Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json)
Hash identifier: 459bgGnX94VyUcNzpAmc+TaJqsP/4ubRknS70959HRk=
Subject key identifier: 26:15:72:D7:79:4B:46:B1:7C:93:A2:77:CA:A1:B6:E2:61:86:46:07
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 0197B6A1D66F555C432DD57860F750C09433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
Manifest number: 0C31
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: 1WzwBtVTIRiRn5umda+mUy/BWOcNFCsp9FLHHi6JmGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d6:6f:55:5c:43:2d:d5:78:60:f7:50:c0:94:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=261572d7794b46b17c93a277caa1b6e261864607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:1a:59:05:e0:7e:32:01:e4:61:26:d7:55:
ba:56:d4:f0:52:5c:73:4c:23:f9:2d:ed:62:0d:8f:
9c:7c:6c:9f:c9:1a:ca:07:78:4c:bd:d0:50:f6:32:
3e:86:2a:05:40:22:7a:49:ca:64:26:3f:5c:d7:36:
eb:1d:a9:d6:0c:0c:44:e4:3c:5d:53:94:75:39:bf:
72:ba:53:26:46:63:c9:4f:8d:6b:fe:69:ce:85:fe:
76:8a:0f:79:b0:85:68:6c:d6:42:0f:b1:d2:c5:f1:
3e:72:c8:41:08:4a:75:a9:78:b2:63:f7:09:07:54:
7f:cc:34:f8:0e:64:fd:ca:fb:10:12:d6:63:ab:c8:
ee:41:a5:de:d2:37:39:45:67:d1:f3:fe:36:54:28:
51:49:c0:9c:2c:27:35:81:1c:f7:7f:8e:4e:39:0c:
0c:11:d7:e1:2e:85:45:ee:be:b5:3f:88:cb:75:31:
15:c2:5e:7e:b3:b6:e4:96:42:55:c7:bf:22:7b:27:
da:ef:81:09:40:e8:45:f2:c2:c7:4d:a5:b5:45:61:
a0:8b:ad:99:a2:1a:8f:90:37:8c:10:50:9d:48:2a:
50:b1:7f:6f:9f:07:f6:3b:8a:be:b2:29:15:ba:69:
1f:14:c5:ea:b3:25:6d:d2:b9:73:1d:ab:f8:c5:79:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:72:D7:79:4B:46:B1:7C:93:A2:77:CA:A1:B6:E2:61:86:46:07
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e9:b6:48:6f:cd:fb:13:3e:c0:b2:2c:12:ec:b1:0b:51:37:
e2:61:99:03:fe:0c:d2:30:69:08:eb:c7:bc:79:52:fe:0f:3d:
29:5c:bc:d9:31:36:9d:35:8d:a9:10:e6:89:32:42:7b:b8:49:
a5:2c:2f:04:84:b5:a5:4d:d0:3d:85:1b:5b:fd:fb:89:6d:79:
0b:08:aa:09:d0:5b:c0:56:8c:33:24:05:78:4c:25:32:b9:9a:
98:7c:21:e0:92:42:87:2e:63:c9:b2:24:00:00:13:e9:b6:05:
0b:8d:6b:8a:94:3a:58:63:57:ca:1e:ff:92:70:15:2e:ba:42:
72:96:a0:7b:f4:1e:b7:8c:48:4a:7d:ec:ca:d6:58:6d:97:b5:
22:83:23:2c:fc:7f:1f:da:70:35:b5:75:25:6b:f1:65:45:92:
16:04:59:ed:0a:85:b9:5a:81:fc:58:a1:c5:1d:8a:52:46:39:
c6:b7:2e:f1:09:e5:f1:4b:14:77:54:00:5d:4a:90:7b:50:ff:
0d:56:5b:a5:86:78:f7:ed:1e:eb:14:95:e0:03:c5:2d:26:56:
f8:79:a6:13:6b:44:29:e3:82:63:aa:51:20:17:5e:02:3d:f2:
68:0d:c1:dd:0a:f3:d6:76:db:87:74:f0:b7:60:8e:a6:52:0a:
96:b0:5b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2odZvVVxDLdV4YPdQwJQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTQ0NDUyNTk3MzJhYTY3MzZjMjQ4MjM0NDY1OTQ3ZmMy
Mzc0ZDAwHhcNMjUwNjI4MTMwMjI4WhcNMjUwNjI5MTMwMjI4WjAzMTEwLwYDVQQD
EygyNjE1NzJkNzc5NGI0NmIxN2M5M2EyNzdjYWExYjZlMjYxODY0NjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v4aWQXgfjIB5GEm11W6VtTwUlxz
TCP5Le1iDY+cfGyfyRrKB3hMvdBQ9jI+hioFQCJ6ScpkJj9c1zbrHanWDAxE5Dxd
U5R1Ob9yulMmRmPJT41r/mnOhf52ig95sIVobNZCD7HSxfE+cshBCEp1qXiyY/cJ
B1R/zDT4DmT9yvsQEtZjq8juQaXe0jc5RWfR8/42VChRScCcLCc1gRz3f45OOQwM
EdfhLoVF7r61P4jLdTEVwl5+s7bklkJVx78ieyfa74EJQOhF8sLHTaW1RWGgi62Z
ohqPkDeMEFCdSCpQsX9vnwf2O4q+sikVumkfFMXqsyVt0rlzHav4xXkOnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYVctd5S0axfJOid8qhtuJhhkYHMB8GA1UdIwQY
MBaAFBoURFJZcyqmc2wkgjRGWUf8I3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMt
MzgxZjIzZjE4M2Q3LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMtMzgxZjIzZjE4M2Q3
LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVem2SG/N
+xM+wLIsEuyxC1E34mGZA/4M0jBpCOvHvHlS/g89KVy82TE2nTWNqRDmiTJCe7hJ
pSwvBIS1pU3QPYUbW/37iW15CwiqCdBbwFaMMyQFeEwlMrmamHwh4JJChy5jybIk
AAAT6bYFC41ripQ6WGNXyh7/knAVLrpCcpage/Qet4xISn3sytZYbZe1IoMjLPx/
H9pwNbV1JWvxZUWSFgRZ7QqFuVqB/FihxR2KUkY5xrcu8Qnl8UsUd1QAXUqQe1D/
DVZbpYZ49+0e6xSV4APFLSZW+HmmE2tEKeOCY6pRIBdeAj3yaA3B3Qrz1nbbh3Tw
t2COplIKlrBb4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:00 2025 by rpki-client