Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: m9qW5SGbX5LtllyvAu6cyHGBmrVINuJS9XE6vEQXRrw=
Subject key identifier: B4:50:90:BB:20:80:EC:4D:12:B6:03:FB:D2:3E:F5:71:22:83:F3:82
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 01976BBDB94D053E31D262E5A6C50CBAD94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 128B
Signing time: Sat 14 Jun 2025 00:01:25 +0000
Manifest this update: Sat 14 Jun 2025 00:01:25 +0000
Manifest next update: Sun 15 Jun 2025 00:01:25 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: fu3LkF8z5jd56GMe+SaO2ZYqZ/0IQM/HxhwaVKmqstI=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:b9:4d:05:3e:31:d2:62:e5:a6:c5:0c:ba:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Jun 14 00:01:25 2025 GMT
Not After : Jun 15 00:01:25 2025 GMT
Subject: CN=b45090bb2080ec4d12b603fbd23ef5712283f382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:0b:be:e9:fc:d6:93:53:3b:5e:e1:df:38:
5d:46:0f:fa:d7:d7:3f:10:3f:de:4d:39:2a:10:d8:
78:d5:6f:19:c6:1f:95:66:ae:29:6a:2b:30:65:22:
33:b7:ff:b6:60:6b:8a:58:c6:05:20:82:69:ff:90:
94:58:1c:18:c2:d9:e5:fa:14:99:30:4e:95:4e:ad:
92:15:87:27:88:73:2c:02:7e:df:f5:08:e7:85:6b:
1f:9d:23:7b:3b:45:6c:e1:15:bb:62:53:6e:4e:2e:
5c:80:05:8a:da:9b:69:ca:9a:57:bb:51:40:b3:46:
70:6d:90:65:d2:09:3b:56:e4:82:6f:73:b1:ee:0f:
25:2a:5e:e9:d6:a7:a5:ce:36:98:e5:23:f1:53:73:
e1:0a:f8:b3:5b:11:69:44:1e:21:67:fd:30:2e:37:
19:82:40:39:33:e3:24:93:ac:9c:10:a3:de:79:a2:
0f:3c:74:66:64:6f:d8:a8:fd:8b:36:f3:33:c3:cb:
07:8b:02:7c:d8:14:22:a1:30:a8:a4:c8:85:66:36:
35:8c:78:16:b5:ed:75:e8:65:7e:41:85:03:3c:95:
39:f2:08:58:4d:69:29:60:27:6b:34:09:f8:a0:12:
d6:a8:de:9b:fd:49:af:7f:be:7c:ce:42:f2:99:40:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:50:90:BB:20:80:EC:4D:12:B6:03:FB:D2:3E:F5:71:22:83:F3:82
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d5:9c:c2:0f:80:89:34:d9:77:c9:60:62:f0:1b:6f:d4:d0:
20:ce:6c:b5:69:e2:f9:9e:fd:87:e8:0c:b7:28:ee:67:80:ea:
79:4e:54:0d:9f:f4:fc:28:27:58:51:45:97:fe:c5:45:d2:f1:
12:77:e0:83:45:88:a4:f8:c3:27:1a:01:db:77:f9:38:5d:10:
19:98:60:b4:be:e3:b5:7a:82:01:ee:c9:3d:cd:ab:f2:58:73:
6b:2f:64:56:72:e7:10:9e:9a:ee:ca:38:bf:85:bc:81:63:05:
20:d3:43:b3:e7:fc:b7:d7:9c:be:b4:c1:47:07:ba:0c:72:16:
2d:f5:4e:20:fc:0c:9d:74:02:30:39:57:93:c9:7f:46:42:c4:
d9:4c:0b:a0:93:96:6c:16:81:94:d9:3f:72:e5:b8:29:4e:1b:
59:e4:38:09:5f:19:72:d5:55:2e:0a:d3:07:09:b8:3a:0a:c0:
6f:ce:a6:1e:78:90:ec:68:6d:e8:88:60:25:82:d9:4c:20:ee:
05:d8:ae:3d:bf:39:bf:da:ed:42:af:1a:0c:46:e5:90:c4:48:
31:9d:80:c0:45:85:df:48:64:18:ef:b6:8a:5b:cb:43:85:85:
0a:d0:dc:49:40:12:5e:9b:c2:2d:57:e8:f3:e5:1b:5c:03:e1:
5a:21:43:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvblNBT4x0mLlpsUMutlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2
YTIwM2QwHhcNMjUwNjE0MDAwMTI1WhcNMjUwNjE1MDAwMTI1WjAzMTEwLwYDVQQD
EyhiNDUwOTBiYjIwODBlYzRkMTJiNjAzZmJkMjNlZjU3MTIyODNmMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVcLvun81pNTO17h3zhdRg/619c/
ED/eTTkqENh41W8Zxh+VZq4paiswZSIzt/+2YGuKWMYFIIJp/5CUWBwYwtnl+hSZ
ME6VTq2SFYcniHMsAn7f9QjnhWsfnSN7O0Vs4RW7YlNuTi5cgAWK2ptpyppXu1FA
s0ZwbZBl0gk7VuSCb3Ox7g8lKl7p1qelzjaY5SPxU3PhCvizWxFpRB4hZ/0wLjcZ
gkA5M+Mkk6ycEKPeeaIPPHRmZG/YqP2LNvMzw8sHiwJ82BQioTCopMiFZjY1jHgW
te116GV+QYUDPJU58ghYTWkpYCdrNAn4oBLWqN6b/Umvf758zkLymUCqBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRQkLsggOxNErYD+9I+9XEig/OCMB8GA1UdIwQY
MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt
NmE2MTM5NGY2MjY5LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5
LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNWcwg+A
iTTZd8lgYvAbb9TQIM5stWni+Z79h+gMtyjuZ4DqeU5UDZ/0/CgnWFFFl/7FRdLx
Enfgg0WIpPjDJxoB23f5OF0QGZhgtL7jtXqCAe7JPc2r8lhzay9kVnLnEJ6a7so4
v4W8gWMFINNDs+f8t9ecvrTBRwe6DHIWLfVOIPwMnXQCMDlXk8l/RkLE2UwLoJOW
bBaBlNk/cuW4KU4bWeQ4CV8ZctVVLgrTBwm4OgrAb86mHniQ7Ght6IhgJYLZTCDu
BdiuPb85v9rtQq8aDEblkMRIMZ2AwEWF30hkGO+2ilvLQ4WFCtDcSUASXpvCLVfo
8+UbXAPhWiFDBg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:50 2025 by rpki-client