Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: BdqgnwvXFtCNwXZjXiGkRSvRQmFedzdH80SdtHe11Zc=
Subject key identifier: 62:10:21:D1:C1:1A:85:F9:7C:0F:82:17:84:BD:A1:2D:32:E9:BB:FF
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 0197B7453EC630F438E555BC1C97D5B47328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 08A0
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: ABUy0U5k1Vfi9ONu0Jv7gkgYXmptJOAcl3J6gdqGqW8=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3e:c6:30:f4:38:e5:55:bc:1c:97:d5:b4:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=621021d1c11a85f97c0f821784bda12d32e9bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:00:3a:9a:c5:64:28:55:5d:5c:ec:f1:42:
a6:b4:0c:02:c7:05:26:19:cc:2e:b3:7d:10:ca:9f:
5c:77:c5:90:59:90:f3:d4:eb:9a:70:49:2e:56:fc:
ce:30:f1:d4:b3:ba:8b:81:37:5d:d7:2c:a7:3f:48:
67:44:1a:be:7f:00:10:2f:d5:b6:a5:99:d8:14:bc:
ae:72:46:fc:a5:8c:88:82:d4:0c:f2:8a:09:c2:02:
d1:ef:ed:a0:91:89:0e:97:de:6e:65:16:f3:d8:6f:
3a:28:69:0c:0f:67:75:6d:31:7f:3b:c5:8f:b2:ff:
0f:9f:d6:f9:b2:fc:66:a3:e0:95:d9:22:41:39:10:
ce:ad:69:2e:cc:cc:6e:5d:67:f0:15:e0:99:67:c0:
d2:45:7d:2d:74:bc:2e:fe:32:82:96:d5:25:fd:a3:
d2:36:be:a2:0b:b7:93:e0:1f:80:aa:b2:62:be:91:
11:ba:ee:72:39:ad:ba:21:47:d4:32:af:6a:e5:54:
ad:85:69:4b:a6:07:c7:d2:1f:bd:da:32:65:63:7b:
72:18:70:54:0e:f8:4e:b3:d3:fa:0a:36:db:8d:bb:
dd:29:6a:1d:d2:88:4d:c9:55:e6:ee:23:ff:e2:ac:
2f:fe:ac:4e:0b:05:b5:04:66:65:df:a5:b1:43:e0:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:10:21:D1:C1:1A:85:F9:7C:0F:82:17:84:BD:A1:2D:32:E9:BB:FF
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b5:e3:c2:71:07:c9:ee:af:99:77:f7:7c:33:02:6e:47:20:
42:e1:d6:50:af:71:82:f3:24:d5:0d:7f:32:aa:63:d1:66:79:
9a:50:de:a8:29:8d:b7:78:c4:96:61:4e:ca:98:a5:2c:f9:69:
d5:78:f5:80:36:c5:77:70:54:be:e2:6b:2c:f6:fa:b2:97:e6:
a9:0e:18:ea:98:89:e3:28:d1:cd:7e:d9:1a:c5:6c:47:3d:41:
40:9d:43:8a:e1:7a:bb:d9:5c:38:8e:bb:8a:01:99:8a:4c:10:
72:b9:3e:0d:ff:ee:49:7e:5a:25:c7:55:6a:bc:69:e0:e7:76:
50:dd:78:75:ea:5d:fd:83:a4:48:5f:22:85:1b:33:9e:66:1f:
a3:27:a2:76:7e:e9:ca:08:97:28:10:a5:7a:1f:17:9e:93:0e:
c6:b9:96:1f:54:58:9f:86:0c:d6:24:6e:89:1f:61:81:bd:f7:
03:f1:c5:f5:a8:c5:d2:ea:89:fb:56:1a:ac:92:e2:db:35:90:
76:eb:31:97:e0:22:71:4f:8f:5a:6a:c2:51:09:b6:03:f7:9a:
97:cb:b6:6d:20:89:cf:ad:af:78:3c:3b:4c:c4:71:e3:17:05:
bb:7c:53:13:b4:c2:35:8f:d8:2e:cf:71:d8:f9:cc:f0:da:02:
1b:f9:e8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RT7GMPQ45VW8HJfVtHMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy
NDg3YmQwHhcNMjUwNjI4MTYwMDU3WhcNMjUwNjI5MTYwMDU3WjAzMTEwLwYDVQQD
Eyg2MjEwMjFkMWMxMWE4NWY5N2MwZjgyMTc4NGJkYTEyZDMyZTliYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v8AOprFZChVXVzs8UKmtAwCxwUm
Gcwus30Qyp9cd8WQWZDz1OuacEkuVvzOMPHUs7qLgTdd1yynP0hnRBq+fwAQL9W2
pZnYFLyuckb8pYyIgtQM8ooJwgLR7+2gkYkOl95uZRbz2G86KGkMD2d1bTF/O8WP
sv8Pn9b5svxmo+CV2SJBORDOrWkuzMxuXWfwFeCZZ8DSRX0tdLwu/jKCltUl/aPS
Nr6iC7eT4B+AqrJivpERuu5yOa26IUfUMq9q5VSthWlLpgfH0h+92jJlY3tyGHBU
DvhOs9P6CjbbjbvdKWod0ohNyVXm7iP/4qwv/qxOCwW1BGZl36WxQ+CFjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIQIdHBGoX5fA+CF4S9oS0y6bv/MB8GA1UdIwQY
MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt
MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2
LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarXjwnEH
ye6vmXf3fDMCbkcgQuHWUK9xgvMk1Q1/Mqpj0WZ5mlDeqCmNt3jElmFOypilLPlp
1Xj1gDbFd3BUvuJrLPb6spfmqQ4Y6piJ4yjRzX7ZGsVsRz1BQJ1DiuF6u9lcOI67
igGZikwQcrk+Df/uSX5aJcdVarxp4Od2UN14depd/YOkSF8ihRsznmYfoyeidn7p
ygiXKBCleh8XnpMOxrmWH1RYn4YM1iRuiR9hgb33A/HF9ajF0uqJ+1YarJLi2zWQ
dusxl+AicU+PWmrCUQm2A/eal8u2bSCJz62veDw7TMRx4xcFu3xTE7TCNY/YLs9x
2PnM8NoCG/noPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:39 2025 by rpki-client