Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: r+jrdoGXjQdRM6k4aQ/YJjRxFiGm5ZRAO6ziG2oQABI=
Subject key identifier: 84:73:F9:7F:10:B4:5A:19:57:FA:24:EF:3F:E9:AE:85:0A:6B:78:F2
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 0196ACFAE92BFE08325E67B5AF98C5932A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 152F
Signing time: Wed 07 May 2025 23:00:46 +0000
Manifest this update: Wed 07 May 2025 23:00:46 +0000
Manifest next update: Thu 08 May 2025 23:00:46 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: N2V5V0tDN3ivi1KB1Ubviu4ul3qVla+D/adtpsKqFTQ=)
2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:e9:2b:fe:08:32:5e:67:b5:af:98:c5:93:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: May 7 23:00:46 2025 GMT
Not After : May 8 23:00:46 2025 GMT
Subject: CN=8473f97f10b45a1957fa24ef3fe9ae850a6b78f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:02:7b:92:0a:8a:30:e2:a0:8f:2a:07:e9:
41:b1:37:29:49:63:9a:7a:f3:59:d2:5f:4b:56:f7:
99:f4:9d:e0:ee:d4:20:cf:0f:82:e8:ce:43:35:1b:
25:30:9e:25:31:4d:20:9e:8d:5b:08:25:07:ce:b8:
34:80:53:25:ac:ca:6b:5f:0a:b2:63:bd:aa:e8:0c:
13:54:9e:f9:09:bc:c0:95:7c:f1:9b:8b:9f:d7:a0:
62:39:89:e3:8e:b4:ff:00:66:31:dd:3c:c1:b9:75:
1e:19:90:86:7a:71:e2:10:e7:02:63:62:dd:e9:58:
a3:6f:ff:67:be:91:cd:60:48:b6:4b:41:0f:5a:3c:
99:3b:d0:a0:07:9c:a2:fc:8b:e3:e6:c6:be:82:67:
86:3e:21:95:3b:84:18:26:dc:9e:bd:a3:b2:d1:19:
3d:7d:6e:9c:64:bb:06:37:19:96:36:4a:f1:31:ab:
f0:3b:4b:40:c6:db:7b:21:38:85:b0:25:57:cd:e4:
5e:9b:40:0d:9e:5c:8a:b2:4f:77:58:4d:db:7d:8d:
ef:20:1e:20:30:14:9e:08:0f:54:ef:dd:f4:25:9c:
eb:18:da:94:0f:cf:47:ce:37:5d:d9:67:15:b6:58:
53:94:7e:5d:8d:fe:96:a3:1b:22:3c:cc:7e:32:1d:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:F9:7F:10:B4:5A:19:57:FA:24:EF:3F:E9:AE:85:0A:6B:78:F2
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ce:bf:28:c2:6e:ec:00:de:89:5b:c1:e6:58:12:42:52:e2:
87:05:99:cb:74:7e:07:81:3f:b7:70:55:6f:03:26:59:8f:cf:
b3:d5:6b:e2:3a:35:4b:a4:f5:59:59:06:e4:dc:5f:c1:bb:b9:
78:85:78:2e:75:ab:f8:5e:4f:f8:e9:3f:9a:bc:c2:01:2e:f4:
c3:83:55:f7:38:3e:4b:b1:3f:b4:18:6c:25:44:62:06:43:f9:
0b:e2:d5:70:08:1a:47:2f:9b:6e:bb:9e:be:6f:1f:b1:88:cb:
e4:4b:f0:b6:27:45:a8:e2:f4:b6:54:22:da:8b:e7:c7:58:9f:
a2:75:f6:bf:f0:12:4e:55:8c:91:58:f8:ff:1c:e2:d5:d8:d0:
94:70:48:42:ec:d0:0b:cf:3b:4f:81:b8:39:aa:a3:df:03:42:
4a:e3:d9:ea:eb:1d:8c:ab:1d:44:4f:1e:96:dc:a6:c3:c4:d1:
71:49:0f:e6:cb:6d:75:6f:78:d5:a7:75:b2:d2:be:0e:68:5b:
2c:70:9a:4c:5c:fd:10:a0:58:20:d2:49:18:87:5c:03:a1:fd:
bc:0e:84:1b:15:08:09:e4:60:30:63:ad:15:d3:ac:76:1c:41:
f4:3a:4c:fa:a6:82:6c:86:cd:54:70:e1:06:e3:da:e4:b8:b1:
0d:b3:2d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZas+ukr/ggyXme1r5jFkyoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz
YWNhM2MwHhcNMjUwNTA3MjMwMDQ2WhcNMjUwNTA4MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg4NDczZjk3ZjEwYjQ1YTE5NTdmYTI0ZWYzZmU5YWU4NTBhNmI3OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8oCe5IKijDioI8qB+lBsTcpSWOa
evNZ0l9LVveZ9J3g7tQgzw+C6M5DNRslMJ4lMU0gno1bCCUHzrg0gFMlrMprXwqy
Y72q6AwTVJ75CbzAlXzxm4uf16BiOYnjjrT/AGYx3TzBuXUeGZCGenHiEOcCY2Ld
6Vijb/9nvpHNYEi2S0EPWjyZO9CgB5yi/Ivj5sa+gmeGPiGVO4QYJtyevaOy0Rk9
fW6cZLsGNxmWNkrxMavwO0tAxtt7ITiFsCVXzeRem0ANnlyKsk93WE3bfY3vIB4g
MBSeCA9U7930JZzrGNqUD89Hzjdd2WcVtlhTlH5djf6WoxsiPMx+Mh0UdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRz+X8QtFoZV/ok7z/proUKa3jyMB8GA1UdIwQY
MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct
ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy
LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk86/KMJu
7ADeiVvB5lgSQlLihwWZy3R+B4E/t3BVbwMmWY/Ps9Vr4jo1S6T1WVkG5Nxfwbu5
eIV4LnWr+F5P+Ok/mrzCAS70w4NV9zg+S7E/tBhsJURiBkP5C+LVcAgaRy+bbrue
vm8fsYjL5EvwtidFqOL0tlQi2ovnx1ifonX2v/ASTlWMkVj4/xzi1djQlHBIQuzQ
C887T4G4Oaqj3wNCSuPZ6usdjKsdRE8eltymw8TRcUkP5sttdW941ad1stK+Dmhb
LHCaTFz9EKBYINJJGIdcA6H9vA6EGxUICeRgMGOtFdOsdhxB9DpM+qaCbIbNVHDh
BuPa5LixDbMtFQ==
-----END CERTIFICATE-----
Generated at Thu May 8 08:11:22 2025 by rpki-client