Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
File: GDDmA-nKjAXUwbxisLdue9nRiQk.mft (raw, json)
Hash identifier: 7vqYEtsHN3fEP5KOMtE3ISNnSZngImoAsbiTSiRpG7Y=
Subject key identifier: 4E:6A:21:DE:6E:5A:FC:F5:32:A0:C0:FC:D4:93:24:EA:CC:71:6C:5D
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 0196C20251CE4F3AE9773CBE630EADC6AE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 01:00:53 +0000
Manifest this update: Mon 12 May 2025 01:00:53 +0000
Manifest next update: Tue 13 May 2025 01:00:53 +0000
Files and hashes: 1: GDDmA-nKjAXUwbxisLdue9nRiQk.crl (hash: 4jB6YtTt/Q1mKO7/yUe7t0t3A213ugRd3SCtfpa3uD8=)
2: o4yUZzbKz_wfUkXyIRtz_sPdHfw.roa (hash: BiVeXsHTenn/poTYlXrG4Bvxv5uxzXwbjeteQc7yW9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:51:ce:4f:3a:e9:77:3c:be:63:0e:ad:c6:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: May 12 01:00:53 2025 GMT
Not After : May 13 01:00:53 2025 GMT
Subject: CN=4e6a21de6e5afcf532a0c0fcd49324eacc716c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:bb:f2:3c:c7:94:5a:9e:ab:74:7e:d7:9c:
e0:1c:8f:b6:4d:b2:a5:c0:c5:24:31:50:ff:07:f1:
a6:79:90:c7:ac:0c:a1:de:c2:4b:ff:6c:88:4d:5a:
9b:85:d0:c1:fe:56:fb:77:4d:1d:53:c5:6b:f8:23:
23:0d:11:5e:78:3f:3e:3c:98:ec:fa:b1:cf:8e:27:
63:04:70:72:b3:ce:cf:ab:3e:79:55:21:fb:f8:b3:
60:29:4e:5f:7c:46:de:69:1a:86:f7:fe:a7:4f:e2:
ae:87:40:e4:44:bc:4b:38:91:3d:5a:ab:69:40:17:
ea:47:4c:51:2f:89:80:82:23:18:00:b6:8b:a1:ec:
df:4b:78:b0:ee:91:62:68:9b:f2:fa:9e:2c:84:d9:
64:54:59:c4:27:f5:b2:44:d8:e2:d7:e3:d4:fd:c6:
36:50:cb:08:0f:8c:30:e6:cb:c3:e9:29:b7:d0:17:
fd:49:31:04:9d:b3:4b:5b:71:80:28:97:44:60:f8:
2a:9f:f1:0b:e1:92:28:ad:dc:ad:9c:94:3e:9c:d7:
72:0c:36:8d:7b:51:73:b5:7c:18:63:12:45:38:e7:
9a:8c:52:31:08:cd:a2:5f:5a:66:16:05:cb:4c:ea:
79:69:ea:f6:18:4d:c8:91:50:37:18:df:6f:3a:b0:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:21:DE:6E:5A:FC:F5:32:A0:C0:FC:D4:93:24:EA:CC:71:6C:5D
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ba:b0:29:31:7b:4d:99:51:c8:33:8c:8a:e9:1e:f6:de:02:
f8:a8:fc:18:56:d5:33:ec:0e:4f:1b:50:51:e4:b5:0a:3c:8b:
7f:05:f9:60:02:3e:ef:ba:1e:4a:cd:a2:3b:6d:6e:9b:88:37:
d9:3a:82:f7:56:2b:af:2a:1c:9c:94:8d:cf:0e:fd:a6:36:b9:
f4:d7:6a:46:e5:97:8f:d8:88:6b:44:5a:a3:26:82:2e:a3:72:
7b:c4:43:04:9b:95:05:30:ed:c8:6f:e3:4a:51:c6:a4:fc:88:
19:7d:3f:3f:35:0f:3e:94:41:86:e1:48:28:0e:b0:75:46:d1:
cc:22:4b:f5:8f:24:c7:62:e6:7d:26:92:a3:57:07:a0:94:34:
14:e2:c6:e9:86:a2:4f:8b:91:a3:00:74:c3:f8:dc:d2:48:1f:
70:b0:e9:dd:ba:9a:ef:54:b7:72:64:14:c3:98:64:04:f5:6d:
d4:77:69:c9:e3:04:7c:42:d8:42:de:2a:1f:46:15:81:66:15:
c3:d4:19:5e:a4:90:8c:7d:ea:85:6f:0f:9f:af:bc:73:12:3e:
97:b7:5e:f5:3a:1b:d5:3b:96:20:2b:06:a1:dc:a2:2f:72:42:
c5:6a:87:06:c9:73:db:71:f0:5c:1a:f8:7d:c6:b0:63:21:3e:
38:38:d2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAlHOTzrpdzy+Yw6txq4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MzBlNjAzZTljYThjMDVkNGMxYmM2MmIwYjc2ZTdiZDlk
MTg5MDkwHhcNMjUwNTEyMDEwMDUzWhcNMjUwNTEzMDEwMDUzWjAzMTEwLwYDVQQD
Eyg0ZTZhMjFkZTZlNWFmY2Y1MzJhMGMwZmNkNDkzMjRlYWNjNzE2YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/K78jzHlFqeq3R+15zgHI+2TbKl
wMUkMVD/B/GmeZDHrAyh3sJL/2yITVqbhdDB/lb7d00dU8Vr+CMjDRFeeD8+PJjs
+rHPjidjBHBys87Pqz55VSH7+LNgKU5ffEbeaRqG9/6nT+Kuh0DkRLxLOJE9Wqtp
QBfqR0xRL4mAgiMYALaLoezfS3iw7pFiaJvy+p4shNlkVFnEJ/WyRNji1+PU/cY2
UMsID4ww5svD6Sm30Bf9STEEnbNLW3GAKJdEYPgqn/EL4ZIordytnJQ+nNdyDDaN
e1FztXwYYxJFOOeajFIxCM2iX1pmFgXLTOp5aer2GE3IkVA3GN9vOrA5WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5qId5uWvz1MqDA/NSTJOrMcWxdMB8GA1UdIwQY
MBaAFBgw5gPpyowF1MG8YrC3bnvZ0YkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yMTkxZDctZmRhMC00YjA3LThhOGYt
MTc4OWU2NGQzMjEwLzEvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8yMTkxZDctZmRhMC00YjA3LThhOGYtMTc4OWU2NGQzMjEw
LzEvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7qwKTF7
TZlRyDOMiuke9t4C+Kj8GFbVM+wOTxtQUeS1CjyLfwX5YAI+77oeSs2iO21um4g3
2TqC91YrryocnJSNzw79pja59NdqRuWXj9iIa0RaoyaCLqNye8RDBJuVBTDtyG/j
SlHGpPyIGX0/PzUPPpRBhuFIKA6wdUbRzCJL9Y8kx2LmfSaSo1cHoJQ0FOLG6Yai
T4uRowB0w/jc0kgfcLDp3bqa71S3cmQUw5hkBPVt1HdpyeMEfELYQt4qH0YVgWYV
w9QZXqSQjH3qhW8Pn6+8cxI+l7de9Tob1TuWICsGodyiL3JCxWqHBslz23HwXBr4
fcawYyE+ODjS1A==
-----END CERTIFICATE-----
Generated at Mon May 12 11:12:20 2025 by rpki-client