMB8GA1UdIwQY
MBaAFBgQYzc5JD9xop7tGNwT0AZ2x848MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEt
ZWQzZjJmNzBjZjE0LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEtZWQzZjJmNzBjZjE0
LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVVbADGT
H3PiQR4zjBDCzRlYiHDrzk2cIO8Qpq1xwux3F2x+ArtCHhEzIYkZmiJ6t17njcMx
V7WiiBUGW0fgpeicn1g8a2RhZcADvmxBDhDk/buyog/fjbryGtSo49jFsYO5szz/
v25iGXCDKPSS8RlGWh4Ny4jL49BPqWqxf0iXsSRc1ds50CCk5V3LWwNWApASpymk
BT9bhCSXlRZQnxTPMTOd05SLege74PXMOZ5mQxqtlfTTqzrYOJgyKJtpL41rBkMH
BrRwHhBg/7VadMRGxI3fKWsmso/LXWtI0FzU7S5fYRlCFZ+5Iu5zmDjUN/U0nQaV
gnT9MOsFH0S7oA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:36:34 2025 by rpki-client