Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: TmdaPnumZmy5YEd3Ug8RdbMUQ1vQf0m3XDMRP5af2nc=
Subject key identifier: 90:EB:E1:F1:EF:C9:6E:D1:FC:23:41:41:5A:2A:CC:6F:10:4F:DD:85
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 01977B3057139CAC4FFB133813A120063325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0B1B
Signing time: Tue 17 Jun 2025 00:00:54 +0000
Manifest this update: Tue 17 Jun 2025 00:00:54 +0000
Manifest next update: Wed 18 Jun 2025 00:00:54 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: 0QF/ByO/zTipvGSXAOTAoctiscP6F6luRp6QsSL50C0=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:57:13:9c:ac:4f:fb:13:38:13:a1:20:06:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jun 17 00:00:54 2025 GMT
Not After : Jun 18 00:00:54 2025 GMT
Subject: CN=90ebe1f1efc96ed1fc2341415a2acc6f104fdd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:a6:12:eb:cd:8c:9e:22:f6:49:2c:df:8e:
7d:a1:9c:ef:b5:ca:f6:1e:35:f5:38:46:89:00:4d:
2c:87:1a:2d:8a:c2:cb:9e:68:87:f0:f1:8f:c0:da:
d1:29:e7:7b:ab:84:45:c4:71:75:04:70:34:cf:28:
1c:d5:d6:85:ca:88:23:8d:c9:44:d1:a7:c9:09:e7:
c1:20:d9:b4:96:a9:26:1e:60:46:7b:ae:36:70:79:
4d:05:f7:73:a5:84:43:42:8b:a3:ba:b6:c5:c0:55:
e8:d0:69:06:4c:c8:fd:88:c9:cc:85:2d:5e:be:ff:
f8:10:2e:b9:e0:dc:5e:e2:c0:0f:0d:60:79:b6:f1:
ae:3b:f0:74:1d:ce:51:6b:92:4f:74:34:fa:e3:9f:
e6:59:97:64:2d:f8:b5:2c:6f:06:9b:f4:4d:70:f1:
46:80:92:03:ec:ea:75:5b:8f:19:38:fd:69:b8:44:
f4:b0:03:94:d1:48:a7:07:a6:1f:32:7d:2c:6c:0d:
e8:a1:e6:8a:9d:d0:8c:46:5c:78:6a:76:81:7a:3a:
10:96:2d:50:c5:a8:1c:66:41:99:ac:cd:44:07:a4:
79:37:e4:98:89:bd:3e:92:78:c9:ca:49:dc:b4:bc:
c0:89:1f:52:15:9c:12:d8:41:64:61:7d:09:d4:1c:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:E1:F1:EF:C9:6E:D1:FC:23:41:41:5A:2A:CC:6F:10:4F:DD:85
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:34:3e:85:cb:e8:49:ca:75:07:94:b1:e6:e8:ad:cc:ea:
e8:6e:b8:cc:a0:9f:9a:c6:ac:cb:8c:d8:b6:c8:55:49:68:0b:
46:51:52:8f:f0:fe:74:ac:59:c8:84:7a:70:91:f3:4d:25:3c:
8a:a8:27:c2:e2:eb:94:94:7d:00:4a:ac:9b:de:6e:3c:66:63:
3a:70:7a:64:d4:23:19:e0:54:6d:3b:05:4d:a2:b3:cb:c1:17:
01:b3:14:da:2e:92:22:1b:66:6b:70:47:99:08:72:53:83:53:
d9:ac:5e:8f:6a:34:22:30:03:fe:58:6f:38:c0:2c:4e:53:76:
89:20:94:d3:88:e4:db:a7:32:96:20:a4:c1:57:44:8f:40:e7:
de:a2:01:01:da:c2:ca:7c:48:bb:90:93:34:7e:e4:80:11:35:
9e:bf:f4:e8:75:97:17:66:b8:0c:2b:de:83:37:9d:70:23:fe:
f8:19:43:e6:82:81:cd:a3:df:67:b4:53:cd:27:0e:56:aa:9f:
d1:cb:35:f4:34:dd:da:a8:d3:ea:4f:2a:e3:46:ed:73:f5:f2:
5e:69:74:48:5a:cf:53:28:ba:6a:fc:d0:23:54:49:55:73:44:
11:1a:d7:ce:88:ca:04:c5:d6:f7:51:8c:b0:5f:3a:23:7c:0c:
7f:d3:73:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7MFcTnKxP+xM4E6EgBjMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjUwNjE3MDAwMDU0WhcNMjUwNjE4MDAwMDU0WjAzMTEwLwYDVQQD
Eyg5MGViZTFmMWVmYzk2ZWQxZmMyMzQxNDE1YTJhY2M2ZjEwNGZkZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oamEuvNjJ4i9kks3459oZzvtcr2
HjX1OEaJAE0shxotisLLnmiH8PGPwNrRKed7q4RFxHF1BHA0zygc1daFyogjjclE
0afJCefBINm0lqkmHmBGe642cHlNBfdzpYRDQoujurbFwFXo0GkGTMj9iMnMhS1e
vv/4EC654Nxe4sAPDWB5tvGuO/B0Hc5Ra5JPdDT645/mWZdkLfi1LG8Gm/RNcPFG
gJID7Op1W48ZOP1puET0sAOU0UinB6YfMn0sbA3ooeaKndCMRlx4anaBejoQli1Q
xagcZkGZrM1EB6R5N+SYib0+knjJyknctLzAiR9SFZwS2EFkYX0J1Bz1kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDr4fHvyW7R/CNBQVoqzG8QT92FMB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW40PoXL
6EnKdQeUseborczq6G64zKCfmsasy4zYtshVSWgLRlFSj/D+dKxZyIR6cJHzTSU8
iqgnwuLrlJR9AEqsm95uPGZjOnB6ZNQjGeBUbTsFTaKzy8EXAbMU2i6SIhtma3BH
mQhyU4NT2axej2o0IjAD/lhvOMAsTlN2iSCU04jk26cyliCkwVdEj0Dn3qIBAdrC
ynxIu5CTNH7kgBE1nr/06HWXF2a4DCvegzedcCP++BlD5oKBzaPfZ7RTzScOVqqf
0cs19DTd2qjT6k8q40btc/XyXml0SFrPUyi6avzQI1RJVXNEERrXzojKBMXW91GM
sF86I3wMf9Nz6g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:11:26 2025 by rpki-client