Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier: suxmGjIq36P/QFATP1k4Cv54Sf+8Pge2VExPLxOElmQ=
Subject key identifier: B9:71:52:FC:B6:FE:F0:E1:61:41:4E:42:B2:C4:B6:73:A5:7C:88:BD
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 01967D8EB3CF4BD988CCFD53F73C262CA396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 18:00:26 +0000
Manifest this update: Mon 28 Apr 2025 18:00:26 +0000
Manifest next update: Tue 29 Apr 2025 18:00:26 +0000
Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: NhpxtBNNGI3oQmjvP+cn6XD+/cqmSvJ36eQG2x+hkFM=)
2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:b3:cf:4b:d9:88:cc:fd:53:f7:3c:26:2c:a3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Apr 28 18:00:26 2025 GMT
Not After : Apr 29 18:00:26 2025 GMT
Subject: CN=b97152fcb6fef0e161414e42b2c4b673a57c88bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:25:65:b0:0d:91:70:f3:c5:01:76:10:c7:
a0:3a:1f:a2:05:4b:6f:5f:4d:5e:d4:62:5b:57:75:
86:7b:d5:25:9b:6a:9e:55:4a:79:db:fc:63:55:4a:
62:bc:2d:83:64:4f:21:c4:fc:31:b2:58:d8:f0:e8:
d0:ac:ef:e5:24:15:c1:ef:27:68:7c:00:a9:c9:e0:
35:3c:cc:e6:2f:bf:bd:84:25:d2:99:f0:fe:1e:97:
da:36:0d:c9:23:63:0d:6e:30:b5:d6:be:7f:ec:b5:
a1:01:6a:45:43:c5:c0:92:66:09:d3:f7:69:5d:cd:
51:d1:77:57:08:65:f2:10:1c:40:3e:a9:ad:bd:ac:
bc:91:67:47:69:43:2d:44:4e:f7:2e:ed:90:5e:78:
b6:26:b2:c7:1c:19:4b:b9:01:9b:a2:2f:04:47:3a:
09:f7:53:d5:aa:b3:53:ab:44:08:46:47:55:e8:8a:
81:9b:3f:e2:36:67:1b:bd:9c:67:4b:ea:d6:25:2e:
dd:99:af:02:27:73:4d:fb:55:96:44:9a:06:ca:74:
d6:92:31:ec:cd:1c:e0:2a:4b:49:7e:66:d4:23:01:
75:d4:fa:14:bd:72:02:48:ce:06:f4:42:d0:2f:52:
96:46:f3:e2:e2:0d:81:93:b4:c3:ef:84:2b:64:c1:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:52:FC:B6:FE:F0:E1:61:41:4E:42:B2:C4:B6:73:A5:7C:88:BD
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0f:c8:6a:57:3f:70:63:e6:51:fd:e5:e9:ce:24:68:05:6a:
16:f1:7a:b9:26:ed:15:d8:ca:e6:6f:81:5d:6e:20:15:88:9b:
bf:ec:2e:ba:b3:0d:30:cc:7f:e2:08:55:eb:b6:b8:de:c0:31:
7e:63:ec:69:5b:76:0c:48:03:bd:d3:3e:0f:64:f0:3e:13:02:
6a:ff:20:31:fd:a5:2d:6e:d4:dc:40:f3:97:dd:1a:e0:86:ee:
b1:7a:8a:1c:0d:3a:1c:cc:2c:57:86:c6:ba:75:92:a5:11:57:
01:d8:e4:c6:a6:fc:ab:54:58:50:b3:50:74:f5:83:c9:b2:72:
f4:7b:0b:0d:dd:b9:fd:3c:50:89:07:5e:7a:f7:87:de:8d:e7:
bf:3e:b9:a6:cb:09:34:26:58:1e:ed:2e:c5:c6:d1:52:56:f7:
1a:3c:cc:4f:7e:dc:dc:ac:67:c0:4e:d2:04:f8:64:3d:7b:72:
cc:41:41:d6:36:6b:1a:5d:3c:83:36:d6:32:b4:46:e9:5b:3f:
e7:91:8a:c8:6f:99:49:3b:80:52:ac:ba:b4:c5:9c:c6:46:63:
97:de:4a:69:38:eb:b6:f6:5c:21:14:b0:5e:ec:96:6b:e1:8f:
f2:1f:94:0c:7d:45:13:b7:3e:ca:6b:50:fb:7d:8d:cd:eb:ad:
2e:5d:80:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jrPPS9mIzP1T9zwmLKOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmJjMjg0OThlYjE2OTU5MGIwNjlhMDA1NDE0YzQxYTE3
OWIyNDAwHhcNMjUwNDI4MTgwMDI2WhcNMjUwNDI5MTgwMDI2WjAzMTEwLwYDVQQD
EyhiOTcxNTJmY2I2ZmVmMGUxNjE0MTRlNDJiMmM0YjY3M2E1N2M4OGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ0lZbANkXDzxQF2EMegOh+iBUtv
X01e1GJbV3WGe9Ulm2qeVUp52/xjVUpivC2DZE8hxPwxsljY8OjQrO/lJBXB7ydo
fACpyeA1PMzmL7+9hCXSmfD+HpfaNg3JI2MNbjC11r5/7LWhAWpFQ8XAkmYJ0/dp
Xc1R0XdXCGXyEBxAPqmtvay8kWdHaUMtRE73Lu2QXni2JrLHHBlLuQGboi8ERzoJ
91PVqrNTq0QIRkdV6IqBmz/iNmcbvZxnS+rWJS7dma8CJ3NN+1WWRJoGynTWkjHs
zRzgKktJfmbUIwF11PoUvXICSM4G9ELQL1KWRvPi4g2Bk7TD74QrZMGIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlxUvy2/vDhYUFOQrLEtnOlfIi9MB8GA1UdIwQY
MBaAFBm7woSY6xaVkLBpoAVBTEGhebJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQt
N2YwMTk3MjE4NmEzLzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQtN2YwMTk3MjE4NmEz
LzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ/Ialc/
cGPmUf3l6c4kaAVqFvF6uSbtFdjK5m+BXW4gFYibv+wuurMNMMx/4ghV67a43sAx
fmPsaVt2DEgDvdM+D2TwPhMCav8gMf2lLW7U3EDzl90a4IbusXqKHA06HMwsV4bG
unWSpRFXAdjkxqb8q1RYULNQdPWDybJy9HsLDd25/TxQiQdeeveH3o3nvz65pssJ
NCZYHu0uxcbRUlb3GjzMT37c3KxnwE7SBPhkPXtyzEFB1jZrGl08gzbWMrRG6Vs/
55GKyG+ZSTuAUqy6tMWcxkZjl95KaTjrtvZcIRSwXuyWa+GP8h+UDH1FE7c+ymtQ
+32NzeutLl2AEg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:51 2025 by rpki-client