
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: F4lhPi7Sb01vcIt8fTfMpQfosnCRPybW0gx+cO+x52o=
Subject key identifier: A6:7E:3B:EF:23:E6:6E:CA:D8:A9:12:AD:75:30:05:ED:64:13:98:AF
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 0196BB241A946585E5D2A8DCB79590011DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 010A
Signing time: Sat 10 May 2025 17:00:27 +0000
Manifest this update: Sat 10 May 2025 17:00:27 +0000
Manifest next update: Sun 11 May 2025 17:00:27 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: ARgXZ/DK3zc7cTA+JVTLsSHVgdZ65D7R9Wpz2Or5QMs=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:1a:94:65:85:e5:d2:a8:dc:b7:95:90:01:1d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: May 10 17:00:27 2025 GMT
Not After : May 11 17:00:27 2025 GMT
Subject: CN=a67e3bef23e66ecad8a912ad753005ed641398af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:3b:9f:85:30:de:1d:af:e2:46:05:8a:cb:
20:7e:f6:11:14:74:20:32:8f:0d:a4:b1:0c:62:cc:
f6:fd:79:c7:59:ba:22:18:4c:97:3f:d2:7e:50:a5:
be:62:65:5a:83:ec:9a:89:5a:3c:b2:47:50:02:e6:
35:29:1c:39:45:bf:60:b0:38:15:20:81:52:a6:23:
2d:ad:d9:3d:e2:74:f5:c4:58:66:04:84:12:d0:4a:
d1:e9:fe:03:5e:d2:f8:98:a8:10:fa:f9:4a:70:e5:
4e:77:61:ef:f9:1c:a9:d3:1f:43:b9:ca:3e:9b:cb:
41:f5:2a:49:4d:34:50:64:91:61:36:3b:81:d9:0e:
1e:32:11:4f:97:e9:e5:0d:cd:e3:ae:04:2d:99:da:
10:d8:34:f8:55:1c:43:77:5e:5d:46:5c:ec:93:7b:
3c:45:fa:e0:dd:9a:f8:44:69:b5:ea:bd:ba:15:0a:
7a:41:04:b5:1e:48:ff:dd:11:f0:0d:3e:b1:dd:07:
78:df:4a:58:58:03:d1:61:45:49:05:01:3b:cd:6a:
bc:9b:56:40:0c:6e:94:23:49:56:cd:75:46:11:dd:
6e:2e:99:1a:cc:96:34:9e:ca:75:e9:92:3e:03:b3:
a9:be:a1:db:86:52:36:48:60:7b:7d:dd:c6:52:c3:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7E:3B:EF:23:E6:6E:CA:D8:A9:12:AD:75:30:05:ED:64:13:98:AF
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e2:9b:e5:e2:23:a3:9e:57:d3:93:3c:95:3e:d2:21:f1:a3:
d6:41:51:e7:e7:88:d8:ae:0b:ae:57:f7:70:0a:ba:f1:3d:ae:
3b:8f:d2:b9:29:72:22:df:74:5a:84:43:37:57:7b:9c:ab:2e:
13:1f:a5:d9:67:04:05:f6:af:8f:ca:1e:e7:e2:a6:83:18:fa:
43:60:0e:68:b3:2c:62:2a:7d:ef:25:bb:1a:9d:db:29:6c:05:
82:17:ce:f2:98:93:07:d0:b0:d1:a5:18:4b:82:b0:1b:ea:af:
e9:47:c9:2c:69:62:e1:38:b4:0d:3b:68:56:80:1c:9f:fc:af:
d7:4e:63:47:53:3c:8c:4e:79:31:f0:24:c7:e9:e6:57:45:88:
29:ee:52:cd:71:fe:36:c0:0c:0d:16:a8:2c:01:49:82:be:7c:
e8:be:39:23:a7:4a:83:53:e6:12:eb:35:28:5a:ee:a9:88:ab:
0a:ef:78:b7:11:46:80:f0:99:82:f6:02:22:58:c9:9b:fa:71:
11:41:d6:3b:aa:92:a5:49:62:4e:25:90:c6:67:63:c1:c8:76:
5f:c2:a5:b2:99:b8:2f:6d:34:67:c3:50:c1:1f:86:c2:62:ce:
70:d2:d1:33:22:6a:5c:a5:2b:46:83:a4:2f:3c:f3:a0:82:69:
64:b9:23:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7JBqUZYXl0qjct5WQAR39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjUwNTEwMTcwMDI3WhcNMjUwNTExMTcwMDI3WjAzMTEwLwYDVQQD
EyhhNjdlM2JlZjIzZTY2ZWNhZDhhOTEyYWQ3NTMwMDVlZDY0MTM5OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPQ7n4Uw3h2v4kYFissgfvYRFHQg
Mo8NpLEMYsz2/XnHWboiGEyXP9J+UKW+YmVag+yaiVo8skdQAuY1KRw5Rb9gsDgV
IIFSpiMtrdk94nT1xFhmBIQS0ErR6f4DXtL4mKgQ+vlKcOVOd2Hv+Ryp0x9Duco+
m8tB9SpJTTRQZJFhNjuB2Q4eMhFPl+nlDc3jrgQtmdoQ2DT4VRxDd15dRlzsk3s8
Rfrg3Zr4RGm16r26FQp6QQS1Hkj/3RHwDT6x3Qd430pYWAPRYUVJBQE7zWq8m1ZA
DG6UI0lWzXVGEd1uLpkazJY0nsp16ZI+A7OpvqHbhlI2SGB7fd3GUsMX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ+O+8j5m7K2KkSrXUwBe1kE5ivMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+Kb5eIj
o55X05M8lT7SIfGj1kFR5+eI2K4Lrlf3cAq68T2uO4/SuSlyIt90WoRDN1d7nKsu
Ex+l2WcEBfavj8oe5+Kmgxj6Q2AOaLMsYip97yW7Gp3bKWwFghfO8piTB9Cw0aUY
S4KwG+qv6UfJLGli4Ti0DTtoVoAcn/yv105jR1M8jE55MfAkx+nmV0WIKe5SzXH+
NsAMDRaoLAFJgr586L45I6dKg1PmEus1KFruqYirCu94txFGgPCZgvYCIljJm/px
EUHWO6qSpUliTiWQxmdjwch2X8Klspm4L200Z8NQwR+GwmLOcNLRMyJqXKUrRoOk
LzzzoIJpZLkjfw==
-----END CERTIFICATE-----
Generated at Sat May 10 18:43:24 2025 by rpki-client