
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: 95T+uiOuQ+XwMWYKLCpRlJKxQtpQB5M4pi754im15WU=
Subject key identifier: 26:17:69:F0:8F:49:62:36:4F:43:58:0A:40:2A:30:15:25:0F:52:9B
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 0198D5BBBB4F92747E682E3217E4E15350E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 107A
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: YS2fTo95uegA86horjZBHV3BwjwTggwRjs+mK97L1zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bb:4f:92:74:7e:68:2e:32:17:e4:e1:53:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=261769f08f4962364f43580a402a3015250f529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:ea:77:44:f1:e5:80:d5:b5:eb:10:f4:da:
ec:9c:99:40:71:11:b9:4b:32:fd:ef:65:67:14:d0:
2a:16:37:ce:7d:e5:2e:05:ee:e7:7e:52:fd:31:1a:
e0:a7:a0:19:06:16:7f:66:d3:1e:00:f5:1f:c0:59:
9d:36:a7:23:77:2d:b0:2b:c1:03:4e:e9:0f:13:df:
a3:9a:43:e1:85:da:a0:b8:20:32:5d:b6:3b:3c:13:
4a:8b:fe:75:e0:b2:9d:ec:3b:4b:d9:93:86:7a:55:
7d:a6:6a:8a:8c:0e:f2:39:2f:77:f3:e7:1f:ed:a1:
5f:79:52:5a:3a:c6:ab:db:f0:5a:33:00:ea:a3:5c:
d9:33:c9:6c:aa:6c:d5:c2:a3:3a:66:0a:39:2b:a1:
38:fe:2b:31:be:4d:76:4d:68:fe:99:d0:13:57:53:
fa:8b:2a:51:fd:21:fb:3b:63:2f:14:c4:08:ed:cd:
da:3d:64:03:d5:0f:b9:f9:ec:51:3b:33:32:57:84:
e8:4e:cc:e4:b5:21:cb:32:26:b9:64:2f:a7:6b:7c:
8c:ea:b4:84:30:aa:03:85:79:c3:1b:bb:29:61:9d:
93:13:71:62:10:90:9a:5d:ab:da:87:20:05:f0:bc:
00:5f:c6:b4:1a:37:20:72:56:d8:9b:85:6a:fc:5f:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:17:69:F0:8F:49:62:36:4F:43:58:0A:40:2A:30:15:25:0F:52:9B
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:f1:96:37:50:7a:b2:28:90:9b:44:44:ec:8f:30:4d:7a:
be:e5:87:58:1a:0b:0f:7c:38:86:49:c8:ae:94:b1:40:5e:66:
33:bf:f7:60:1f:85:7f:ae:b7:a5:b1:e9:e9:9d:6a:ab:57:5b:
7d:e0:c3:a0:09:8a:72:79:14:68:d0:55:b7:bd:61:06:51:a2:
11:d4:a9:ef:81:34:75:41:0e:1e:fb:ae:3b:11:55:53:64:5b:
5f:bf:1c:c9:f3:43:82:5d:cd:b6:32:99:4c:d4:c8:c3:21:43:
cc:a2:4d:9e:39:da:f0:82:df:f0:38:8c:a6:be:78:42:b0:a5:
2d:a4:f2:db:3e:44:ab:7c:17:4c:d8:78:0a:d7:e3:cc:5f:45:
18:90:b6:04:1c:41:c6:a4:02:72:99:37:c3:ea:5f:e3:be:5f:
a0:8c:f1:1d:46:71:41:29:8c:d6:1b:11:a0:39:24:17:aa:6b:
9a:cf:52:cb:4b:ec:45:12:43:59:7b:98:f7:a0:49:7f:06:df:
e7:7d:b2:97:ee:93:b0:0c:c9:72:b3:74:38:56:9d:67:c9:96:
96:46:b0:7e:04:1f:b7:db:ce:ed:15:b3:1a:0f:e7:e6:19:cd:
52:ec:8f:60:d0:43:fc:70:ac:66:9f:15:f0:63:76:11:db:0b:
26:d5:4c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7tPknR+aC4yF+ThU1DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk4NjdkMWQ2OTNlNzlhNmE1ZWU5MDE0ZTQxM2YwMzll
YjUwZDgwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
EygyNjE3NjlmMDhmNDk2MjM2NGY0MzU4MGE0MDJhMzAxNTI1MGY1MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze/qd0Tx5YDVtesQ9NrsnJlAcRG5
SzL972VnFNAqFjfOfeUuBe7nflL9MRrgp6AZBhZ/ZtMeAPUfwFmdNqcjdy2wK8ED
TukPE9+jmkPhhdqguCAyXbY7PBNKi/514LKd7DtL2ZOGelV9pmqKjA7yOS938+cf
7aFfeVJaOsar2/BaMwDqo1zZM8lsqmzVwqM6Zgo5K6E4/isxvk12TWj+mdATV1P6
iypR/SH7O2MvFMQI7c3aPWQD1Q+5+exROzMyV4ToTszktSHLMia5ZC+na3yM6rSE
MKoDhXnDG7spYZ2TE3FiEJCaXavahyAF8LwAX8a0GjcgclbYm4Vq/F/xNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYXafCPSWI2T0NYCkAqMBUlD1KbMB8GA1UdIwQY
MBaAFNRphn0daT55pqXukBTkE/A561DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYt
NDFkZTk3ZGM5YjZjLzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYtNDFkZTk3ZGM5YjZj
LzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtHxljdQ
erIokJtEROyPME16vuWHWBoLD3w4hknIrpSxQF5mM7/3YB+Ff663pbHp6Z1qq1db
feDDoAmKcnkUaNBVt71hBlGiEdSp74E0dUEOHvuuOxFVU2RbX78cyfNDgl3NtjKZ
TNTIwyFDzKJNnjna8ILf8DiMpr54QrClLaTy2z5Eq3wXTNh4CtfjzF9FGJC2BBxB
xqQCcpk3w+pf475foIzxHUZxQSmM1hsRoDkkF6prms9Sy0vsRRJDWXuY96BJfwbf
532yl+6TsAzJcrN0OFadZ8mWlkawfgQft9vO7RWzGg/n5hnNUuyPYNBD/HCsZp8V
8GN2EdsLJtVMEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:33 2025 by rpki-client