
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: e2cXsT8kW++dftK17q3Ys9GiMnQvHSdC8g1PNtvvvnU=
Subject key identifier: 26:38:F6:98:53:C9:CB:4A:07:1E:3C:1D:F0:FD:23:5A:B3:9D:D3:59
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 0197B745143E97B108AF35AEF07EB9FEA445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 1455
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: mew6yqogBWF0AkzYZL4RgvKhqS4GBQVP62mz0fTg85I=)
2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:14:3e:97:b1:08:af:35:ae:f0:7e:b9:fe:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=2638f69853c9cb4a071e3c1df0fd235ab39dd359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:f6:56:c0:17:b2:71:98:9c:d5:5f:83:35:
7f:b4:06:e0:a5:88:bb:72:e4:45:0a:41:77:e8:9c:
df:4f:8e:86:b6:96:21:87:21:cf:08:40:b3:c6:bf:
e9:37:30:74:7b:30:f8:67:29:81:d5:7c:e2:31:0e:
62:57:43:de:49:5c:d0:7d:10:16:a0:8b:ad:06:b6:
07:ab:0e:88:62:f6:dc:3d:a9:17:9c:8d:ab:fc:0c:
6e:60:bb:f0:59:09:56:2b:df:73:ea:2a:d1:1c:9e:
c6:5f:e5:88:10:43:b2:54:92:a7:ec:b3:d8:fc:36:
92:28:51:bc:a0:27:4d:8c:e8:7a:9c:2e:9e:ac:ac:
53:17:eb:7b:26:0a:d8:d1:aa:cc:7e:c1:fb:95:72:
bc:d8:e4:37:a2:66:4c:b7:57:36:91:8b:1c:cb:14:
a8:0f:dd:df:99:1f:24:13:d9:a5:db:23:f1:88:be:
88:be:b9:20:6f:dc:19:72:5c:86:68:7c:39:37:d7:
0c:38:96:6e:53:8d:1c:2e:5f:dd:a3:96:55:f2:95:
a9:72:d6:d1:57:ab:2d:06:90:cb:4f:68:1e:e6:1c:
c5:a5:52:54:ed:d8:ab:e5:14:63:f2:2d:60:a7:5f:
88:be:d8:8a:07:70:92:ce:80:d7:6e:ff:07:95:be:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:F6:98:53:C9:CB:4A:07:1E:3C:1D:F0:FD:23:5A:B3:9D:D3:59
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:48:10:67:b2:95:e6:64:aa:02:3f:dc:fc:ff:55:e5:d9:e5:
ed:ba:e8:e2:44:9e:cc:e6:99:2f:93:ad:59:90:07:a2:12:79:
41:19:63:f7:1e:e3:c4:3a:43:77:a9:fd:f2:c9:6a:a1:5a:1e:
7d:dd:77:3b:bb:93:6d:46:42:f6:5b:47:ef:38:15:b9:85:98:
bf:84:e3:9c:18:07:1b:51:c8:f0:26:b2:63:a0:13:78:43:c6:
d6:f6:c0:23:83:bf:27:c8:a4:53:4d:bb:f7:8c:1e:47:71:32:
99:77:44:37:0a:34:99:9f:db:20:77:3f:fc:8b:a0:1c:7e:18:
85:fd:87:7c:0a:69:39:54:90:d5:97:5a:5e:92:8a:7b:a6:9e:
1b:52:af:37:3f:48:88:70:22:18:06:95:4a:f5:1c:61:3b:c4:
da:d8:83:01:a4:15:17:4d:58:eb:a6:14:b0:74:f1:3d:85:db:
e3:74:59:91:aa:de:ee:d6:45:3e:68:39:f3:b7:7a:de:f7:e6:
83:c6:4e:5e:55:48:4c:91:6a:6f:19:08:59:45:b6:d2:f9:e8:
83:9b:2b:98:ee:92:09:86:eb:76:91:c4:51:7e:92:8e:f5:25:
bc:c4:1c:e5:18:26:da:fb:bd:b8:92:82:34:3c:e2:44:5f:24:
24:a0:c9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRQ+l7EIrzWu8H65/qRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjVlMDRiNjU1NWYxZTJjOTJkN2E0MWFjMTA2YTc1ZGVh
OTI4YTIwHhcNMjUwNjI4MTYwMDQ3WhcNMjUwNjI5MTYwMDQ3WjAzMTEwLwYDVQQD
EygyNjM4ZjY5ODUzYzljYjRhMDcxZTNjMWRmMGZkMjM1YWIzOWRkMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR32VsAXsnGYnNVfgzV/tAbgpYi7
cuRFCkF36JzfT46GtpYhhyHPCECzxr/pNzB0ezD4ZymB1XziMQ5iV0PeSVzQfRAW
oIutBrYHqw6IYvbcPakXnI2r/AxuYLvwWQlWK99z6irRHJ7GX+WIEEOyVJKn7LPY
/DaSKFG8oCdNjOh6nC6erKxTF+t7JgrY0arMfsH7lXK82OQ3omZMt1c2kYscyxSo
D93fmR8kE9ml2yPxiL6Ivrkgb9wZclyGaHw5N9cMOJZuU40cLl/do5ZV8pWpctbR
V6stBpDLT2ge5hzFpVJU7dir5RRj8i1gp1+IvtiKB3CSzoDXbv8Hlb4a0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY49phTyctKBx48HfD9I1qzndNZMB8GA1UdIwQY
MBaAFBn14EtlVfHiyS16QawQanXeqSiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgt
NzUzMDRmOWY1YzI0LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgtNzUzMDRmOWY1YzI0
LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUgQZ7KV
5mSqAj/c/P9V5dnl7bro4kSezOaZL5OtWZAHohJ5QRlj9x7jxDpDd6n98slqoVoe
fd13O7uTbUZC9ltH7zgVuYWYv4TjnBgHG1HI8CayY6ATeEPG1vbAI4O/J8ikU027
94weR3EymXdENwo0mZ/bIHc//IugHH4Yhf2HfAppOVSQ1ZdaXpKKe6aeG1KvNz9I
iHAiGAaVSvUcYTvE2tiDAaQVF01Y66YUsHTxPYXb43RZkare7tZFPmg587d63vfm
g8ZOXlVITJFqbxkIWUW20vnog5srmO6SCYbrdpHEUX6SjvUlvMQc5Rgm2vu9uJKC
NDziRF8kJKDJZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:31 2025 by rpki-client