Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: EeqILnFUyFnM+28Aninh994ppgu2d6M6Qbn0IpwC6/k=
Subject key identifier: 63:BE:77:85:53:77:1A:C7:75:AB:7F:46:20:FD:73:E3:EE:B2:CE:0B
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 0197B7EA9533A5A59BF9E73D5902BAE1EC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 1228
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: 37Q8n3DYoCkXd5yOzpDkuY8qsiVu/cFqTS8chodGNQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:95:33:a5:a5:9b:f9:e7:3d:59:02:ba:e1:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=63be778553771ac775ab7f4620fd73e3eeb2ce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:3c:1f:5e:27:6c:b1:15:aa:fc:92:e8:09:
5c:63:66:d9:ba:6f:ea:16:d8:de:26:7f:01:6a:56:
31:f6:74:39:1a:60:ce:11:78:ba:7f:57:78:bf:04:
d3:70:52:0a:20:6a:45:a4:f4:4d:2a:3a:16:b1:e9:
f3:aa:e6:34:66:39:36:d4:7f:5a:b4:a8:56:2a:4f:
2c:0d:b8:07:d3:8d:72:75:dc:f4:a3:9c:6c:6e:c0:
84:8e:e0:9d:3f:37:7b:84:13:cd:f3:54:6a:ca:d8:
e2:15:89:be:1d:9a:33:76:f5:a7:c1:02:ef:a5:01:
06:20:ac:43:02:8d:b4:b7:d7:06:5e:22:dc:a7:3f:
97:30:68:4c:32:11:ba:78:23:56:73:a6:f5:c0:51:
87:e0:91:1a:02:8e:63:f6:50:ef:66:4e:e4:56:c8:
a6:1f:4e:3b:c1:95:be:fb:34:f2:b4:f9:de:15:82:
19:c5:f0:92:75:66:76:7e:c1:09:b1:6a:b2:af:d9:
22:61:d6:b1:31:91:ad:dc:ac:6b:97:1d:ed:c5:76:
12:bd:30:dd:f6:28:73:33:51:9b:31:e3:5d:53:d8:
60:b7:8a:8c:42:df:be:f1:3b:fe:39:d4:f9:63:ed:
cd:08:c7:be:a9:2d:9a:38:65:a1:57:3b:78:ef:f5:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:77:85:53:77:1A:C7:75:AB:7F:46:20:FD:73:E3:EE:B2:CE:0B
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:32:bd:3f:0a:e7:3f:8d:2c:d7:ca:b6:bb:be:b3:83:03:fa:
e9:3e:26:84:df:5d:a2:82:36:c2:41:ba:a7:47:77:30:4e:78:
d7:bb:4a:64:6d:fb:c4:de:22:e1:19:87:1c:c6:4f:ff:87:00:
95:00:55:73:7f:88:15:e1:bd:81:2e:22:d5:28:c5:2c:11:0c:
d9:24:51:a4:4c:22:60:f1:8e:f2:14:81:b3:30:3d:6b:ce:28:
4b:d0:5c:ec:38:dc:ba:77:aa:4f:fc:ef:d5:44:b7:4c:e3:e5:
f4:f0:eb:7e:f2:24:71:c0:03:8c:35:1f:a0:d2:68:bd:0c:15:
65:ec:49:93:fc:03:06:15:ad:c1:f0:9f:f5:2b:c7:e3:21:5d:
14:92:cf:51:0c:1f:2d:ff:19:3a:a2:fa:10:96:4b:90:9a:3c:
1c:ee:83:89:d9:3a:f1:24:69:44:d7:f3:5e:8a:3b:42:9f:71:
b3:74:14:36:c2:76:cb:79:35:df:13:d7:1f:95:7b:d5:41:54:
4c:3e:c5:58:16:da:64:91:99:87:92:d3:c9:b6:7a:6a:89:39:
20:3e:21:1f:7b:2a:b5:fc:8b:44:d7:9a:f1:0b:e3:cd:cf:2e:
65:aa:e3:f1:74:56:46:4f:5e:9c:fc:88:e7:b6:2a:19:3b:11:
43:3a:09:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36pUzpaWb+ec9WQK64ew9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0
MDhkOTAwHhcNMjUwNjI4MTkwMTMzWhcNMjUwNjI5MTkwMTMzWjAzMTEwLwYDVQQD
Eyg2M2JlNzc4NTUzNzcxYWM3NzVhYjdmNDYyMGZkNzNlM2VlYjJjZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwU8H14nbLEVqvyS6AlcY2bZum/q
FtjeJn8BalYx9nQ5GmDOEXi6f1d4vwTTcFIKIGpFpPRNKjoWsenzquY0Zjk21H9a
tKhWKk8sDbgH041yddz0o5xsbsCEjuCdPzd7hBPN81RqytjiFYm+HZozdvWnwQLv
pQEGIKxDAo20t9cGXiLcpz+XMGhMMhG6eCNWc6b1wFGH4JEaAo5j9lDvZk7kVsim
H047wZW++zTytPneFYIZxfCSdWZ2fsEJsWqyr9kiYdaxMZGt3Kxrlx3txXYSvTDd
9ihzM1GbMeNdU9hgt4qMQt++8Tv+OdT5Y+3NCMe+qS2aOGWhVzt47/UKMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO+d4VTdxrHdat/RiD9c+Puss4LMB8GA1UdIwQY
MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt
ZDA3OTA2YTg0YjFkLzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk
LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjK9Pwrn
P40s18q2u76zgwP66T4mhN9dooI2wkG6p0d3ME5417tKZG37xN4i4RmHHMZP/4cA
lQBVc3+IFeG9gS4i1SjFLBEM2SRRpEwiYPGO8hSBszA9a84oS9Bc7DjcuneqT/zv
1US3TOPl9PDrfvIkccADjDUfoNJovQwVZexJk/wDBhWtwfCf9SvH4yFdFJLPUQwf
Lf8ZOqL6EJZLkJo8HO6Didk68SRpRNfzXoo7Qp9xs3QUNsJ2y3k13xPXH5V71UFU
TD7FWBbaZJGZh5LTybZ6aok5ID4hH3sqtfyLRNea8Qvjzc8uZarj8XRWRk9enPyI
57YqGTsRQzoJxA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:14 2025 by rpki-client