Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: lrmXt4XAllv3R9ge+4HMlVF+FoOqToDmjb7R2m0mldM=
Subject key identifier: 4C:39:86:40:BB:00:58:61:08:15:30:EF:F5:04:8F:1C:FA:A8:58:EB
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019688B7219C215DFEA1C7226C53A63EF10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 22:00:25 +0000
Manifest this update: Wed 30 Apr 2025 22:00:25 +0000
Manifest next update: Thu 01 May 2025 22:00:25 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: QmauR1PtsihRvEInpH7ozEQLC4kDVMQ+TJoNk0j55p0=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:21:9c:21:5d:fe:a1:c7:22:6c:53:a6:3e:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Apr 30 22:00:25 2025 GMT
Not After : May 1 22:00:25 2025 GMT
Subject: CN=4c398640bb005861081530eff5048f1cfaa858eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:d7:8d:6b:e4:39:d1:12:87:39:2f:70:51:
89:8a:f4:5f:9c:13:ff:8c:39:2b:dc:0f:9b:9c:60:
65:22:94:40:98:5d:db:c9:37:0f:ab:78:02:19:ba:
33:21:dd:58:b1:a6:66:2b:d9:ee:c2:74:4d:f9:1a:
f4:98:27:aa:77:f8:c1:33:34:51:1e:fb:87:18:48:
b3:f5:46:f4:4d:a9:5b:55:bd:26:fb:cf:40:d2:8a:
c7:30:52:13:57:81:48:93:c3:f8:f7:58:ef:36:b6:
b9:2a:7b:2a:31:3e:97:e1:04:5c:09:6c:4d:b0:bf:
66:9f:17:d0:4c:58:66:e0:a8:c9:84:26:7e:bf:7e:
d6:82:72:e1:ac:bc:e6:a0:e0:9d:e8:dd:46:5e:65:
31:9f:08:84:8d:4c:57:de:63:36:eb:f0:a7:d0:c3:
cc:74:be:42:fa:28:54:41:22:1a:25:d3:16:9e:18:
5b:99:47:c2:aa:11:f6:d4:d1:44:98:08:8a:ad:4f:
37:43:0d:33:1b:65:11:f0:d6:a4:6e:b0:f0:fb:e9:
b3:2a:7a:e3:0f:19:ed:20:29:00:f9:50:60:ef:ca:
1f:15:04:78:ad:e5:14:1e:54:2d:26:8f:61:5e:ba:
29:f6:75:70:f9:93:2b:12:a1:bd:57:36:23:93:6b:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:39:86:40:BB:00:58:61:08:15:30:EF:F5:04:8F:1C:FA:A8:58:EB
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:78:1b:a5:58:a4:6e:0a:e0:e8:8f:03:c5:d0:26:37:3e:00:
7e:e9:de:62:64:4b:d2:38:a9:4f:28:dd:2e:ad:c3:90:07:d6:
f2:0b:68:5c:49:dc:55:bb:11:e7:20:54:9e:de:f6:73:af:31:
e5:66:73:d1:b1:7b:26:43:3b:a2:0f:a5:91:95:5f:ce:d4:70:
dc:3e:6c:8c:85:3b:9a:e9:f0:63:ab:25:d8:16:26:da:d1:d2:
c9:95:55:c9:74:3f:ea:1b:e9:c7:cc:eb:ce:a7:19:96:ea:1d:
b9:e7:e2:93:79:04:07:17:dd:1f:a6:47:e3:22:35:80:ff:f0:
03:17:e2:f5:bd:59:e4:38:65:5e:ed:68:d1:ae:71:a4:1b:78:
66:18:e0:8e:cd:eb:90:98:5e:8b:2d:d9:e8:af:b5:a0:a7:2f:
6f:0e:19:64:20:13:21:74:ab:d3:b0:7c:80:cb:97:b5:5d:44:
42:2a:e2:bc:86:f1:03:4d:ae:f9:cc:74:ce:a7:14:24:79:32:
42:27:17:e2:f0:47:4c:a9:b8:5f:93:0e:63:04:fb:b1:36:61:
72:f9:e5:f4:04:1e:af:63:92:df:68:dc:36:c3:8c:6a:7c:ba:
c8:eb:59:0a:62:ea:76:76:ad:0f:ad:e0:09:d3:0d:e5:5d:39:
ee:9e:53:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaItyGcIV3+occibFOmPvENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4
ZTJiYWIwHhcNMjUwNDMwMjIwMDI1WhcNMjUwNTAxMjIwMDI1WjAzMTEwLwYDVQQD
Eyg0YzM5ODY0MGJiMDA1ODYxMDgxNTMwZWZmNTA0OGYxY2ZhYTg1OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTjXjWvkOdEShzkvcFGJivRfnBP/
jDkr3A+bnGBlIpRAmF3byTcPq3gCGbozId1YsaZmK9nuwnRN+Rr0mCeqd/jBMzRR
HvuHGEiz9Ub0TalbVb0m+89A0orHMFITV4FIk8P491jvNra5KnsqMT6X4QRcCWxN
sL9mnxfQTFhm4KjJhCZ+v37WgnLhrLzmoOCd6N1GXmUxnwiEjUxX3mM26/Cn0MPM
dL5C+ihUQSIaJdMWnhhbmUfCqhH21NFEmAiKrU83Qw0zG2UR8NakbrDw++mzKnrj
DxntICkA+VBg78ofFQR4reUUHlQtJo9hXrop9nVw+ZMrEqG9VzYjk2uebQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw5hkC7AFhhCBUw7/UEjxz6qFjrMB8GA1UdIwQY
MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt
NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx
LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqngbpVik
bgrg6I8DxdAmNz4AfuneYmRL0jipTyjdLq3DkAfW8gtoXEncVbsR5yBUnt72c68x
5WZz0bF7JkM7og+lkZVfztRw3D5sjIU7munwY6sl2BYm2tHSyZVVyXQ/6hvpx8zr
zqcZluoduefik3kEBxfdH6ZH4yI1gP/wAxfi9b1Z5DhlXu1o0a5xpBt4Zhjgjs3r
kJheiy3Z6K+1oKcvbw4ZZCATIXSr07B8gMuXtV1EQirivIbxA02u+cx0zqcUJHky
QicX4vBHTKm4X5MOYwT7sTZhcvnl9AQer2OS32jcNsOMany6yOtZCmLqdnatD63g
CdMN5V057p5TVA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:37:28 2025 by rpki-client