Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: n17rzqYhU/2N2LflBlh3yzPdjra6TrvYNueMLxWFnIk=
Subject key identifier: E2:37:C4:07:16:91:4A:1C:20:4E:6E:53:AA:22:86:1D:65:96:00:94
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019679446FD44ADB8C23C008B8668459C5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 0552
Signing time: Sun 27 Apr 2025 22:00:50 +0000
Manifest this update: Sun 27 Apr 2025 22:00:50 +0000
Manifest next update: Mon 28 Apr 2025 22:00:50 +0000
Files and hashes: 1: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: PMMsHLQ89wW0ucVRBtB1+awvcSqEpIuhl+/NJN5cDIw=)
2: ZTIBKgjTaXW_ZnWc7123527kr5M.roa (hash: nKgH3xdgZjr7Kq7o7yKNcoST/uR2S0ghz6FcpqSglbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:6f:d4:4a:db:8c:23:c0:08:b8:66:84:59:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Apr 27 22:00:50 2025 GMT
Not After : Apr 28 22:00:50 2025 GMT
Subject: CN=e237c40716914a1c204e6e53aa22861d65960094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:b7:6f:ba:1c:e2:59:11:ad:0a:c5:f9:3d:
24:ea:9c:13:86:22:c1:b8:3a:06:d4:89:77:f1:29:
de:a7:2c:62:d2:c6:31:53:58:a1:55:b9:06:10:91:
48:f7:dc:9e:ec:8c:50:9b:67:bd:1a:5d:7a:2c:25:
a0:71:fd:1c:ec:d9:a3:49:b9:54:79:82:1a:85:be:
14:99:e3:47:c3:39:27:39:da:ad:e3:53:79:ac:fa:
27:a5:eb:d5:03:d7:c7:c7:d3:60:a2:f2:71:7f:be:
63:26:b6:4c:79:c4:d4:ab:04:ac:08:0e:2d:17:d9:
61:81:0c:c1:bf:b2:68:e7:a0:29:e8:7e:6d:e5:77:
7e:21:ee:06:51:ef:5a:f2:8c:66:23:04:a5:2b:fe:
78:23:0f:f1:eb:e3:ec:57:e1:e1:e5:6a:6c:1d:00:
c8:77:4a:5e:b8:59:72:20:78:2b:71:9c:26:1f:46:
2b:02:0f:98:28:8f:8f:dc:8b:73:e2:f6:ab:44:e0:
0e:9e:9f:ee:c2:54:88:24:78:95:bd:88:69:a2:36:
0c:87:87:fd:dd:02:ae:65:34:5f:ee:69:a4:f1:76:
7d:33:a2:11:74:e8:ad:ae:a8:03:b3:2a:fd:c0:5b:
cd:6b:c5:d5:99:18:ba:ce:82:d0:ca:b9:fa:ce:fd:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:C4:07:16:91:4A:1C:20:4E:6E:53:AA:22:86:1D:65:96:00:94
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:88:48:23:5f:7f:42:9d:71:bc:42:c6:80:1e:a1:43:6f:45:
98:f2:cb:07:b1:f1:d8:37:36:b8:77:f6:6c:00:1e:10:c8:0e:
b0:36:a4:e2:cc:b4:37:04:dd:b6:31:dd:70:9e:47:59:bf:c4:
a3:d5:d8:c9:bb:d1:37:ff:79:b1:1d:4c:1a:00:55:d7:b5:37:
ab:41:bd:ae:9f:4f:07:46:c0:db:a9:23:41:83:db:9d:d3:ee:
8a:b1:b4:9d:29:26:c1:bb:0d:21:38:fe:0b:34:28:ae:84:72:
06:e2:86:92:8c:3f:ed:fd:7d:3e:b1:65:f5:10:7c:82:d8:0b:
ad:e1:a9:75:bd:c5:ee:0b:0b:cc:7f:35:50:19:75:49:8b:c7:
e4:2a:85:10:ee:bb:9e:c6:8c:3d:08:09:28:97:ca:93:f6:f6:
0e:0c:41:d5:18:7a:b2:88:ab:22:24:c7:9d:26:9b:39:d1:89:
77:01:f7:28:d8:a9:ed:0f:86:99:5b:49:33:6e:86:eb:cb:83:
c9:39:72:c3:f7:05:f0:5f:01:b0:e0:5c:8b:8d:93:4f:a3:96:
d9:da:88:c5:4c:c8:0d:7f:cc:be:ed:9a:6b:44:db:0d:35:35:
26:fe:48:5e:ba:a6:c6:c2:cb:d2:14:48:72:da:9c:81:0d:81:
f9:41:8c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RG/UStuMI8AIuGaEWcXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDEwMDk0M2E4NzA4MDI4YmU0MGQ0ZmE0ZjI5YzlhZDlj
YzU2OGIwHhcNMjUwNDI3MjIwMDUwWhcNMjUwNDI4MjIwMDUwWjAzMTEwLwYDVQQD
EyhlMjM3YzQwNzE2OTE0YTFjMjA0ZTZlNTNhYTIyODYxZDY1OTYwMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxa3b7oc4lkRrQrF+T0k6pwThiLB
uDoG1Il38Snepyxi0sYxU1ihVbkGEJFI99ye7IxQm2e9Gl16LCWgcf0c7NmjSblU
eYIahb4UmeNHwzknOdqt41N5rPonpevVA9fHx9NgovJxf75jJrZMecTUqwSsCA4t
F9lhgQzBv7Jo56Ap6H5t5Xd+Ie4GUe9a8oxmIwSlK/54Iw/x6+PsV+Hh5WpsHQDI
d0peuFlyIHgrcZwmH0YrAg+YKI+P3Itz4varROAOnp/uwlSIJHiVvYhpojYMh4f9
3QKuZTRf7mmk8XZ9M6IRdOitrqgDsyr9wFvNa8XVmRi6zoLQyrn6zv2CvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI3xAcWkUocIE5uU6oihh1llgCUMB8GA1UdIwQY
MBaAFBoBAJQ6hwgCi+QNT6TynJrZzFaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMt
ZDZiY2U3YzgzMWNlLzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMtZDZiY2U3YzgzMWNl
LzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArohII19/
Qp1xvELGgB6hQ29FmPLLB7Hx2Dc2uHf2bAAeEMgOsDak4sy0NwTdtjHdcJ5HWb/E
o9XYybvRN/95sR1MGgBV17U3q0G9rp9PB0bA26kjQYPbndPuirG0nSkmwbsNITj+
CzQoroRyBuKGkow/7f19PrFl9RB8gtgLreGpdb3F7gsLzH81UBl1SYvH5CqFEO67
nsaMPQgJKJfKk/b2DgxB1Rh6soirIiTHnSabOdGJdwH3KNip7Q+GmVtJM26G68uD
yTlyw/cF8F8BsOBci42TT6OW2dqIxUzIDX/Mvu2aa0TbDTU1Jv5IXrqmxsLL0hRI
ctqcgQ2B+UGMwg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:11:03 2025 by rpki-client