Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: sHCdcvWeLqTgje4UIqtLb5Uv/QjQRC9xPL4bEfpjd08=
Subject key identifier: 25:CF:C6:BE:26:C3:F3:63:35:42:64:58:8D:B0:70:06:D3:0C:12:FF
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0196B77E8240758A20A5E97A5E053E6B5EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 00:00:43 +0000
Manifest this update: Sat 10 May 2025 00:00:43 +0000
Manifest next update: Sun 11 May 2025 00:00:43 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: wkgSoOQ5YYlT+YYhzOwDp58/1UON6e5DqJkMy4FIBgg=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:82:40:75:8a:20:a5:e9:7a:5e:05:3e:6b:5e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: May 10 00:00:43 2025 GMT
Not After : May 11 00:00:43 2025 GMT
Subject: CN=25cfc6be26c3f363354264588db07006d30c12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:6e:f3:37:99:4a:50:46:94:a5:e9:c3:7f:
ab:0b:f6:86:e6:fd:7a:5f:19:57:e6:15:81:87:2c:
26:ff:9f:20:09:04:73:09:4a:bb:f0:64:d5:8d:e6:
81:85:37:6c:05:06:6a:e2:43:89:5b:3a:d3:2d:fb:
20:6a:58:9a:70:02:6d:1e:b6:b0:a7:54:00:97:94:
01:53:aa:61:d7:e5:99:4d:13:2f:af:c9:c4:72:68:
84:dd:35:e6:61:4c:a3:8c:b8:be:e7:9e:a5:04:32:
8c:47:52:72:18:d1:1d:eb:e9:99:97:88:09:d2:36:
f5:fa:dc:24:75:c3:19:51:be:df:d6:0c:75:a9:99:
cd:e6:29:d0:40:76:58:fd:64:72:13:76:8a:59:01:
b9:b3:48:88:c2:23:25:5d:ec:dd:70:ad:b5:9e:7e:
47:3c:67:c9:df:c4:ab:db:c4:d6:6e:cc:52:3f:e2:
c7:18:4f:1d:c2:bc:ed:00:9b:cf:24:4d:46:35:06:
fe:3c:de:e9:e3:35:a6:55:fd:08:a1:75:fa:9f:b8:
e3:f4:f6:42:38:b4:89:1c:fa:a3:c4:a2:2e:3a:c3:
75:c0:6e:9d:79:f5:e1:c5:25:9c:5c:9c:1a:aa:30:
18:7c:99:02:91:82:b7:8c:34:c2:87:90:72:e6:c8:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:C6:BE:26:C3:F3:63:35:42:64:58:8D:B0:70:06:D3:0C:12:FF
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:4c:dd:82:1c:f9:ec:1b:cc:eb:63:87:d4:23:8e:84:8a:
00:1b:71:cc:7f:a0:3e:c4:a6:7e:64:97:a4:00:94:8a:10:50:
52:18:85:e5:9a:ba:b2:c5:da:36:b5:ea:e1:90:22:54:c1:b5:
71:f6:2c:74:9d:31:6c:76:f5:e5:b6:d3:98:23:ed:d9:72:5a:
19:91:1b:45:06:42:20:2a:73:5e:bc:c9:c2:31:3d:21:25:6c:
48:32:ba:46:fd:97:dc:f6:a8:fa:8a:6f:02:f5:fc:42:2d:06:
e7:ee:c8:d0:5d:89:a4:e2:7a:fe:53:1b:3d:57:43:3c:3c:2d:
ca:c4:84:ba:2e:9a:23:6b:38:eb:26:81:f6:cd:87:01:e6:f1:
f9:2e:58:7b:18:87:d3:ae:9a:fb:d0:c5:51:2f:f9:93:88:ee:
a3:ee:a4:6b:14:02:f9:54:d6:2e:d9:03:23:77:aa:1f:d5:2c:
32:46:c6:b3:c6:38:64:2e:9c:1a:fc:ea:55:12:b9:51:46:c4:
bf:b8:24:97:d0:8f:b3:41:f1:39:23:bf:98:5d:a1:71:c1:f8:
00:5b:95:b9:57:08:97:97:08:6e:9a:b5:bb:1d:82:b3:a3:58:
df:1d:e3:c3:56:79:5e:ee:81:41:b7:9a:f3:f3:2a:d6:be:f4:
b1:89:63:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3foJAdYogpel6XgU+a164MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw
ODFhMjkwHhcNMjUwNTEwMDAwMDQzWhcNMjUwNTExMDAwMDQzWjAzMTEwLwYDVQQD
EygyNWNmYzZiZTI2YzNmMzYzMzU0MjY0NTg4ZGIwNzAwNmQzMGMxMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqBu8zeZSlBGlKXpw3+rC/aG5v16
XxlX5hWBhywm/58gCQRzCUq78GTVjeaBhTdsBQZq4kOJWzrTLfsgaliacAJtHraw
p1QAl5QBU6ph1+WZTRMvr8nEcmiE3TXmYUyjjLi+556lBDKMR1JyGNEd6+mZl4gJ
0jb1+twkdcMZUb7f1gx1qZnN5inQQHZY/WRyE3aKWQG5s0iIwiMlXezdcK21nn5H
PGfJ38Sr28TWbsxSP+LHGE8dwrztAJvPJE1GNQb+PN7p4zWmVf0IoXX6n7jj9PZC
OLSJHPqjxKIuOsN1wG6defXhxSWcXJwaqjAYfJkCkYK3jDTCh5By5siwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXPxr4mw/NjNUJkWI2wcAbTDBL/MB8GA1UdIwQY
MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt
NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj
LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMJM3YIc
+ewbzOtjh9QjjoSKABtxzH+gPsSmfmSXpACUihBQUhiF5Zq6ssXaNrXq4ZAiVMG1
cfYsdJ0xbHb15bbTmCPt2XJaGZEbRQZCICpzXrzJwjE9ISVsSDK6Rv2X3Pao+opv
AvX8Qi0G5+7I0F2JpOJ6/lMbPVdDPDwtysSEui6aI2s46yaB9s2HAebx+S5YexiH
066a+9DFUS/5k4juo+6kaxQC+VTWLtkDI3eqH9UsMkbGs8Y4ZC6cGvzqVRK5UUbE
v7gkl9CPs0HxOSO/mF2hccH4AFuVuVcIl5cIbpq1ux2Cs6NY3x3jw1Z5Xu6BQbea
8/Mq1r70sYljnQ==
-----END CERTIFICATE-----
Generated at Sat May 10 10:44:06 2025 by rpki-client