Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: +uhHe7crTl0w5LqmfP5g+GjSUSs1eoqdNiwHPvGNrr4=
Subject key identifier: E6:AC:3B:3B:4B:A1:6D:6A:6F:BE:18:8A:71:2A:74:61:99:A3:68:E2
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 0196C49549CEE14DA2080AB74F2A3EBEA6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0C08
Signing time: Mon 12 May 2025 13:00:40 +0000
Manifest this update: Mon 12 May 2025 13:00:40 +0000
Manifest next update: Tue 13 May 2025 13:00:40 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: FF7o1WyLjFZZdilIVGxfDW/k2Mr5ldHVD7WBAljZDfw=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:49:ce:e1:4d:a2:08:0a:b7:4f:2a:3e:be:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: May 12 13:00:40 2025 GMT
Not After : May 13 13:00:40 2025 GMT
Subject: CN=e6ac3b3b4ba16d6a6fbe188a712a746199a368e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:73:a4:4a:b1:80:06:35:6a:fa:8b:0f:01:
ca:32:6e:9b:b3:8f:18:7f:15:c5:7d:04:cb:01:2b:
42:0a:5e:5e:44:c8:00:97:81:45:88:8c:44:6c:c2:
9f:51:85:ca:cb:16:c8:a4:1c:55:42:10:6c:41:da:
82:01:91:65:2c:18:98:0e:3b:49:c2:14:a3:60:b2:
82:12:19:2e:03:7b:37:95:51:b4:b5:5b:57:12:be:
df:dd:34:e5:7d:58:db:87:1b:1c:38:33:ff:1c:3f:
d8:6c:31:69:85:9e:b5:6b:2e:98:db:17:c9:37:92:
53:59:af:ec:b0:fb:9e:f4:08:f5:59:fe:91:7f:95:
84:84:45:91:6c:e3:aa:fd:55:80:7c:bd:78:33:ea:
81:82:bf:ef:d0:b9:65:1a:73:7e:fd:a2:66:c9:68:
27:a0:f9:95:ad:f5:cd:1d:9e:18:83:27:f3:6b:b4:
93:86:4a:65:20:a5:c5:a5:56:e4:b4:c6:a6:d7:52:
45:b7:0d:eb:72:f8:84:d8:70:1b:5c:d6:fa:cc:44:
9c:0b:72:e1:db:2d:ef:76:76:ba:7b:23:10:19:57:
13:9b:58:37:c1:9c:d3:2e:fe:11:fc:16:38:05:89:
a1:e6:0e:53:8e:80:0e:06:75:68:f4:60:cf:d2:c2:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:3B:3B:4B:A1:6D:6A:6F:BE:18:8A:71:2A:74:61:99:A3:68:E2
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:38:cf:30:76:8e:05:14:24:c7:7f:8f:7e:57:9a:d0:f5:
fb:d7:59:90:a6:1c:eb:46:bc:6d:77:16:6d:53:0b:f9:12:61:
70:0c:af:77:64:e9:1c:e7:12:98:a1:72:ed:90:78:f7:78:9c:
8e:07:ea:ba:f2:2f:f2:b9:bc:ce:d8:61:db:6e:20:63:33:33:
bd:04:a1:1e:6c:a7:f3:17:51:63:8b:5f:64:79:26:5c:13:9a:
12:85:2e:bb:34:7c:50:a3:3a:d0:4c:72:5d:b7:59:37:2b:53:
fe:dc:b9:8d:db:33:c8:0c:1d:7e:3d:b4:80:2d:6e:71:b4:66:
ee:21:8e:e5:9f:0c:55:44:2d:ea:a8:33:c7:75:f6:b8:b5:fd:
b3:59:45:1f:48:b5:80:ff:b2:24:15:d8:da:f2:f3:1e:c6:23:
35:fd:d3:a7:f9:3a:8b:50:ec:5a:76:4f:68:ea:f5:a0:2d:25:
34:77:ee:39:c2:18:1a:f0:e8:8e:84:b2:a3:90:5c:2c:e0:30:
5c:89:29:88:39:24:ac:92:8b:03:f8:81:a4:f0:2e:87:8d:b6:
3a:a3:41:46:be:39:9a:fd:b5:c6:dc:60:5f:7c:48:ce:65:44:
cb:42:b6:6f:dd:16:ae:e2:0f:dd:2a:9a:69:0a:59:07:0d:fc:
29:48:60:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElUnO4U2iCAq3Tyo+vqbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZDk2MDA1OGE1NTNiM2Y1ZGY5ZmU3MjcyMTkwMzdjNDhh
YjUwZTEwHhcNMjUwNTEyMTMwMDQwWhcNMjUwNTEzMTMwMDQwWjAzMTEwLwYDVQQD
EyhlNmFjM2IzYjRiYTE2ZDZhNmZiZTE4OGE3MTJhNzQ2MTk5YTM2OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9VzpEqxgAY1avqLDwHKMm6bs48Y
fxXFfQTLAStCCl5eRMgAl4FFiIxEbMKfUYXKyxbIpBxVQhBsQdqCAZFlLBiYDjtJ
whSjYLKCEhkuA3s3lVG0tVtXEr7f3TTlfVjbhxscODP/HD/YbDFphZ61ay6Y2xfJ
N5JTWa/ssPue9Aj1Wf6Rf5WEhEWRbOOq/VWAfL14M+qBgr/v0LllGnN+/aJmyWgn
oPmVrfXNHZ4Ygyfza7SThkplIKXFpVbktMam11JFtw3rcviE2HAbXNb6zEScC3Lh
2y3vdna6eyMQGVcTm1g3wZzTLv4R/BY4BYmh5g5TjoAOBnVo9GDP0sJOlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOasOztLoW1qb74YinEqdGGZo2jiMB8GA1UdIwQY
MBaAFBnZYAWKVTs/Xfn+cnIZA3xIq1DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAt
NTdiOTFlODE1MzMwLzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAtNTdiOTFlODE1MzMw
LzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8I4zzB2
jgUUJMd/j35XmtD1+9dZkKYc60a8bXcWbVML+RJhcAyvd2TpHOcSmKFy7ZB493ic
jgfquvIv8rm8zthh224gYzMzvQShHmyn8xdRY4tfZHkmXBOaEoUuuzR8UKM60Exy
XbdZNytT/ty5jdszyAwdfj20gC1ucbRm7iGO5Z8MVUQt6qgzx3X2uLX9s1lFH0i1
gP+yJBXY2vLzHsYjNf3Tp/k6i1DsWnZPaOr1oC0lNHfuOcIYGvDojoSyo5BcLOAw
XIkpiDkkrJKLA/iBpPAuh422OqNBRr45mv21xtxgX3xIzmVEy0K2b90WruIP3Sqa
aQpZBw38KUhgSg==
-----END CERTIFICATE-----
Generated at Mon May 12 23:10:53 2025 by rpki-client