Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: vCHvIqnT54vP4kbW9FHFzKAjqgq06H1cMTpmhamCThU=
Subject key identifier: DA:FC:F1:E1:B5:D3:A6:57:F5:F8:7F:5A:30:46:AA:C1:B0:DD:1D:B2
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 0196C53A7132E8384B663B2BD8A15A12A28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 16:01:03 +0000
Manifest this update: Mon 12 May 2025 16:01:03 +0000
Manifest next update: Tue 13 May 2025 16:01:03 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: mKXQdDh/Q70sKKaynF3q1bmLMYErfsXruji3ibggxe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:71:32:e8:38:4b:66:3b:2b:d8:a1:5a:12:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: May 12 16:01:03 2025 GMT
Not After : May 13 16:01:03 2025 GMT
Subject: CN=dafcf1e1b5d3a657f5f87f5a3046aac1b0dd1db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:49:41:b6:e7:bc:d6:67:bb:09:d2:a5:cf:
a2:6e:38:bd:b1:f7:99:73:f5:c8:d1:85:8f:9e:53:
a9:d8:77:b4:65:7d:cd:c7:72:cb:14:a1:70:5a:d3:
1f:70:1f:58:f6:5d:e7:9d:bb:60:63:fe:a1:29:fa:
5f:89:34:61:65:56:20:8a:e4:05:4c:9d:5c:a7:ac:
59:32:48:44:b1:75:24:15:f7:9d:f9:f5:a7:53:59:
a7:b9:e1:32:c8:83:7a:e4:03:b5:c5:1c:48:8b:cb:
a8:24:45:24:42:56:d8:12:8f:4c:ac:e6:ae:4c:0b:
e7:76:95:9b:b3:2d:9c:b4:ec:a6:b4:8b:8f:1a:62:
f5:41:05:b7:dd:fe:b9:5b:b0:eb:df:df:3a:56:2d:
6a:0a:8e:bf:8e:30:a3:19:db:0e:92:3c:43:6a:e1:
f6:6d:9c:8e:83:46:5a:bb:2e:27:e5:be:8e:4f:c0:
dc:59:cc:6f:29:fd:8b:67:89:e3:3f:6a:66:19:30:
59:31:61:5a:2a:a0:ed:c9:30:39:11:07:6d:35:6b:
05:7b:6f:19:bb:e5:19:86:7d:ae:e2:f8:3c:f7:a8:
53:43:02:14:4d:80:89:bd:46:94:09:0c:c6:d3:f0:
bc:5d:fd:97:f3:3e:7b:1e:59:b0:bc:16:c8:9f:d0:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:F1:E1:B5:D3:A6:57:F5:F8:7F:5A:30:46:AA:C1:B0:DD:1D:B2
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:68:36:c9:e0:d1:08:8d:94:b0:94:13:fa:6a:6d:f8:b0:
11:06:39:e5:0a:7c:1b:1a:e2:2c:8f:e7:4b:d1:a6:3b:19:4d:
a0:06:85:3f:0a:bb:58:28:9a:c1:28:d3:b6:91:c8:bf:a5:78:
c2:4f:ad:f9:80:fe:50:75:60:f9:33:68:76:5c:3c:05:01:51:
38:75:a4:4c:9d:97:20:d2:b8:9e:81:12:2e:54:ee:48:76:7c:
84:91:35:cf:b9:c9:2e:18:0d:d2:ec:7c:65:09:b3:a7:25:eb:
3d:89:08:a3:2d:17:97:aa:f0:15:96:80:52:f2:54:d9:e0:35:
ba:4c:e1:c8:85:b9:64:db:ea:1e:e1:0c:a8:d8:f1:18:9a:a6:
8e:df:20:9f:56:80:1f:47:ed:e3:4b:bc:df:c8:ec:03:88:e1:
00:c1:e2:32:4f:05:e6:40:e9:6f:ac:b1:65:ee:5c:f2:7f:b3:
00:d8:70:94:36:21:b0:68:e8:49:86:9f:41:ef:ad:aa:06:2e:
75:79:6f:34:36:c7:2e:8e:2a:5f:32:97:79:50:16:2f:9e:cf:
2d:bc:e9:ff:45:15:c5:84:78:cf:6c:2f:25:e7:61:bd:b1:59:
00:08:4e:5c:e0:75:35:ae:74:c2:59:f1:bf:37:47:02:58:20:
81:c1:91:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOnEy6DhLZjsr2KFaEqKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGQzMDBlNmFjZDFmOTg5NWZjZTNiNWFiZTM4YTVmMDA1
ODRkNTUwHhcNMjUwNTEyMTYwMTAzWhcNMjUwNTEzMTYwMTAzWjAzMTEwLwYDVQQD
EyhkYWZjZjFlMWI1ZDNhNjU3ZjVmODdmNWEzMDQ2YWFjMWIwZGQxZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjglJQbbnvNZnuwnSpc+ibji9sfeZ
c/XI0YWPnlOp2He0ZX3Nx3LLFKFwWtMfcB9Y9l3nnbtgY/6hKfpfiTRhZVYgiuQF
TJ1cp6xZMkhEsXUkFfed+fWnU1mnueEyyIN65AO1xRxIi8uoJEUkQlbYEo9MrOau
TAvndpWbsy2ctOymtIuPGmL1QQW33f65W7Dr3986Vi1qCo6/jjCjGdsOkjxDauH2
bZyOg0Zauy4n5b6OT8DcWcxvKf2LZ4njP2pmGTBZMWFaKqDtyTA5EQdtNWsFe28Z
u+UZhn2u4vg896hTQwIUTYCJvUaUCQzG0/C8Xf2X8z57HlmwvBbIn9At4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr88eG106ZX9fh/WjBGqsGw3R2yMB8GA1UdIwQY
MBaAFBkNMA5qzR+Ylfzjtavjil8AWE1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2Yzct
ZmRjZDlmZDliYjAzLzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2YzctZmRjZDlmZDliYjAz
LzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFZoNsng
0QiNlLCUE/pqbfiwEQY55Qp8GxriLI/nS9GmOxlNoAaFPwq7WCiawSjTtpHIv6V4
wk+t+YD+UHVg+TNodlw8BQFROHWkTJ2XINK4noESLlTuSHZ8hJE1z7nJLhgN0ux8
ZQmzpyXrPYkIoy0Xl6rwFZaAUvJU2eA1ukzhyIW5ZNvqHuEMqNjxGJqmjt8gn1aA
H0ft40u838jsA4jhAMHiMk8F5kDpb6yxZe5c8n+zANhwlDYhsGjoSYafQe+tqgYu
dXlvNDbHLo4qXzKXeVAWL57PLbzp/0UVxYR4z2wvJedhvbFZAAhOXOB1Na50wlnx
vzdHAlgggcGR8Q==
-----END CERTIFICATE-----
Generated at Mon May 12 22:48:43 2025 by rpki-client