Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: GzOqmaLWoDv3bZ21N8tFqEb4iIdc66ytC9nedOGOE+I=
Subject key identifier: DE:05:F7:E6:5A:04:DA:C7:CE:B4:73:67:66:CD:58:78:51:DC:73:F8
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 0197B5FC09A232A9D4B1329E868A031E0247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 14F3
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: 6ku7zJw9uvuarOug22xnSi+U6rZu0NN2qYAe2xpk7b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:09:a2:32:a9:d4:b1:32:9e:86:8a:03:1e:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=de05f7e65a04dac7ceb4736766cd587851dc73f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:9d:e6:10:cd:51:7f:5d:bb:c7:96:0b:20:
3a:42:76:8e:22:99:4c:78:1c:10:ca:55:8b:ff:ea:
cb:c5:bb:be:63:18:52:5a:15:e3:d4:0f:22:cf:43:
70:00:71:92:72:83:0f:08:39:2d:33:3c:96:18:d2:
ee:c1:06:31:33:a9:e3:6f:5a:fb:b4:a7:a3:1d:3c:
04:28:6c:21:57:e0:45:75:56:33:93:35:86:f7:e2:
c0:da:5a:d5:0f:10:a0:6d:db:95:b8:a3:f2:37:78:
63:e2:04:49:08:33:ee:62:82:a6:d1:09:60:4e:ee:
b8:56:c3:0e:f5:a7:db:86:91:fa:5f:22:14:0c:a8:
74:e7:e1:f6:2b:ee:df:9d:91:1e:db:61:5b:b6:b8:
9e:ff:4d:4b:98:df:20:be:8c:d5:84:67:9f:8b:8f:
25:3c:2a:15:6e:40:25:d4:cd:7a:ff:6c:9a:b9:92:
80:52:cc:18:5b:90:ab:46:5e:28:0f:c8:c0:4e:05:
24:d7:12:e1:55:33:46:93:14:6c:82:74:22:47:77:
11:f1:1c:b4:a8:6f:39:9b:5c:15:c6:b4:96:46:03:
fc:d0:27:e3:2c:b4:07:c0:f3:17:8d:49:f2:9b:97:
27:8d:ee:8e:13:28:b5:f9:9a:7c:87:81:4d:22:b8:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:F7:E6:5A:04:DA:C7:CE:B4:73:67:66:CD:58:78:51:DC:73:F8
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:59:06:ab:7c:c3:1a:14:74:44:9b:3f:df:a3:a9:94:eb:dd:
1f:65:17:9c:31:5d:18:c2:24:c3:ee:48:c3:ee:86:f3:db:8d:
86:bb:cc:09:55:49:9a:1e:62:12:86:19:f5:11:70:2c:3f:52:
ec:ad:72:cf:e2:1c:6e:82:cf:02:02:15:69:7e:03:51:f8:c8:
b1:66:de:5f:49:08:b8:fc:8d:94:8a:1c:d8:15:7a:9f:a7:f2:
5e:8e:76:55:79:79:24:f3:ec:20:01:23:bf:d1:9c:31:a8:f7:
f7:70:19:1b:5f:48:8b:ec:a4:83:e0:23:f6:a7:04:30:f3:d7:
ff:02:1c:ff:ad:97:d2:75:03:30:21:46:e8:e5:83:e6:0a:1a:
b2:7c:4f:d3:8a:9d:38:2f:d7:b2:cc:98:7d:38:62:37:de:a0:
dd:45:83:2e:a8:aa:c6:db:c2:97:6b:99:f6:5e:0f:95:32:f4:
3b:d2:dd:74:d6:e7:ff:65:af:0d:55:5f:f2:a3:a2:ce:6e:c3:
5e:5a:1c:46:a0:93:35:9c:8f:b8:fd:dd:6b:82:4c:5b:04:9f:
cd:71:1d:11:93:1f:e1:01:81:b9:11:05:d4:7b:9c:ac:ae:36:
69:55:61:6d:f7:0d:69:a3:cb:fa:35:11:8a:91:0b:5a:cd:bc:
72:05:32:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/AmiMqnUsTKehooDHgJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODdiYjY4NTljOTM4YzhiNjNlNWFhYTU2ZDkwN2JkMDQ0
NGUzY2UwHhcNMjUwNjI4MTAwMTIyWhcNMjUwNjI5MTAwMTIyWjAzMTEwLwYDVQQD
EyhkZTA1ZjdlNjVhMDRkYWM3Y2ViNDczNjc2NmNkNTg3ODUxZGM3M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyWd5hDNUX9du8eWCyA6QnaOIplM
eBwQylWL/+rLxbu+YxhSWhXj1A8iz0NwAHGScoMPCDktMzyWGNLuwQYxM6njb1r7
tKejHTwEKGwhV+BFdVYzkzWG9+LA2lrVDxCgbduVuKPyN3hj4gRJCDPuYoKm0Qlg
Tu64VsMO9afbhpH6XyIUDKh05+H2K+7fnZEe22Fbtrie/01LmN8gvozVhGefi48l
PCoVbkAl1M16/2yauZKAUswYW5CrRl4oD8jATgUk1xLhVTNGkxRsgnQiR3cR8Ry0
qG85m1wVxrSWRgP80CfjLLQHwPMXjUnym5cnje6OEyi1+Zp8h4FNIrhBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4F9+ZaBNrHzrRzZ2bNWHhR3HP4MB8GA1UdIwQY
MBaAFBmHu2hZyTjItj5aqlbZB70EROPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzIt
YmY0ZDQ1N2U5NTE4LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzItYmY0ZDQ1N2U5NTE4
LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1kGq3zD
GhR0RJs/36OplOvdH2UXnDFdGMIkw+5Iw+6G89uNhrvMCVVJmh5iEoYZ9RFwLD9S
7K1yz+IcboLPAgIVaX4DUfjIsWbeX0kIuPyNlIoc2BV6n6fyXo52VXl5JPPsIAEj
v9GcMaj393AZG19Ii+ykg+Aj9qcEMPPX/wIc/62X0nUDMCFG6OWD5goasnxP04qd
OC/XssyYfThiN96g3UWDLqiqxtvCl2uZ9l4PlTL0O9LddNbn/2WvDVVf8qOizm7D
XlocRqCTNZyPuP3da4JMWwSfzXEdEZMf4QGBuREF1HucrK42aVVhbfcNaaPL+jUR
ipELWs28cgUynQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:59 2025 by rpki-client