Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: 6Ww864IByeg47cV3RYuCF6Ffx9VU3j7oQOVsoClHpQE=
Subject key identifier: DC:7F:D5:4C:1A:A2:77:E9:52:72:98:E8:7E:29:C5:27:E5:61:1F:21
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 01976F99C23CC3F5E8F3FC624D4DF7B3BA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 18:00:37 +0000
Manifest this update: Sat 14 Jun 2025 18:00:37 +0000
Manifest next update: Sun 15 Jun 2025 18:00:37 +0000
Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: TuB0HSvD0yVecry6/j59xEjwjg9OXecRhZ17VtS9Mls=)
2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:c2:3c:c3:f5:e8:f3:fc:62:4d:4d:f7:b3:ba:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Jun 14 18:00:37 2025 GMT
Not After : Jun 15 18:00:37 2025 GMT
Subject: CN=dc7fd54c1aa277e9527298e87e29c527e5611f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:b3:ab:7d:c5:95:bf:d9:87:d0:33:18:3c:
61:5c:ee:ba:8f:fd:ee:c9:56:c9:64:1b:f0:c5:e3:
8f:57:4f:ac:59:ec:8c:72:ce:00:5e:20:ea:59:38:
55:10:fe:05:bd:b1:7f:8d:23:e7:bd:e1:07:d1:0d:
2b:3a:c1:53:52:ff:ea:e7:96:75:7a:e3:d3:4f:37:
60:7b:8e:e0:9c:84:42:47:01:01:7f:bd:63:94:58:
38:08:0b:ea:c3:98:a0:62:ce:3c:86:6f:cf:cd:7e:
30:76:e6:43:fb:f9:51:65:13:e8:87:5b:9e:81:24:
6b:84:f9:ba:2e:f9:03:22:aa:76:74:23:21:43:f3:
a1:2c:de:5c:b8:19:05:3d:9b:6a:ad:bf:38:ba:62:
4f:e9:c9:7e:4f:4e:e9:74:65:0f:5c:55:47:a7:3b:
06:c1:bf:fb:68:b0:17:71:f6:1f:79:4c:46:02:61:
b5:f0:87:28:b9:6b:28:ec:2e:f1:90:a3:48:58:1e:
05:90:ef:f9:a2:73:57:bc:86:a1:35:a4:6a:71:21:
5e:e9:56:9b:99:37:9e:27:c4:35:1c:f3:82:e4:07:
80:6b:d6:f8:e3:3e:70:1a:9a:97:18:bc:df:08:0c:
3f:6e:b3:0f:c7:7e:cc:e0:b2:ff:7a:29:c2:56:10:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7F:D5:4C:1A:A2:77:E9:52:72:98:E8:7E:29:C5:27:E5:61:1F:21
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:a0:1b:be:99:4b:e1:ff:b2:94:14:b0:da:81:85:08:7d:
ab:a0:46:3e:1c:c9:e2:17:c0:46:a2:b8:1b:c0:21:cc:94:47:
f0:13:2f:a1:8b:da:44:a2:5d:27:12:48:70:71:3e:b1:63:5b:
d1:4b:22:92:ee:76:cf:dd:fe:2b:19:ee:6d:c0:8b:b3:40:6f:
67:2d:4d:ff:d5:06:d6:33:ab:43:93:da:cc:f3:c4:15:26:15:
3f:cb:e5:9d:8e:01:c6:86:85:3a:66:66:8c:cb:c5:d4:0f:db:
07:dd:1e:63:6b:af:4a:ab:fe:a8:ad:e0:f9:15:4d:cd:61:bb:
df:f8:c0:96:2b:03:d1:1b:f8:e8:f8:b4:54:a6:13:3a:fa:f7:
1e:55:70:bd:7a:35:9a:25:58:3d:33:6b:7c:e5:c1:17:45:20:
e1:49:2d:c8:8e:1b:50:06:aa:9a:7c:4f:8f:ef:61:8d:08:9f:
f5:aa:84:f6:3b:55:82:1e:3e:65:65:4c:06:15:ca:4c:3f:1c:
c9:c9:54:de:fd:c4:76:12:85:c6:bd:67:74:e2:6c:b1:6d:16:
38:8b:2f:a5:d2:38:86:71:bd:e8:ad:a3:a8:2f:1b:b3:a9:b2:
b2:58:a2:f6:02:4d:8a:cc:f6:b2:25:09:56:86:25:39:af:ea:
3d:eb:5f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmcI8w/Xo8/xiTU33s7qTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWMxNDk4ODYwZTJiYjA5NTgxNzM4NTRiZDA0Yzg2OWEz
NjkwMTcwHhcNMjUwNjE0MTgwMDM3WhcNMjUwNjE1MTgwMDM3WjAzMTEwLwYDVQQD
EyhkYzdmZDU0YzFhYTI3N2U5NTI3Mjk4ZTg3ZTI5YzUyN2U1NjExZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Mazq33Flb/Zh9AzGDxhXO66j/3u
yVbJZBvwxeOPV0+sWeyMcs4AXiDqWThVEP4FvbF/jSPnveEH0Q0rOsFTUv/q55Z1
euPTTzdge47gnIRCRwEBf71jlFg4CAvqw5igYs48hm/PzX4wduZD+/lRZRPoh1ue
gSRrhPm6LvkDIqp2dCMhQ/OhLN5cuBkFPZtqrb84umJP6cl+T07pdGUPXFVHpzsG
wb/7aLAXcfYfeUxGAmG18IcouWso7C7xkKNIWB4FkO/5onNXvIahNaRqcSFe6Vab
mTeeJ8Q1HPOC5AeAa9b44z5wGpqXGLzfCAw/brMPx37M4LL/einCVhC0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx/1UwaonfpUnKY6H4pxSflYR8hMB8GA1UdIwQY
MBaAFBmsFJiGDiuwlYFzhUvQTIaaNpAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAt
N2FhMjkwZTg1N2U5LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAtN2FhMjkwZTg1N2U5
LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi62gG76Z
S+H/spQUsNqBhQh9q6BGPhzJ4hfARqK4G8AhzJRH8BMvoYvaRKJdJxJIcHE+sWNb
0Usiku52z93+KxnubcCLs0BvZy1N/9UG1jOrQ5PazPPEFSYVP8vlnY4BxoaFOmZm
jMvF1A/bB90eY2uvSqv+qK3g+RVNzWG73/jAlisD0Rv46Pi0VKYTOvr3HlVwvXo1
miVYPTNrfOXBF0Ug4UktyI4bUAaqmnxPj+9hjQif9aqE9jtVgh4+ZWVMBhXKTD8c
yclU3v3EdhKFxr1ndOJssW0WOIsvpdI4hnG96K2jqC8bs6myslii9gJNisz2siUJ
VoYlOa/qPetfNA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:10:34 2025 by rpki-client