Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json)
Hash identifier: Wx0VJkwBxgvy0p27s5dotgmSIBHcSbVtJEj0M8QIjXM=
Subject key identifier: 3F:0A:B3:BD:02:7F:5C:ED:3F:7F:54:F0:3A:64:04:AC:B7:EB:8B:49
Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e
Certificate serial: 0197B77CA26AC1B5919E2D1D1A2A81ABDB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
Manifest number: 09C2
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: mjMTaFQvgxNkzxnygrPOyqblx4CPTOPv2O2uhnVY2MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a2:6a:c1:b5:91:9e:2d:1d:1a:2a:81:ab:db:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=3f0ab3bd027f5ced3f7f54f03a6404acb7eb8b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:9a:44:80:42:4c:05:0f:a0:3f:be:35:85:
de:5c:be:ab:bb:4e:db:3d:b8:d5:1b:20:f1:8d:db:
72:08:1f:d5:2a:e1:15:45:13:5f:84:2a:a2:ed:92:
2e:c6:b8:72:ab:ba:77:e5:51:04:a6:02:b2:97:b3:
07:00:cb:44:10:8a:78:6e:a2:a5:5d:19:9f:40:11:
80:6f:70:c4:7c:fe:13:74:88:56:06:09:86:6e:88:
bd:f1:03:d5:44:fa:0a:a5:06:60:84:6a:e7:f5:c0:
74:6c:a5:fc:e9:58:4a:1a:80:1d:9a:19:78:6e:30:
48:db:64:f4:3e:8c:0f:90:c3:ce:6a:6c:11:cf:5e:
33:ef:d7:93:97:4b:09:73:c6:c0:1d:72:9d:72:06:
6a:5f:05:ea:73:4f:a0:17:00:e9:24:d1:48:c5:e2:
17:59:c4:3a:b9:27:4a:a6:38:88:80:8a:19:3c:4a:
d7:cc:b4:da:29:04:d6:6d:95:a7:b4:61:39:08:f1:
aa:1e:06:5c:bf:e3:f1:e3:24:b4:d0:62:9e:3d:b1:
17:a1:17:bb:94:c9:33:ca:08:79:83:70:97:90:07:
95:be:53:95:b2:12:49:6d:ef:46:4b:d0:79:5e:87:
b8:24:91:9a:d6:58:3c:39:85:5e:fd:ed:e4:5a:b5:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:B3:BD:02:7F:5C:ED:3F:7F:54:F0:3A:64:04:AC:B7:EB:8B:49
X509v3 Authority Key Identifier:
keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e2:9c:1a:a2:39:0c:ba:51:b2:ef:82:cc:bc:18:31:15:cc:
92:2b:87:9f:e7:73:b1:8d:3c:81:b2:5e:dd:57:78:11:2a:7a:
af:b2:46:b5:04:62:7e:89:fe:49:68:d9:ce:2a:7d:33:e5:c4:
65:7d:d8:de:95:06:f8:b8:65:8a:19:b2:ba:1a:88:67:68:86:
be:39:9d:bd:e1:a3:63:5f:6a:e8:d4:ab:94:f9:b6:3b:32:7b:
ab:0c:c4:66:e5:8e:d1:ad:70:28:19:27:a8:eb:42:bb:90:a9:
04:23:02:c9:a3:31:90:62:c8:ca:d3:46:27:b8:5e:ec:20:75:
17:46:34:4c:bd:6a:06:e0:7c:da:4b:b4:0a:a4:89:49:5c:38:
7b:5c:cd:ec:94:64:b3:c6:61:7d:ca:e6:34:ed:4d:20:f3:b8:
1c:df:9d:93:a0:53:de:a6:82:1f:03:6b:ea:8d:0d:3e:ed:5f:
a5:f3:ad:b4:2f:2b:24:a1:30:ff:bf:a5:98:95:3a:68:2f:a5:
b8:04:f1:76:3f:d4:7f:1e:fa:2c:00:b1:b7:13:3a:f8:1c:4d:
74:01:2d:5c:92:41:0e:18:e5:a0:bc:1d:4e:27:aa:2e:fe:22:
ec:68:f0:22:7f:b5:b3:c3:50:0d:e0:05:6b:63:9d:04:e7:7b:
43:b6:01:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKJqwbWRni0dGiqBq9t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMjcxZTJhZTYyMjg3NzU1MmI4OWRiYzQ3NGQ3YTEzMDU4
NGE0OGUwHhcNMjUwNjI4MTcwMTI3WhcNMjUwNjI5MTcwMTI3WjAzMTEwLwYDVQQD
EygzZjBhYjNiZDAyN2Y1Y2VkM2Y3ZjU0ZjAzYTY0MDRhY2I3ZWI4YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuGaRIBCTAUPoD++NYXeXL6ru07b
PbjVGyDxjdtyCB/VKuEVRRNfhCqi7ZIuxrhyq7p35VEEpgKyl7MHAMtEEIp4bqKl
XRmfQBGAb3DEfP4TdIhWBgmGboi98QPVRPoKpQZghGrn9cB0bKX86VhKGoAdmhl4
bjBI22T0PowPkMPOamwRz14z79eTl0sJc8bAHXKdcgZqXwXqc0+gFwDpJNFIxeIX
WcQ6uSdKpjiIgIoZPErXzLTaKQTWbZWntGE5CPGqHgZcv+Px4yS00GKePbEXoRe7
lMkzygh5g3CXkAeVvlOVshJJbe9GS9B5Xoe4JJGa1lg8OYVe/e3kWrVe3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8Ks70Cf1ztP39U8DpkBKy364tJMB8GA1UdIwQY
MBaAFBsnHirmIod1UridvEdNehMFhKSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMGQ2YTgtYzRlMi00N2UzLTkwZGYt
MWM4ZWQzNmQyNTY2LzEvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMGQ2YTgtYzRlMi00N2UzLTkwZGYtMWM4ZWQzNmQyNTY2
LzEvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuKcGqI5
DLpRsu+CzLwYMRXMkiuHn+dzsY08gbJe3Vd4ESp6r7JGtQRifon+SWjZzip9M+XE
ZX3Y3pUG+LhlihmyuhqIZ2iGvjmdveGjY19q6NSrlPm2OzJ7qwzEZuWO0a1wKBkn
qOtCu5CpBCMCyaMxkGLIytNGJ7he7CB1F0Y0TL1qBuB82ku0CqSJSVw4e1zN7JRk
s8ZhfcrmNO1NIPO4HN+dk6BT3qaCHwNr6o0NPu1fpfOttC8rJKEw/7+lmJU6aC+l
uATxdj/Ufx76LACxtxM6+BxNdAEtXJJBDhjloLwdTieqLv4i7GjwIn+1s8NQDeAF
a2OdBOd7Q7YBIw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:40 2025 by rpki-client