Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: Fi0gEPuwDlcplMk06GsF/piILEg14CoTjTau7tm8JYE=
Subject key identifier: 3D:97:F0:68:93:1E:28:7F:C0:E3:15:19:10:CE:5E:63:A6:26:2A:F2
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019676E7AFF8E515FAFF648ECB7A9D6A8BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 0E6D
Signing time: Sun 27 Apr 2025 11:00:17 +0000
Manifest this update: Sun 27 Apr 2025 11:00:17 +0000
Manifest next update: Mon 28 Apr 2025 11:00:17 +0000
Files and hashes: 1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: I9epjWjiiuW4nbbcVAVt9QHZaShJ0AcClzwz8dhHnx4=)
2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:af:f8:e5:15:fa:ff:64:8e:cb:7a:9d:6a:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Apr 27 11:00:17 2025 GMT
Not After : Apr 28 11:00:17 2025 GMT
Subject: CN=3d97f068931e287fc0e3151910ce5e63a6262af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:69:96:36:00:a0:0b:a0:81:90:ac:4d:3f:
bb:bb:41:fc:17:50:82:30:8e:96:87:2d:4c:05:5f:
25:60:68:6f:89:c6:81:f4:b2:8d:cf:9e:6a:b4:3f:
17:87:c8:4b:f5:03:bd:6c:89:4a:ff:8a:48:f7:0f:
9f:13:ec:8f:db:42:67:dd:d5:f1:69:e3:aa:16:26:
6d:d2:99:b9:f0:bb:58:89:1d:b7:fb:f6:e2:59:40:
2a:8c:79:16:34:85:76:34:e8:0e:36:ba:a6:b9:33:
70:73:c5:82:54:ec:74:00:4e:b2:94:7e:ed:b1:88:
68:2f:44:23:b2:2d:f2:06:f7:55:52:e5:d6:b5:18:
25:67:55:6c:4b:ab:32:df:e3:78:e7:13:75:a9:9a:
3d:17:c9:e3:18:f8:29:52:c2:48:b4:6f:46:8e:8c:
2d:b8:33:a9:84:e2:60:e1:81:95:43:a2:c5:b2:e9:
e0:27:d1:dc:44:51:4f:33:c7:e5:4f:58:70:5b:83:
30:8d:85:c6:52:27:de:38:c4:e1:0a:71:75:a3:ce:
84:6d:96:d9:42:ce:fd:35:64:fe:8a:8f:59:40:5b:
db:b9:ff:50:87:1b:74:e2:f9:3c:3e:fb:35:11:00:
3b:e2:24:1a:b3:f8:e2:c6:97:52:ab:de:05:89:17:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:97:F0:68:93:1E:28:7F:C0:E3:15:19:10:CE:5E:63:A6:26:2A:F2
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c0:c9:37:fb:db:6e:99:dc:57:8a:62:94:9a:a6:77:27:12:
20:a4:66:5d:12:33:7b:76:95:0c:6a:c0:67:0a:67:7d:f5:a9:
d0:60:6c:04:c8:f7:cf:b1:91:49:66:88:56:67:01:af:f4:79:
f5:f5:c8:cb:8e:db:13:8d:ed:8f:cb:f6:e3:7e:5a:77:5e:6c:
ba:8d:a6:0b:40:ed:68:4c:7a:a1:a4:f3:10:a1:be:44:ef:cc:
86:c9:fa:aa:cf:5c:20:16:8c:39:81:bf:d7:0f:c1:e2:e5:85:
56:a4:7d:42:e7:83:d8:1c:08:53:24:7c:2a:33:5b:be:1a:1f:
3a:f5:c1:af:cb:96:d0:8b:f7:81:b2:46:f4:f0:f5:c8:5f:1d:
21:db:7b:45:51:52:d1:ad:06:bb:dc:6b:18:01:1f:db:57:09:
d5:f6:2e:18:aa:bc:45:5b:98:0d:03:31:78:5f:de:13:3b:9c:
53:22:bd:5b:81:db:20:54:fc:ba:cd:08:10:85:9b:1e:4a:f7:
24:77:4b:6e:50:2f:8c:78:69:25:2e:58:44:5a:11:0f:00:a7:
56:23:59:ea:95:45:7f:80:a2:da:91:6d:fe:67:8e:bd:ac:4a:
ed:28:49:48:97:2b:f9:6c:54:ee:73:4a:7a:49:b7:1f:d3:40:
26:3b:22:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ256/45RX6/2SOy3qdaoupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDEzY2M4OTY1ZWU5MjQxNmI2MDU5ZjkwYjE4Nzc4
YzhiMzgwHhcNMjUwNDI3MTEwMDE3WhcNMjUwNDI4MTEwMDE3WjAzMTEwLwYDVQQD
EygzZDk3ZjA2ODkzMWUyODdmYzBlMzE1MTkxMGNlNWU2M2E2MjYyYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg9pljYAoAuggZCsTT+7u0H8F1CC
MI6Why1MBV8lYGhvicaB9LKNz55qtD8Xh8hL9QO9bIlK/4pI9w+fE+yP20Jn3dXx
aeOqFiZt0pm58LtYiR23+/biWUAqjHkWNIV2NOgONrqmuTNwc8WCVOx0AE6ylH7t
sYhoL0Qjsi3yBvdVUuXWtRglZ1VsS6sy3+N45xN1qZo9F8njGPgpUsJItG9Gjowt
uDOphOJg4YGVQ6LFsungJ9HcRFFPM8flT1hwW4MwjYXGUifeOMThCnF1o86EbZbZ
Qs79NWT+io9ZQFvbuf9Qhxt04vk8Pvs1EQA74iQas/jixpdSq94FiRcz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2X8GiTHih/wOMVGRDOXmOmJiryMB8GA1UdIwQY
MBaAFBpqFBPMiWXukkFrYFn5Cxh3jIs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2Ut
ODJjMDg1YTkyNzc3LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2UtODJjMDg1YTkyNzc3
LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMDJN/vb
bpncV4pilJqmdycSIKRmXRIze3aVDGrAZwpnffWp0GBsBMj3z7GRSWaIVmcBr/R5
9fXIy47bE43tj8v2435ad15suo2mC0DtaEx6oaTzEKG+RO/Mhsn6qs9cIBaMOYG/
1w/B4uWFVqR9QueD2BwIUyR8KjNbvhofOvXBr8uW0Iv3gbJG9PD1yF8dIdt7RVFS
0a0Gu9xrGAEf21cJ1fYuGKq8RVuYDQMxeF/eEzucUyK9W4HbIFT8us0IEIWbHkr3
JHdLblAvjHhpJS5YRFoRDwCnViNZ6pVFf4Ci2pFt/meOvaxK7ShJSJcr+WxU7nNK
ekm3H9NAJjsiWA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:01 2025 by rpki-client