Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: xSlms+j7gy65Ottti7t6ZUC9IWJ7z2TZq9J9xrJVt8Y=
Subject key identifier: 06:38:19:D7:A5:8E:96:6D:18:80:48:20:9F:47:D9:E0:E6:0B:97:84
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019697F31ACB77F807062FD7FF303A1AE6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 151C
Signing time: Sat 03 May 2025 21:00:13 +0000
Manifest this update: Sat 03 May 2025 21:00:13 +0000
Manifest next update: Sun 04 May 2025 21:00:13 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: OQKpCNIuMhIyLMU4o6mm8DcOXXEsusU1h2Ak5iuf3Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:f3:1a:cb:77:f8:07:06:2f:d7:ff:30:3a:1a:e6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: May 3 21:00:13 2025 GMT
Not After : May 4 21:00:13 2025 GMT
Subject: CN=063819d7a58e966d188048209f47d9e0e60b9784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:1f:3c:bc:d0:f6:42:86:5f:f2:3c:1e:56:
7d:52:58:77:5e:69:3b:fd:6c:6a:bd:31:bd:b3:58:
e7:0c:f8:7c:fe:4b:a3:f4:41:fd:48:2a:b5:2c:40:
0e:87:27:bc:46:cc:5c:cf:2a:d3:e3:81:80:bf:d5:
5c:2e:8e:55:0a:5f:57:6d:3b:c7:b8:8b:6b:98:21:
c8:46:90:66:4e:17:e7:96:ac:6f:82:e3:7e:90:2f:
db:3a:cd:db:db:5e:16:8f:e3:f3:ed:f9:74:dc:f0:
67:fa:0d:91:67:65:1b:30:28:7a:9f:ae:78:79:a5:
e0:42:19:26:46:66:2d:d0:27:54:12:a6:55:2c:24:
f2:ae:11:11:c6:c3:ae:6c:90:d0:b7:dd:bf:c0:bb:
4b:79:41:80:5e:ea:e3:09:bc:2b:bb:2f:a9:e2:0e:
93:df:60:eb:87:4a:b4:82:23:71:80:4d:45:f8:44:
50:c7:6a:ae:e5:8b:21:2e:9a:64:4a:45:84:19:9b:
a1:04:91:f6:0d:72:4e:47:3a:33:92:50:a8:38:89:
ba:0c:6c:93:23:20:94:b7:6e:61:84:76:7e:45:cd:
39:71:4e:3a:24:73:41:11:ac:88:70:84:c8:2f:00:
6a:c7:39:fb:cb:1b:9c:14:08:03:df:0a:d4:f6:99:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:38:19:D7:A5:8E:96:6D:18:80:48:20:9F:47:D9:E0:E6:0B:97:84
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:35:4f:36:71:a4:fe:dd:7f:ab:c6:f3:16:d6:40:20:4e:
15:30:31:be:fc:03:69:42:97:8d:58:bf:33:0c:4c:d6:d0:95:
df:7e:23:a9:e8:56:47:56:bd:99:56:86:2e:4d:bd:4e:b4:f7:
8f:e0:8f:0a:4e:9d:26:d4:a2:ea:d3:04:31:63:b9:4b:67:eb:
59:84:e5:ba:ae:34:12:a7:aa:20:67:04:9e:12:33:25:be:bc:
b0:7c:5a:75:bb:5a:ea:00:1e:c6:ff:bc:52:01:6f:de:05:f2:
2e:d1:b1:d0:e4:2c:1e:67:ba:48:e2:52:15:cd:22:6a:8b:dd:
a0:e9:ab:d3:38:64:c7:35:97:d9:9e:39:a7:6c:7c:b6:94:47:
8b:1a:5f:a3:46:5f:c5:94:45:10:de:1a:43:0b:b3:e0:e1:ff:
0e:0f:be:ab:70:67:1e:95:22:8e:4c:13:90:ac:fd:53:c9:db:
c2:bb:d0:76:bf:1c:b2:dd:76:e4:8a:8c:2c:a0:87:c0:d3:b5:
25:4c:2d:cd:36:24:2c:6f:68:32:22:b3:43:7b:d8:6a:9d:32:
b7:cc:ff:12:59:ae:01:67:f4:68:0f:29:9f:24:8e:05:f5:9b:
20:d9:ef:e8:10:da:b1:35:ef:ff:f5:58:5f:50:d6:fa:c8:de:
fb:b6:5e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaX8xrLd/gHBi/X/zA6Gua3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2NhZmRlMzEzNWEyNmJkZDQxNzkwMjllZWJmNzQxNGU5
NjQzYWYwHhcNMjUwNTAzMjEwMDEzWhcNMjUwNTA0MjEwMDEzWjAzMTEwLwYDVQQD
EygwNjM4MTlkN2E1OGU5NjZkMTg4MDQ4MjA5ZjQ3ZDllMGU2MGI5Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfgfPLzQ9kKGX/I8HlZ9Ulh3Xmk7
/WxqvTG9s1jnDPh8/kuj9EH9SCq1LEAOhye8RsxczyrT44GAv9VcLo5VCl9XbTvH
uItrmCHIRpBmThfnlqxvguN+kC/bOs3b214Wj+Pz7fl03PBn+g2RZ2UbMCh6n654
eaXgQhkmRmYt0CdUEqZVLCTyrhERxsOubJDQt92/wLtLeUGAXurjCbwruy+p4g6T
32Drh0q0giNxgE1F+ERQx2qu5YshLppkSkWEGZuhBJH2DXJORzozklCoOIm6DGyT
IyCUt25hhHZ+Rc05cU46JHNBEayIcITILwBqxzn7yxucFAgD3wrU9plXqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY4GdeljpZtGIBIIJ9H2eDmC5eEMB8GA1UdIwQY
MBaAFBp8r94xNaJr3UF5Ap7r90FOlkOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMt
MWM1MTA3Y2FiMzUzLzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMtMWM1MTA3Y2FiMzUz
LzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP581TzZx
pP7df6vG8xbWQCBOFTAxvvwDaUKXjVi/MwxM1tCV334jqehWR1a9mVaGLk29TrT3
j+CPCk6dJtSi6tMEMWO5S2frWYTluq40EqeqIGcEnhIzJb68sHxadbta6gAexv+8
UgFv3gXyLtGx0OQsHme6SOJSFc0iaovdoOmr0zhkxzWX2Z45p2x8tpRHixpfo0Zf
xZRFEN4aQwuz4OH/Dg++q3BnHpUijkwTkKz9U8nbwrvQdr8cst125IqMLKCHwNO1
JUwtzTYkLG9oMiKzQ3vYap0yt8z/ElmuAWf0aA8pnySOBfWbINnv6BDasTXv//VY
X1DW+sje+7ZeWg==
-----END CERTIFICATE-----
Generated at Sun May 4 00:12:33 2025 by rpki-client