Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
File: GqwOVjNDfnAN-YWImWKGzydis5c.mft (raw, json)
Hash identifier: B0RwvUcL3/+gkUNKtUqoQAt6V2ZbJO8CV05zdmlHVi4=
Subject key identifier: 10:77:84:D3:79:23:F0:8B:08:22:D0:21:88:C0:87:E7:B4:E6:7E:05
Authority key identifier: 1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
Certificate issuer: /CN=1aac0e5633437e700df98588996286cf2762b397
Certificate serial: 0197B8216DB0D29E105B7FFA3220AE7C63E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 20:01:27 +0000
Manifest this update: Sat 28 Jun 2025 20:01:27 +0000
Manifest next update: Sun 29 Jun 2025 20:01:27 +0000
Files and hashes: 1: GqwOVjNDfnAN-YWImWKGzydis5c.crl (hash: zpU5/gK7jCAJyqDemnjDeFyLvwCb1Uh66y5A17cuTZ8=)
2: Z7scd0bqOcooSWNO6P1-J8lD1ZI.roa (hash: KdiHC1KssZd8y+s+NZVmdEHh2GbufRCimiylYpM1VS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:6d:b0:d2:9e:10:5b:7f:fa:32:20:ae:7c:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac0e5633437e700df98588996286cf2762b397
Validity
Not Before: Jun 28 20:01:27 2025 GMT
Not After : Jun 29 20:01:27 2025 GMT
Subject: CN=107784d37923f08b0822d02188c087e7b4e67e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:09:4d:44:e5:01:8a:b4:63:f1:0e:d4:05:
e1:49:27:1e:9e:1d:b8:b8:43:7d:62:ba:06:a5:98:
94:22:7f:e7:52:90:8e:10:fe:15:43:83:cb:a5:9e:
2d:a0:75:9a:c0:df:b0:61:9d:d9:9f:01:e9:3d:97:
88:a3:82:09:fc:09:5d:48:11:bb:c6:5f:7d:dc:d7:
7a:e4:a8:8a:9e:23:60:ea:8e:f0:38:be:05:38:dc:
84:88:33:65:32:2f:72:a1:66:f1:df:2d:66:05:5a:
81:58:89:29:01:3d:0f:d8:dd:0c:9a:80:d2:9f:ab:
44:30:ad:cb:01:1c:d3:26:09:03:be:6a:5b:67:6a:
24:3b:ba:db:66:b6:6c:78:ea:a8:61:d6:72:0e:ae:
2d:1b:e5:21:52:e1:1b:d0:a8:81:6e:e6:69:2e:02:
b2:ee:cb:23:58:fb:d6:df:ee:b0:63:82:bf:ff:8b:
88:95:4b:a4:29:d0:01:b5:15:b6:ad:64:bf:67:41:
9a:7d:18:e2:22:b1:a9:b8:87:16:4e:00:63:5f:f7:
db:21:03:2a:3c:fd:c5:b6:3a:f1:d6:4d:de:b2:da:
6b:df:eb:4d:22:08:7e:2a:73:61:fb:b9:4d:28:e6:
c5:60:26:79:f1:cf:0b:60:ba:34:92:24:9d:c3:ec:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:77:84:D3:79:23:F0:8B:08:22:D0:21:88:C0:87:E7:B4:E6:7E:05
X509v3 Authority Key Identifier:
keyid:1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3a:68:e8:d6:bb:81:95:d9:75:72:dc:8c:c8:05:8c:a8:32:
59:6b:16:b0:09:a1:27:4a:50:cc:43:83:1c:f3:67:15:75:f3:
5f:b3:da:b6:2e:a5:83:8a:91:ca:c3:63:31:07:3a:64:f3:a7:
80:30:a1:1f:83:e5:6c:3f:76:94:df:f4:9f:d1:6d:5c:88:5e:
ff:7f:51:55:0a:7b:2c:44:bf:0c:da:d6:3e:4a:66:43:b4:51:
d9:9f:9b:01:91:d7:1a:e4:b4:75:52:ed:12:7d:e1:75:07:bb:
bb:e9:60:7a:46:c9:64:7b:89:20:f3:cb:42:36:0c:d0:2e:4d:
64:f2:39:ba:37:16:77:eb:3b:05:36:81:8a:56:ac:69:5f:32:
52:5b:f3:7e:cc:1f:c3:9f:62:ef:db:1e:00:77:f6:8e:ff:b2:
cd:69:15:06:87:3f:9e:18:36:6e:d7:c3:7a:d2:02:ca:7d:c1:
4a:c8:91:84:54:3a:49:b3:24:6b:6f:f8:11:41:7c:20:34:fd:
fd:b0:20:8e:fa:5c:ad:c7:2c:6f:f6:db:c6:3a:0c:0f:5f:93:
0f:9e:f2:e2:cb:81:05:80:c4:27:3f:84:68:34:cc:e1:a9:af:
b1:27:8f:00:b2:bf:ea:41:18:61:86:bf:85:a9:78:92:d4:2f:
c2:9d:75:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IW2w0p4QW3/6MiCufGPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWMwZTU2MzM0MzdlNzAwZGY5ODU4ODk5NjI4NmNmMjc2
MmIzOTcwHhcNMjUwNjI4MjAwMTI3WhcNMjUwNjI5MjAwMTI3WjAzMTEwLwYDVQQD
EygxMDc3ODRkMzc5MjNmMDhiMDgyMmQwMjE4OGMwODdlN2I0ZTY3ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWkJTUTlAYq0Y/EO1AXhSScenh24
uEN9YroGpZiUIn/nUpCOEP4VQ4PLpZ4toHWawN+wYZ3ZnwHpPZeIo4IJ/AldSBG7
xl993Nd65KiKniNg6o7wOL4FONyEiDNlMi9yoWbx3y1mBVqBWIkpAT0P2N0MmoDS
n6tEMK3LARzTJgkDvmpbZ2okO7rbZrZseOqoYdZyDq4tG+UhUuEb0KiBbuZpLgKy
7ssjWPvW3+6wY4K//4uIlUukKdABtRW2rWS/Z0GafRjiIrGpuIcWTgBjX/fbIQMq
PP3Ftjrx1k3estpr3+tNIgh+KnNh+7lNKObFYCZ58c8LYLo0kiSdw+w29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB3hNN5I/CLCCLQIYjAh+e05n4FMB8GA1UdIwQY
MBaAFBqsDlYzQ35wDfmFiJlihs8nYrOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYt
NTNjZDAyNjllYjU1LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYtNTNjZDAyNjllYjU1
LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzpo6Na7
gZXZdXLcjMgFjKgyWWsWsAmhJ0pQzEODHPNnFXXzX7Pati6lg4qRysNjMQc6ZPOn
gDChH4PlbD92lN/0n9FtXIhe/39RVQp7LES/DNrWPkpmQ7RR2Z+bAZHXGuS0dVLt
En3hdQe7u+lgekbJZHuJIPPLQjYM0C5NZPI5ujcWd+s7BTaBilasaV8yUlvzfswf
w59i79seAHf2jv+yzWkVBoc/nhg2btfDetICyn3BSsiRhFQ6SbMka2/4EUF8IDT9
/bAgjvpcrccsb/bbxjoMD1+TD57y4suBBYDEJz+EaDTM4amvsSePALK/6kEYYYa/
hal4ktQvwp11Rg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:33 2025 by rpki-client