
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: jVtzb47VmrCLAzYI8dArlfg2VCiRoAM1J2NGN2Mvp1Y=
Subject key identifier: AD:DD:C1:CD:4C:84:23:E0:A5:11:E0:16:47:22:D3:85:D9:ED:49:3B
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 0196AA305315F5BCD904C692A89FC536F812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 1526
Signing time: Wed 07 May 2025 10:00:15 +0000
Manifest this update: Wed 07 May 2025 10:00:15 +0000
Manifest next update: Thu 08 May 2025 10:00:15 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: 1oZUg5BGb1DN9QLXK5qaXnuFCheR2LTK8nR/39Wyhuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:53:15:f5:bc:d9:04:c6:92:a8:9f:c5:36:f8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: May 7 10:00:15 2025 GMT
Not After : May 8 10:00:15 2025 GMT
Subject: CN=adddc1cd4c8423e0a511e0164722d385d9ed493b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:2f:20:c6:0c:a0:97:34:03:63:86:01:de:
55:b1:33:76:1a:0e:3f:f1:2f:fa:0c:29:ec:b9:13:
5a:79:dd:42:67:53:63:45:95:2d:03:b5:82:12:c1:
c2:d8:9e:1c:df:9d:cd:07:9a:61:9b:73:a6:10:1b:
58:73:47:c3:60:35:ac:d6:bd:b0:5c:a1:ee:4d:b2:
24:ec:d3:9d:8c:3f:28:06:c9:a9:1f:e3:24:f8:f9:
7b:33:f3:84:d4:cf:dc:34:65:47:8b:92:47:02:b7:
0d:db:72:bb:e8:ca:63:85:58:dc:10:6d:36:74:4d:
94:65:ab:5f:59:ea:16:21:75:be:56:c1:fd:16:53:
4e:c1:c1:3c:e8:bf:0e:66:9c:ee:55:45:ee:6e:d3:
02:7f:66:6d:83:cd:78:15:80:39:a4:0b:35:50:1a:
0e:66:cd:88:97:f2:68:4f:fd:cd:ec:0c:13:72:91:
58:1d:f9:ff:23:e7:6a:23:01:83:57:cf:41:71:67:
62:28:5f:d3:84:ba:02:5f:e0:d2:b4:5c:9a:49:71:
65:7b:2a:2a:29:44:cc:af:4b:7d:e3:35:b0:55:28:
93:9b:ab:49:83:09:e4:f7:c1:29:5a:4c:6a:95:61:
8a:84:03:69:9f:4c:15:15:c5:99:18:dd:74:ae:53:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:C1:CD:4C:84:23:E0:A5:11:E0:16:47:22:D3:85:D9:ED:49:3B
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ce:5c:d7:c6:de:5a:d1:ed:e1:9d:75:f3:1e:37:eb:1a:da:
6c:c5:45:c7:71:0f:bc:d6:d5:75:2d:b1:b2:ef:ad:37:01:3a:
fa:50:c4:e7:38:03:6e:ba:eb:50:ed:c6:e3:0b:74:54:d8:fc:
c1:f7:ac:fa:7d:61:f1:c4:e2:ff:2c:39:d6:c2:63:f5:29:aa:
1a:c5:24:6a:58:1f:88:a2:a4:69:94:c5:ac:e5:31:5c:a4:8f:
05:dd:b6:e2:a5:3e:e7:4f:cb:c8:f1:94:7a:f3:d5:f5:96:4c:
e6:21:ca:e3:02:7e:12:fc:02:3b:12:fe:89:fb:61:89:df:0c:
f2:7f:a0:ca:93:60:38:92:38:6e:6a:c1:d1:46:c3:57:cd:fd:
50:92:fa:5c:50:23:93:d2:13:f9:99:be:96:08:2a:c1:a1:d9:
7f:d9:de:a7:2c:b8:45:c5:c8:92:61:11:a0:03:1a:16:a5:18:
1e:f3:fd:32:1e:d2:8e:a2:43:a8:37:65:8d:52:13:c7:bc:e0:
d6:3c:52:7a:c9:29:3d:86:9d:f5:57:af:a7:28:f7:a6:75:be:
00:16:9e:68:c8:2d:19:de:fe:e1:ae:b6:74:8b:bf:45:cc:a4:
dc:6a:e2:48:00:62:48:9f:b5:13:f4:16:79:b8:a3:3f:0e:d8:
0b:72:aa:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMFMV9bzZBMaSqJ/FNvgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGQzMDBlNmFjZDFmOTg5NWZjZTNiNWFiZTM4YTVmMDA1
ODRkNTUwHhcNMjUwNTA3MTAwMDE1WhcNMjUwNTA4MTAwMDE1WjAzMTEwLwYDVQQD
EyhhZGRkYzFjZDRjODQyM2UwYTUxMWUwMTY0NzIyZDM4NWQ5ZWQ0OTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmgvIMYMoJc0A2OGAd5VsTN2Gg4/
8S/6DCnsuRNaed1CZ1NjRZUtA7WCEsHC2J4c353NB5phm3OmEBtYc0fDYDWs1r2w
XKHuTbIk7NOdjD8oBsmpH+Mk+Pl7M/OE1M/cNGVHi5JHArcN23K76MpjhVjcEG02
dE2UZatfWeoWIXW+VsH9FlNOwcE86L8OZpzuVUXubtMCf2Ztg814FYA5pAs1UBoO
Zs2Il/JoT/3N7AwTcpFYHfn/I+dqIwGDV89BcWdiKF/ThLoCX+DStFyaSXFleyoq
KUTMr0t94zWwVSiTm6tJgwnk98EpWkxqlWGKhANpn0wVFcWZGN10rlMkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3dwc1MhCPgpRHgFkci04XZ7Uk7MB8GA1UdIwQY
MBaAFBkNMA5qzR+Ylfzjtavjil8AWE1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2Yzct
ZmRjZDlmZDliYjAzLzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2YzctZmRjZDlmZDliYjAz
LzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArc5c18be
WtHt4Z118x436xrabMVFx3EPvNbVdS2xsu+tNwE6+lDE5zgDbrrrUO3G4wt0VNj8
wfes+n1h8cTi/yw51sJj9SmqGsUkalgfiKKkaZTFrOUxXKSPBd224qU+50/LyPGU
evPV9ZZM5iHK4wJ+EvwCOxL+ifthid8M8n+gypNgOJI4bmrB0UbDV839UJL6XFAj
k9IT+Zm+lggqwaHZf9nepyy4RcXIkmERoAMaFqUYHvP9Mh7SjqJDqDdljVITx7zg
1jxSeskpPYad9Vevpyj3pnW+ABaeaMgtGd7+4a62dIu/Rcyk3GriSABiSJ+1E/QW
ebijPw7YC3Kqhg==
-----END CERTIFICATE-----
Generated at Wed May 7 21:01:11 2025 by rpki-client