Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: CmOHKVNJgAhEEeEqtkDBODFpbSTZe+hj/H3Wig1mUA8=
Subject key identifier: 82:1C:AD:7D:66:B3:B6:9B:9A:7F:BD:CA:BB:D8:2F:CF:69:38:52:BF
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 0197B7B30462F38BF4C7BBA230D44E347FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0690
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: uMUWrXXuLXxkWKNz6hggcJBM0UG6WmRtQsEcHuH1zX4=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:04:62:f3:8b:f4:c7:bb:a2:30:d4:4e:34:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=821cad7d66b3b69b9a7fbdcabbd82fcf693852bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:13:7d:7b:17:a4:fc:24:55:14:f4:b8:a4:
2f:b5:6a:3a:8e:10:13:77:8e:a5:6e:0f:6a:db:e8:
96:1e:d1:6a:2b:c7:1d:a5:58:f3:59:55:3d:e6:ca:
9f:29:bf:37:2b:0f:59:87:75:13:12:52:fa:ac:72:
b6:96:8d:56:7d:f1:71:16:e0:28:92:e7:94:19:dc:
ae:e4:82:60:dc:80:0b:63:8b:14:9f:30:71:c8:e6:
61:6e:6f:6f:a4:34:30:dc:d4:ec:49:ba:38:0c:e3:
1d:de:0f:88:5d:7e:6d:e7:c4:aa:2e:ac:f2:9c:1e:
03:be:67:c5:19:6d:2f:dc:12:d2:0f:2b:cb:b9:1b:
79:1a:16:c5:a9:9a:3e:91:72:25:1e:ad:fa:eb:33:
c6:62:0f:ac:07:da:5a:98:7a:e6:f4:db:00:7f:c7:
33:bc:7a:3e:63:b1:3a:01:07:26:6f:f4:71:24:22:
87:ea:ba:70:66:71:08:ea:0b:ad:b9:86:d9:db:e6:
9d:30:11:41:7b:1a:bf:f9:a6:dc:e1:1d:8e:01:22:
26:da:a0:2a:eb:1a:bd:5b:22:8e:e5:d1:3d:90:fe:
f6:8b:be:4a:12:78:a0:b7:59:93:b6:b6:a1:61:66:
86:22:3d:05:a5:d5:e3:ec:bd:aa:6a:b6:b8:f4:43:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1C:AD:7D:66:B3:B6:9B:9A:7F:BD:CA:BB:D8:2F:CF:69:38:52:BF
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b4:8a:a5:a5:f9:b8:c6:6d:a9:1c:42:9c:b6:e5:5a:67:92:
f4:b1:c7:43:51:f3:10:f8:c0:35:a4:6c:4f:7f:f0:f1:ed:af:
c8:a5:a5:05:16:3e:74:17:9a:4c:c1:5f:71:d4:52:2f:38:13:
31:fe:4b:55:b7:2b:4f:d0:4d:26:84:e3:73:80:86:9d:a0:ad:
06:e4:05:32:8f:b1:d8:eb:f0:4d:69:22:e2:70:c2:f7:c9:1d:
1e:5b:62:df:10:f2:73:c0:a9:59:89:01:aa:67:68:1d:95:9d:
69:7c:40:f1:e4:17:06:63:61:6c:57:cb:52:f9:7a:d7:f3:bc:
b7:04:39:04:ae:28:7b:69:83:a6:dd:dd:79:fc:98:41:bd:ae:
22:4c:c3:83:ae:5c:a1:43:66:80:c6:51:22:e0:6c:54:3f:8a:
a8:9d:12:7b:d0:4d:d6:da:e4:b5:17:d6:fd:54:f4:c7:b1:38:
9e:03:5a:94:81:df:d3:45:11:13:e5:b1:d1:c2:09:27:b9:5a:
f1:25:2d:9b:cc:6a:ed:1c:c7:a0:85:82:a6:86:1b:8e:17:bf:
2a:a7:3d:2b:69:a2:3f:e9:01:b2:43:19:96:df:06:d8:f0:61:
70:d6:2e:15:66:63:13:01:72:69:5e:c0:a6:8d:a8:ea:63:b6:
b8:be:10:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swRi84v0x7uiMNRONH/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjUwNjI4MTgwMDUxWhcNMjUwNjI5MTgwMDUxWjAzMTEwLwYDVQQD
Eyg4MjFjYWQ3ZDY2YjNiNjliOWE3ZmJkY2FiYmQ4MmZjZjY5Mzg1MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/ETfXsXpPwkVRT0uKQvtWo6jhAT
d46lbg9q2+iWHtFqK8cdpVjzWVU95sqfKb83Kw9Zh3UTElL6rHK2lo1WffFxFuAo
kueUGdyu5IJg3IALY4sUnzBxyOZhbm9vpDQw3NTsSbo4DOMd3g+IXX5t58SqLqzy
nB4DvmfFGW0v3BLSDyvLuRt5GhbFqZo+kXIlHq366zPGYg+sB9pamHrm9NsAf8cz
vHo+Y7E6AQcmb/RxJCKH6rpwZnEI6gutuYbZ2+adMBFBexq/+abc4R2OASIm2qAq
6xq9WyKO5dE9kP72i75KEnigt1mTtrahYWaGIj0FpdXj7L2qara49EMdOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIcrX1ms7abmn+9yrvYL89pOFK/MB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILSKpaX5
uMZtqRxCnLblWmeS9LHHQ1HzEPjANaRsT3/w8e2vyKWlBRY+dBeaTMFfcdRSLzgT
Mf5LVbcrT9BNJoTjc4CGnaCtBuQFMo+x2OvwTWki4nDC98kdHlti3xDyc8CpWYkB
qmdoHZWdaXxA8eQXBmNhbFfLUvl61/O8twQ5BK4oe2mDpt3defyYQb2uIkzDg65c
oUNmgMZRIuBsVD+KqJ0Se9BN1trktRfW/VT0x7E4ngNalIHf00URE+Wx0cIJJ7la
8SUtm8xq7RzHoIWCpoYbjhe/Kqc9K2miP+kBskMZlt8G2PBhcNYuFWZjEwFyaV7A
po2o6mO2uL4QlA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:30 2025 by rpki-client