Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: fzc7O/KshRsk438L7thfhsbabD3WFgqhbkyrFFT/p7U=
Subject key identifier: 0B:95:1C:16:F5:C4:A0:D5:F0:F4:AF:A0:EE:5E:66:B8:DA:E3:B0:1E
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 0197B7B37FD23B90B943F8EDE501ED9BE975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 08BB
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: fwVyH/wjV3DBjkakndqazflh01OXbukHunW/SzMFcfs=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7f:d2:3b:90:b9:43:f8:ed:e5:01:ed:9b:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=0b951c16f5c4a0d5f0f4afa0ee5e66b8dae3b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:6b:94:e3:6c:41:bf:7b:3e:f3:3f:12:d1:
ec:13:14:2c:d4:68:5d:50:e3:be:f7:5e:30:73:a2:
61:25:07:0a:1d:0d:5a:23:57:a5:20:ff:77:57:54:
8e:cd:67:55:d4:ac:d5:9e:74:be:b6:20:8d:bf:50:
49:9d:51:10:bd:16:c8:61:52:67:ac:35:ee:ae:6b:
cf:d9:9c:3e:5d:a9:eb:b0:e9:b4:5d:94:52:f3:10:
21:4b:05:93:5f:3c:d5:71:e8:13:8e:74:80:eb:7e:
f0:c1:46:44:dd:e5:e6:b9:f2:0a:20:6e:a4:43:66:
5d:cd:c0:1f:21:dd:85:2b:80:93:13:bd:b3:cd:dd:
ca:fc:78:82:36:ec:32:ef:b4:17:10:ed:ea:bd:df:
2c:cd:f3:d4:1e:8d:87:9a:d1:27:0d:ee:0d:12:ca:
8d:3e:fb:d1:ad:5d:00:25:9a:c7:81:07:7b:04:92:
a4:ba:46:b8:c7:d6:b1:70:08:7b:48:d2:a3:64:b5:
b7:ca:24:2a:d2:6d:e2:9e:9f:75:e7:53:86:9b:13:
07:d9:0b:e3:14:41:6d:97:29:ef:9a:7d:dd:bb:5f:
7d:e0:8a:62:f1:0f:9f:ed:c1:68:0e:dc:3a:26:fd:
cb:b6:18:cb:1c:9a:fc:44:16:37:f8:9c:85:0a:71:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:1C:16:F5:C4:A0:D5:F0:F4:AF:A0:EE:5E:66:B8:DA:E3:B0:1E
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:17:2c:4d:2d:fd:14:80:6d:b4:c2:5f:8f:be:53:06:75:
84:f2:5d:61:86:b5:5d:f6:07:41:76:3e:b2:a3:2e:dc:f2:9b:
41:4b:ad:e8:26:dd:0c:f5:6b:67:b7:b9:04:d5:fd:d6:5f:de:
1c:8c:06:e6:ae:61:01:84:ca:0f:c2:18:06:c0:69:8a:40:96:
42:16:dd:ee:90:d3:91:2c:2e:e9:98:16:f0:28:d3:31:a5:e7:
8b:04:40:d7:71:3f:b5:03:f2:53:69:13:67:2d:45:77:7a:ae:
4d:ac:01:c0:ca:b3:a2:7c:d8:f2:9c:89:ec:33:e0:c3:50:6d:
2e:ab:cc:a4:4b:27:e7:d7:c1:84:b1:e8:62:95:f4:d0:93:1e:
89:e5:60:6c:eb:b3:ed:43:b7:8d:d9:4b:78:14:ea:43:fe:8d:
09:1b:89:9e:15:df:bd:38:fa:46:61:57:a6:62:29:c4:00:b3:
ef:83:64:71:94:2d:3b:52:57:fa:53:3f:0c:7e:f0:e2:ea:10:
d2:66:ac:b1:eb:bf:9c:da:04:a6:6a:55:bc:53:5d:18:6a:1f:
f5:66:6c:f8:20:27:de:1c:77:d4:e0:3f:f1:d1:86:7d:7a:7e:
f6:f5:26:04:f9:ea:a8:22:12:9f:41:09:f1:ae:be:31:82:95:
a8:9c:e6:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3/SO5C5Q/jt5QHtm+l1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTk5N2E4YmZjNjk4YjhlYjllODcyOGVjYWYxMmE1Mjdi
MzU3ZGYwHhcNMjUwNjI4MTgwMTIzWhcNMjUwNjI5MTgwMTIzWjAzMTEwLwYDVQQD
EygwYjk1MWMxNmY1YzRhMGQ1ZjBmNGFmYTBlZTVlNjZiOGRhZTNiMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ldrlONsQb97PvM/EtHsExQs1Ghd
UOO+914wc6JhJQcKHQ1aI1elIP93V1SOzWdV1KzVnnS+tiCNv1BJnVEQvRbIYVJn
rDXurmvP2Zw+XanrsOm0XZRS8xAhSwWTXzzVcegTjnSA637wwUZE3eXmufIKIG6k
Q2ZdzcAfId2FK4CTE72zzd3K/HiCNuwy77QXEO3qvd8szfPUHo2HmtEnDe4NEsqN
PvvRrV0AJZrHgQd7BJKkuka4x9axcAh7SNKjZLW3yiQq0m3inp9151OGmxMH2Qvj
FEFtlynvmn3du1994Ipi8Q+f7cFoDtw6Jv3LthjLHJr8RBY3+JyFCnEd0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuVHBb1xKDV8PSvoO5eZrja47AeMB8GA1UdIwQY
MBaAFBlZl6i/xpi4656HKOyvEqUns1ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2Ut
MDkyMTAyMTI3MTRjLzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2UtMDkyMTAyMTI3MTRj
LzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY8XLE0t
/RSAbbTCX4++UwZ1hPJdYYa1XfYHQXY+sqMu3PKbQUut6CbdDPVrZ7e5BNX91l/e
HIwG5q5hAYTKD8IYBsBpikCWQhbd7pDTkSwu6ZgW8CjTMaXniwRA13E/tQPyU2kT
Zy1Fd3quTawBwMqzonzY8pyJ7DPgw1BtLqvMpEsn59fBhLHoYpX00JMeieVgbOuz
7UO3jdlLeBTqQ/6NCRuJnhXfvTj6RmFXpmIpxACz74NkcZQtO1JX+lM/DH7w4uoQ
0masseu/nNoEpmpVvFNdGGof9WZs+CAn3hx31OA/8dGGfXp+9vUmBPnqqCISn0EJ
8a6+MYKVqJzmKg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:02 2025 by rpki-client