Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: 3PXHCAb7x7eT5UC5SKCDE+H4+r6/zTGQNQZMqMUkZTg=
Subject key identifier: AD:BD:20:28:E8:82:94:81:12:B5:08:15:31:4C:BA:45:5B:4A:90:24
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019685115F9C39EF2CF3FE140A1C0305FF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 132E
Signing time: Wed 30 Apr 2025 05:00:30 +0000
Manifest this update: Wed 30 Apr 2025 05:00:30 +0000
Manifest next update: Thu 01 May 2025 05:00:30 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: JnJUNXhxDnX8N54YBpYDBJF0ve68ocQTwB3vI3Bd6UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:5f:9c:39:ef:2c:f3:fe:14:0a:1c:03:05:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Apr 30 05:00:30 2025 GMT
Not After : May 1 05:00:30 2025 GMT
Subject: CN=adbd2028e882948112b50815314cba455b4a9024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:a1:ac:f2:da:a9:b2:0e:5f:65:e1:b5:53:
f6:39:87:e4:01:c1:7c:5e:41:5e:1f:7b:c9:e2:29:
5f:f5:f8:31:75:ae:bf:43:b1:d2:e3:9e:6d:c9:f0:
35:41:25:8d:8f:b5:35:6e:0b:c0:68:1c:94:0b:0d:
85:32:41:95:24:fd:e5:4e:8e:b1:cc:18:89:26:ce:
cb:3d:c6:42:bf:3c:f9:14:a6:51:a9:16:92:ca:51:
3d:25:86:26:10:7e:90:75:90:e2:13:0f:a9:41:5a:
da:3f:80:6f:30:f2:6d:88:40:7e:6e:1a:2e:0a:16:
1c:fe:f8:61:6c:1c:c3:a1:92:0f:64:61:9c:f7:af:
e1:04:99:92:e3:fa:9d:26:a1:b2:1b:c1:a2:e5:5e:
e3:f9:89:1b:b2:c1:67:6a:c5:9b:0a:d1:a9:65:a3:
1a:2f:2a:38:e7:c9:11:ff:8c:fd:9b:e5:97:40:2d:
99:2c:2b:91:5a:a2:9e:12:d6:60:9c:dc:33:d2:da:
ae:e5:85:5a:c1:12:3e:0f:80:ce:4e:b8:2f:c0:8b:
c0:fa:a6:5c:cd:94:2c:3b:06:95:b6:20:8b:d9:1b:
0e:22:43:fa:6c:e6:88:f3:80:c6:5f:18:65:76:ca:
48:66:94:a9:21:77:cd:ef:ef:53:a8:4e:45:2a:87:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:20:28:E8:82:94:81:12:B5:08:15:31:4C:BA:45:5B:4A:90:24
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:23:bf:a7:86:fe:aa:4c:bb:e6:0f:8c:a5:94:35:2d:cb:
0f:b1:bc:f4:ec:9a:ce:a5:7a:ba:11:85:4b:d0:15:10:62:e5:
fc:80:a1:6d:cf:a9:cc:ee:72:f1:a8:63:ed:cb:0b:e1:e1:b7:
d8:01:bb:cc:cf:0c:10:3e:d4:0b:34:ad:22:a2:3b:9f:31:06:
ce:51:31:7a:a0:a0:17:1c:94:41:3e:bb:65:c7:55:fc:df:20:
72:0f:1b:b3:64:83:d3:c4:3d:d0:de:93:14:ca:5f:4e:29:5e:
d8:65:30:9c:62:f7:f3:c6:4e:3c:7c:93:d7:1f:58:61:60:30:
95:4f:f4:7f:ed:5d:de:f9:1c:02:79:8f:ae:29:04:63:a5:e0:
59:48:33:7c:87:2e:d2:e3:97:90:b7:09:97:3a:af:32:02:81:
1d:05:3f:2d:f5:ac:63:93:45:98:3f:25:10:b3:c0:03:c7:17:
a6:6f:c7:7a:e3:68:c5:63:b1:47:62:cf:8d:09:22:44:13:7a:
38:63:7f:af:3a:b8:10:d6:ba:75:5f:ec:17:e6:76:d4:c0:09:
ea:b3:54:b0:99:21:9b:ce:42:40:34:2b:1b:cd:2b:42:23:d6:
cc:6c:b9:12:78:dc:78:5b:51:b5:30:d9:9b:bf:a2:88:7a:17:
36:25:8a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFEV+cOe8s8/4UChwDBf8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk
M2UzZDQwHhcNMjUwNDMwMDUwMDMwWhcNMjUwNTAxMDUwMDMwWjAzMTEwLwYDVQQD
EyhhZGJkMjAyOGU4ODI5NDgxMTJiNTA4MTUzMTRjYmE0NTViNGE5MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiWhrPLaqbIOX2XhtVP2OYfkAcF8
XkFeH3vJ4ilf9fgxda6/Q7HS455tyfA1QSWNj7U1bgvAaByUCw2FMkGVJP3lTo6x
zBiJJs7LPcZCvzz5FKZRqRaSylE9JYYmEH6QdZDiEw+pQVraP4BvMPJtiEB+bhou
ChYc/vhhbBzDoZIPZGGc96/hBJmS4/qdJqGyG8Gi5V7j+YkbssFnasWbCtGpZaMa
Lyo458kR/4z9m+WXQC2ZLCuRWqKeEtZgnNwz0tqu5YVawRI+D4DOTrgvwIvA+qZc
zZQsOwaVtiCL2RsOIkP6bOaI84DGXxhldspIZpSpIXfN7+9TqE5FKoc/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK29ICjogpSBErUIFTFMukVbSpAkMB8GA1UdIwQY
MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt
Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw
LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd20jv6eG
/qpMu+YPjKWUNS3LD7G89OyazqV6uhGFS9AVEGLl/IChbc+pzO5y8ahj7csL4eG3
2AG7zM8MED7UCzStIqI7nzEGzlExeqCgFxyUQT67ZcdV/N8gcg8bs2SD08Q90N6T
FMpfTile2GUwnGL388ZOPHyT1x9YYWAwlU/0f+1d3vkcAnmPrikEY6XgWUgzfIcu
0uOXkLcJlzqvMgKBHQU/LfWsY5NFmD8lELPAA8cXpm/HeuNoxWOxR2LPjQkiRBN6
OGN/rzq4ENa6dV/sF+Z21MAJ6rNUsJkhm85CQDQrG80rQiPWzGy5EnjceFtRtTDZ
m7+iiHoXNiWKJg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:50:56 2025 by rpki-client