Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: kNSs4t/qvDp8i1xyk+DGQescP4DPcAK8g17GdlZ3NIw=
Subject key identifier: 0C:87:FF:8A:DE:52:40:22:97:85:F9:77:84:9A:92:DC:D4:14:92:3B
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019768F2BDD56DC7A6C6639B44D7C2E7EF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 11:00:28 +0000
Manifest this update: Fri 13 Jun 2025 11:00:28 +0000
Manifest next update: Sat 14 Jun 2025 11:00:28 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: D8msVYXyxHopVmGXaoU8wqIKktgweZEim4GqdV6DFdQ=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:bd:d5:6d:c7:a6:c6:63:9b:44:d7:c2:e7:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jun 13 11:00:28 2025 GMT
Not After : Jun 14 11:00:28 2025 GMT
Subject: CN=0c87ff8ade5240229785f977849a92dcd414923b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:e0:e9:f6:94:08:53:70:0f:f6:46:61:a1:
4a:6e:f6:18:9e:ec:1e:91:73:26:0b:ba:8f:d9:98:
90:b3:9c:1f:4b:fd:85:70:da:d5:b4:63:4f:69:cd:
d0:f7:30:b3:52:e8:12:6a:bd:bf:2a:d6:bf:5f:bd:
eb:78:ce:63:77:d9:c4:3e:98:a9:d9:7e:d7:64:cf:
52:bf:d5:0f:25:f2:99:b0:e4:10:2f:88:c5:55:16:
ff:83:a2:5b:d1:84:ec:11:cc:5e:a5:24:67:e5:e2:
d8:b3:68:82:1a:33:59:7c:ad:28:a3:00:3a:3d:8a:
3e:e7:2a:62:9f:cd:26:d1:0d:f5:d2:aa:e3:7b:81:
d0:60:6d:d7:b7:87:29:2b:4f:bb:df:ef:c4:d1:c5:
45:21:82:e8:55:9d:18:02:61:32:96:00:c5:d2:10:
4b:a6:37:17:7d:63:e7:a6:f3:c3:0c:31:64:9a:04:
76:55:bd:84:72:af:90:d4:e0:5a:df:c1:47:93:af:
6a:de:81:84:7a:d9:ef:b8:4b:5b:be:fd:0c:8a:92:
c3:8c:58:4b:f9:c7:55:69:28:5f:a9:d1:39:40:10:
26:cb:f0:9e:17:d1:52:bb:98:04:26:b7:28:40:76:
d8:85:24:7c:8a:2f:12:18:e3:d5:0e:02:17:84:8b:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:FF:8A:DE:52:40:22:97:85:F9:77:84:9A:92:DC:D4:14:92:3B
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:22:85:6c:be:06:81:8a:bc:3b:c1:37:c3:8a:c6:ab:ed:b5:
52:7d:10:af:81:df:07:18:05:7d:66:9d:4a:04:c3:c1:d7:8e:
19:d3:a0:6b:e2:f9:9b:6a:80:c8:6b:36:f4:72:ee:49:e4:ca:
a3:eb:dc:9b:53:1a:08:6d:b0:b4:00:2e:43:66:a7:4c:19:53:
0b:be:01:96:9b:90:d4:42:69:c3:60:f5:0a:fe:ca:c2:d5:09:
9c:4c:01:22:ab:3b:e6:7c:78:60:47:d1:d6:3a:9d:9f:67:15:
99:15:db:1e:2d:7e:18:67:3b:3d:20:46:43:91:90:f0:49:4e:
ca:cd:3c:e5:6c:97:8f:81:88:2b:ad:3e:b2:ca:fa:b3:34:01:
35:67:c7:58:76:a5:77:eb:d5:82:79:fd:36:16:c8:d8:fa:2e:
31:bc:90:e4:e3:44:3d:aa:69:3c:96:c3:d6:f1:9b:ba:e4:d6:
19:8a:f7:0c:17:70:cc:32:c1:ac:61:a9:0f:c5:3a:b7:32:2e:
15:e9:35:83:d9:d4:3a:f9:99:08:aa:cc:02:58:22:1e:10:7f:
fe:08:b9:dd:fb:0d:51:7d:af:cb:d4:df:78:07:80:a0:e9:a5:
f7:de:62:b5:c5:79:61:4f:db:3e:8b:c3:d9:d2:ab:92:55:75:
e3:ed:b4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8r3VbcemxmObRNfC5++RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4
MDU4ODYwHhcNMjUwNjEzMTEwMDI4WhcNMjUwNjE0MTEwMDI4WjAzMTEwLwYDVQQD
EygwYzg3ZmY4YWRlNTI0MDIyOTc4NWY5Nzc4NDlhOTJkY2Q0MTQ5MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLTg6faUCFNwD/ZGYaFKbvYYnuwe
kXMmC7qP2ZiQs5wfS/2FcNrVtGNPac3Q9zCzUugSar2/Kta/X73reM5jd9nEPpip
2X7XZM9Sv9UPJfKZsOQQL4jFVRb/g6Jb0YTsEcxepSRn5eLYs2iCGjNZfK0oowA6
PYo+5ypin80m0Q310qrje4HQYG3Xt4cpK0+73+/E0cVFIYLoVZ0YAmEylgDF0hBL
pjcXfWPnpvPDDDFkmgR2Vb2Ecq+Q1OBa38FHk69q3oGEetnvuEtbvv0MipLDjFhL
+cdVaShfqdE5QBAmy/CeF9FSu5gEJrcoQHbYhSR8ii8SGOPVDgIXhIsQ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyH/4reUkAil4X5d4SaktzUFJI7MB8GA1UdIwQY
MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt
ZWQ5MjMxZmJhZWQxLzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx
LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCKFbL4G
gYq8O8E3w4rGq+21Un0Qr4HfBxgFfWadSgTDwdeOGdOga+L5m2qAyGs29HLuSeTK
o+vcm1MaCG2wtAAuQ2anTBlTC74BlpuQ1EJpw2D1Cv7KwtUJnEwBIqs75nx4YEfR
1jqdn2cVmRXbHi1+GGc7PSBGQ5GQ8ElOys085WyXj4GIK60+ssr6szQBNWfHWHal
d+vVgnn9NhbI2PouMbyQ5ONEPappPJbD1vGbuuTWGYr3DBdwzDLBrGGpD8U6tzIu
Fek1g9nUOvmZCKrMAlgiHhB//gi53fsNUX2vy9TfeAeAoOml995itcV5YU/bPovD
2dKrklV14+20Ew==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:57 2025 by rpki-client