Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: Vc68r8uImTIC5TxeYq/GNchjDp/7TLZGEZ7pVFgy4P0=
Subject key identifier: BF:75:0B:72:14:B6:36:8A:AE:E7:41:C9:EA:5B:FE:F6:84:FE:DF:B9
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 0196C0814CB6BE76D9A5B0C26C56A65512EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0CEB
Signing time: Sun 11 May 2025 18:00:21 +0000
Manifest this update: Sun 11 May 2025 18:00:21 +0000
Manifest next update: Mon 12 May 2025 18:00:21 +0000
Files and hashes: 1: CSSEySfg-kMM1glbJN0lrihqMrE.roa (hash: i80/t4BIajLc8cgICSb9zNCBrmIiB9z2e81bg2ShuPY=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: dcl2ICExgvRHxK9v3gkJQ5dMZ0I00M5coYBi/Ihk0s8=)
3: Q-Q316aVXjaSDF_zXdBAZDqfQi8.roa (hash: pbIGWJtvDyC8Gs/UzFer1NbNeCFqgi6grLGP2phHoj4=)
4: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:4c:b6:be:76:d9:a5:b0:c2:6c:56:a6:55:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: May 11 18:00:21 2025 GMT
Not After : May 12 18:00:21 2025 GMT
Subject: CN=bf750b7214b6368aaee741c9ea5bfef684fedfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:f6:da:e3:3f:9a:e2:e6:a4:80:1b:9e:e8:
e0:90:d2:02:8c:18:2f:d8:d4:9a:36:7f:3b:8e:9d:
23:67:9d:64:23:38:13:fe:59:49:da:9d:3b:97:3a:
65:5a:68:fe:23:4c:e9:da:a8:7e:e3:76:45:30:fe:
d5:7d:b6:3c:26:e6:86:fc:a3:b4:50:1f:4d:8c:88:
aa:6d:b2:99:42:e3:b4:41:ba:e1:0e:26:42:be:73:
1d:71:0a:9e:97:59:19:54:d2:8a:23:81:3e:e3:d3:
d5:d4:0e:90:f0:37:2e:dc:e9:76:e7:c7:ce:f6:27:
5d:45:e2:6f:92:0d:de:cb:df:1c:66:1f:2c:fd:ed:
78:62:30:fa:73:36:36:10:db:e1:35:10:4c:a5:4b:
f7:4e:10:aa:0d:05:bc:15:c6:76:8c:dd:58:c0:c1:
ad:9d:34:c3:b6:0c:05:a2:e8:32:0a:9d:42:09:b3:
85:2b:62:5f:96:da:ee:4a:31:01:7d:eb:cf:19:b8:
e6:fb:31:59:74:f2:2f:81:ae:12:c7:75:53:76:1f:
f5:94:1e:96:3d:6c:03:90:2c:cf:9d:bd:41:84:77:
dc:a0:56:ff:2d:96:23:48:f3:10:c7:2d:39:03:a8:
0f:89:d1:b4:22:98:c7:40:cf:19:4d:94:78:7d:e0:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:0B:72:14:B6:36:8A:AE:E7:41:C9:EA:5B:FE:F6:84:FE:DF:B9
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:91:9b:ed:c6:f3:23:eb:87:91:45:f5:13:41:7a:98:5a:11:
4d:76:d2:0c:b2:ae:89:f9:9d:c3:a2:fc:22:b2:0a:c3:67:75:
2e:09:80:86:9a:e6:ee:46:2e:09:63:25:f1:fc:21:d1:d2:21:
07:6b:48:9a:29:56:45:51:c6:16:7d:c7:e8:ea:1a:d7:b0:35:
d2:2a:14:c4:fc:b4:6d:4b:ab:5d:6f:a4:fd:9a:2d:06:34:55:
81:ee:ad:d9:b5:7e:bc:3d:d3:96:2d:a0:1c:9d:d9:64:ca:a5:
c4:d3:19:8c:f3:c2:22:e4:ea:97:a3:e3:39:e6:b6:ce:6e:40:
a6:6b:ca:c4:6a:8c:75:51:82:a0:28:5d:06:f2:ac:22:2a:4d:
a8:a6:22:f5:82:ad:0a:c5:a8:66:ce:52:b5:aa:4b:a5:0d:1e:
dd:00:2f:8c:28:0f:17:fa:c1:78:b3:42:49:27:cd:da:de:66:
a2:17:88:72:f2:e1:fb:f9:a6:43:e1:6b:15:cb:d3:36:e0:e7:
b3:be:ad:cf:7d:e7:db:80:15:a7:cd:d3:b5:25:90:d0:30:8c:
bd:63:d0:cf:75:65:57:35:d4:fe:eb:c3:fa:dc:8a:12:a2:0c:
5c:e0:41:ac:0f:a8:a4:e3:c7:cb:e8:ce:7c:5b:8e:a6:c9:1b:
ca:a3:1f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgUy2vnbZpbDCbFamVRLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx
M2IyNWQwHhcNMjUwNTExMTgwMDIxWhcNMjUwNTEyMTgwMDIxWjAzMTEwLwYDVQQD
EyhiZjc1MGI3MjE0YjYzNjhhYWVlNzQxYzllYTViZmVmNjg0ZmVkZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIf22uM/muLmpIAbnujgkNICjBgv
2NSaNn87jp0jZ51kIzgT/llJ2p07lzplWmj+I0zp2qh+43ZFMP7VfbY8JuaG/KO0
UB9NjIiqbbKZQuO0QbrhDiZCvnMdcQqel1kZVNKKI4E+49PV1A6Q8Dcu3Ol258fO
9iddReJvkg3ey98cZh8s/e14YjD6czY2ENvhNRBMpUv3ThCqDQW8FcZ2jN1YwMGt
nTTDtgwFougyCp1CCbOFK2JfltruSjEBfevPGbjm+zFZdPIvga4Sx3VTdh/1lB6W
PWwDkCzPnb1BhHfcoFb/LZYjSPMQxy05A6gPidG0IpjHQM8ZTZR4feC8AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL91C3IUtjaKrudByepb/vaE/t+5MB8GA1UdIwQY
MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt
MzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4
LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpGb7cbz
I+uHkUX1E0F6mFoRTXbSDLKuifmdw6L8IrIKw2d1LgmAhprm7kYuCWMl8fwh0dIh
B2tImilWRVHGFn3H6Ooa17A10ioUxPy0bUurXW+k/ZotBjRVge6t2bV+vD3Tli2g
HJ3ZZMqlxNMZjPPCIuTql6PjOea2zm5ApmvKxGqMdVGCoChdBvKsIipNqKYi9YKt
CsWoZs5StapLpQ0e3QAvjCgPF/rBeLNCSSfN2t5moheIcvLh+/mmQ+FrFcvTNuDn
s76tz33n24AVp83TtSWQ0DCMvWPQz3VlVzXU/uvD+tyKEqIMXOBBrA+opOPHy+jO
fFuOpskbyqMfjQ==
-----END CERTIFICATE-----
Generated at Sun May 11 21:18:24 2025 by rpki-client