Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: 71ia9ZBZGQ2/CZ1uOki9VazCla4BSoC8r54hsOJxTzM=
Subject key identifier: D3:AB:DA:5F:6B:DB:DF:AA:17:EC:A3:1C:25:24:40:E8:99:C6:E4:7A
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 0196BE933E818CA1CB9A674F69EA34F18F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 09:00:42 +0000
Manifest this update: Sun 11 May 2025 09:00:42 +0000
Manifest next update: Mon 12 May 2025 09:00:42 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: qhH/ENSvQHakzaroUtHKfONj9mIWBCzbblELLJa/+WI=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:3e:81:8c:a1:cb:9a:67:4f:69:ea:34:f1:8f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: May 11 09:00:42 2025 GMT
Not After : May 12 09:00:42 2025 GMT
Subject: CN=d3abda5f6bdbdfaa17eca31c252440e899c6e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:48:a1:13:d4:67:46:92:78:fb:ff:f5:bf:
a5:bf:ee:ca:d0:16:67:d7:48:49:81:db:ed:22:6a:
43:b7:98:3d:5b:38:fe:7f:85:64:66:47:90:93:a9:
78:cf:64:aa:a9:ff:69:6d:41:81:64:38:02:45:69:
a1:24:f4:37:7c:1f:1c:36:9f:b5:69:5f:7d:df:6a:
5e:95:8e:50:bb:ee:d5:2d:3a:29:87:86:5b:41:c9:
e6:a9:cb:17:de:be:c0:84:70:37:d3:1b:e3:09:6b:
ee:47:6e:9c:9d:52:b1:25:af:64:69:39:f4:35:49:
b8:17:97:0b:3b:04:bb:dd:0c:9e:8c:ac:ee:0b:d9:
a5:3d:54:a7:ee:f6:4f:12:9e:72:59:06:ab:7a:1a:
2d:5e:0f:2b:12:d4:96:b1:d2:93:50:0b:32:dc:63:
83:04:3f:ff:9c:7b:38:5d:df:9b:ad:43:c3:0f:5b:
fb:5c:6a:0d:bc:71:93:33:8e:78:f7:ad:29:b4:3d:
b5:ea:97:01:00:1a:eb:c3:98:fc:10:86:48:bb:b6:
16:e1:eb:14:93:bf:a0:b2:85:e9:fe:0a:29:b1:cf:
60:0f:33:b9:2e:d6:d9:45:a2:db:29:8d:12:d7:f6:
05:3a:3e:bb:e8:07:4d:06:f2:42:dd:9f:df:de:a7:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:DA:5F:6B:DB:DF:AA:17:EC:A3:1C:25:24:40:E8:99:C6:E4:7A
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fd:fe:18:39:ab:e7:73:eb:bc:4e:18:c0:4a:ca:7f:d0:e2:
5d:bf:0d:ae:78:e7:b0:a3:ea:61:01:7c:1f:40:3f:3f:2d:a0:
ff:4b:89:2e:2a:2b:85:48:dd:b7:51:09:35:fb:f4:55:90:89:
d4:71:4a:77:3b:07:2a:a9:43:7a:cc:c8:65:87:17:a6:60:b9:
e5:6a:7b:fa:1c:21:f0:11:08:dd:5f:be:f4:a1:86:9f:62:d8:
73:6f:7e:fb:6a:0a:a2:81:43:3b:dc:5d:65:85:7e:f4:4b:57:
29:1e:db:79:f8:85:17:ac:bf:f7:b1:d0:70:10:c1:27:72:73:
07:c9:64:5e:7d:50:20:1f:5f:14:b7:6e:97:3e:57:60:1c:40:
4d:75:3a:57:57:d9:fa:e8:6a:1e:82:ca:2a:f0:44:8a:11:5a:
fe:b1:73:c9:e6:34:37:a8:da:f6:c4:67:40:4a:29:0f:30:9c:
8f:7a:e7:b9:db:af:15:79:d9:4a:13:53:59:48:e2:aa:6e:c8:
0c:75:4f:f1:f8:12:db:fc:53:88:55:43:1e:c3:a3:c1:d7:15:
1c:06:1c:54:79:9a:92:46:ae:c3:87:a8:e1:9b:1e:5c:b4:1e:
40:37:77:67:d7:b6:fc:b8:3a:66:f6:12:9d:6e:f1:67:99:2b:
ea:15:ed:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kz6BjKHLmmdPaeo08Y8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTFhNjYzNmY4Y2UyY2VmNTgzNmM0NDM1NjVjNWZlM2Fl
MmYyMDgwHhcNMjUwNTExMDkwMDQyWhcNMjUwNTEyMDkwMDQyWjAzMTEwLwYDVQQD
EyhkM2FiZGE1ZjZiZGJkZmFhMTdlY2EzMWMyNTI0NDBlODk5YzZlNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrtIoRPUZ0aSePv/9b+lv+7K0BZn
10hJgdvtImpDt5g9Wzj+f4VkZkeQk6l4z2Sqqf9pbUGBZDgCRWmhJPQ3fB8cNp+1
aV9932pelY5Qu+7VLToph4ZbQcnmqcsX3r7AhHA30xvjCWvuR26cnVKxJa9kaTn0
NUm4F5cLOwS73QyejKzuC9mlPVSn7vZPEp5yWQarehotXg8rEtSWsdKTUAsy3GOD
BD//nHs4Xd+brUPDD1v7XGoNvHGTM454960ptD216pcBABrrw5j8EIZIu7YW4esU
k7+gsoXp/gopsc9gDzO5LtbZRaLbKY0S1/YFOj676AdNBvJC3Z/f3qfa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOr2l9r29+qF+yjHCUkQOiZxuR6MB8GA1UdIwQY
MBaAFBoRpmNvjOLO9YNsRDVlxf464vIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYt
MjkxZTRiZDcwMzA5LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYtMjkxZTRiZDcwMzA5
LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef3+GDmr
53PrvE4YwErKf9DiXb8NrnjnsKPqYQF8H0A/Py2g/0uJLiorhUjdt1EJNfv0VZCJ
1HFKdzsHKqlDeszIZYcXpmC55Wp7+hwh8BEI3V++9KGGn2LYc29++2oKooFDO9xd
ZYV+9EtXKR7befiFF6y/97HQcBDBJ3JzB8lkXn1QIB9fFLdulz5XYBxATXU6V1fZ
+uhqHoLKKvBEihFa/rFzyeY0N6ja9sRnQEopDzCcj3rnuduvFXnZShNTWUjiqm7I
DHVP8fgS2/xTiFVDHsOjwdcVHAYcVHmakkauw4eo4ZseXLQeQDd3Z9e2/Lg6ZvYS
nW7xZ5kr6hXtbw==
-----END CERTIFICATE-----
Generated at Sun May 11 12:46:45 2025 by rpki-client