Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File: GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier: MK0rv3oxk309NI3q5mtV3qQp0BfmU34tB0zmANknlHg=
Subject key identifier: 1E:0C:DB:D0:E4:2E:AA:0B:D2:D2:B9:86:93:5A:CE:9F:6A:0F:FE:10
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer: /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial: 0197B890A2828849A534B4E0CF7CCBBC86D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:02:55 +0000
Manifest this update: Sat 28 Jun 2025 22:02:55 +0000
Manifest next update: Sun 29 Jun 2025 22:02:55 +0000
Files and hashes: 1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: 8Q1XGB21I9JfYiPEmdD0+ohpjHEMQ81MM5JVycgUMbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:a2:82:88:49:a5:34:b4:e0:cf:7c:cb:bc:86:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Validity
Not Before: Jun 28 22:02:55 2025 GMT
Not After : Jun 29 22:02:55 2025 GMT
Subject: CN=1e0cdbd0e42eaa0bd2d2b986935ace9f6a0ffe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:5f:30:9e:60:e0:dd:8d:49:2b:b7:8a:25:
23:6c:52:ea:94:ea:89:d7:c4:a3:a6:c6:4c:31:d9:
71:05:98:28:b3:9b:ba:3c:73:20:7c:ef:96:db:b9:
9d:1f:94:f7:14:d5:4e:4a:21:b5:85:cd:98:93:9e:
fb:60:5b:54:96:5e:a5:57:92:db:c9:49:3e:4a:78:
83:60:8c:04:ca:d5:59:69:05:b1:de:88:f3:0a:c2:
d3:55:d7:c2:eb:ec:5b:39:b5:eb:e7:39:08:f3:1d:
f5:80:81:f5:9c:b1:5d:47:b0:dd:da:1c:7a:8a:e1:
05:3d:f6:04:50:f7:c5:cb:01:07:47:d8:eb:7b:37:
fa:74:cd:07:6c:69:30:5b:fa:7d:59:1b:2d:4c:24:
4c:3a:75:44:33:35:e9:7c:c0:f7:bb:a0:0d:8f:c9:
6e:40:39:f5:2a:7a:f5:05:2e:52:b8:5a:28:b9:d9:
c3:2b:42:d5:df:01:4a:55:b5:5d:b9:c9:43:42:04:
a8:c7:11:9e:f4:3c:c6:0b:01:4c:31:6b:6d:00:36:
ee:57:e0:ca:57:73:47:84:e0:ae:54:36:10:7b:9e:
7b:22:82:62:1d:64:6a:9b:37:62:d5:62:e8:4a:eb:
ea:13:10:79:60:b6:99:59:cf:3c:ca:d1:5d:52:a7:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0C:DB:D0:E4:2E:AA:0B:D2:D2:B9:86:93:5A:CE:9F:6A:0F:FE:10
X509v3 Authority Key Identifier:
keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:15:b9:3c:0e:24:f3:bc:fc:58:d2:c4:10:d5:6b:b4:b2:
1b:88:6f:71:1a:0b:18:9a:2c:04:52:07:5f:06:c6:b6:aa:e3:
6c:ce:50:56:86:d2:67:55:28:e2:22:41:9d:cd:cd:41:0a:95:
12:c9:e6:27:74:dd:77:66:d8:7f:a4:dc:65:de:47:d8:72:8c:
ed:94:17:ca:0e:f8:5d:e9:a3:8d:89:c8:b2:c1:10:12:7d:33:
dd:92:d5:b7:05:9c:8b:39:b5:cd:5d:78:bc:ac:8a:4c:03:7b:
94:27:08:45:2a:57:36:30:7b:cc:cb:fb:55:9f:75:d8:91:09:
40:8f:8b:84:d4:a6:d9:6f:9b:7f:5a:2b:4b:b7:48:cd:a9:7d:
3f:b1:8d:8a:13:d2:1c:db:39:8f:ac:67:29:d5:6f:d6:83:3c:
b7:1a:2e:5c:02:e9:9a:bb:fe:39:e9:3f:ef:78:5a:cb:ec:f6:
ce:b5:41:c1:17:0a:f8:a6:6a:07:3f:23:48:ab:81:21:d0:54:
05:64:db:83:dd:f4:ac:cb:e5:f8:db:d8:ee:60:62:2b:3e:e7:
3a:30:b4:18:ac:18:f1:5b:e2:7c:1e:f0:c1:b8:0a:c1:b2:34:
09:ff:1b:b2:00:58:0a:45:7e:8e:4b:e9:0d:a9:5e:87:cb:c8:
40:4e:5f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kKKCiEmlNLTgz3zLvIbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGEzYTQwYjExN2ZiMjU3MmNjZjdhNGMyNzJkMmVjNjky
NTI5MWMwHhcNMjUwNjI4MjIwMjU1WhcNMjUwNjI5MjIwMjU1WjAzMTEwLwYDVQQD
EygxZTBjZGJkMGU0MmVhYTBiZDJkMmI5ODY5MzVhY2U5ZjZhMGZmZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunpfMJ5g4N2NSSu3iiUjbFLqlOqJ
18SjpsZMMdlxBZgos5u6PHMgfO+W27mdH5T3FNVOSiG1hc2Yk577YFtUll6lV5Lb
yUk+SniDYIwEytVZaQWx3ojzCsLTVdfC6+xbObXr5zkI8x31gIH1nLFdR7Dd2hx6
iuEFPfYEUPfFywEHR9jrezf6dM0HbGkwW/p9WRstTCRMOnVEMzXpfMD3u6ANj8lu
QDn1Knr1BS5SuFooudnDK0LV3wFKVbVduclDQgSoxxGe9DzGCwFMMWttADbuV+DK
V3NHhOCuVDYQe557IoJiHWRqmzdi1WLoSuvqExB5YLaZWc88ytFdUqfS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4M29DkLqoL0tK5hpNazp9qD/4QMB8GA1UdIwQY
MBaAFBjaOkCxF/slcsz3pMJy0uxpJSkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUt
Njk4ZDkxMmI3MzQ2LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUtNjk4ZDkxMmI3MzQ2
LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtgVuTwO
JPO8/FjSxBDVa7SyG4hvcRoLGJosBFIHXwbGtqrjbM5QVobSZ1Uo4iJBnc3NQQqV
EsnmJ3Tdd2bYf6TcZd5H2HKM7ZQXyg74XemjjYnIssEQEn0z3ZLVtwWcizm1zV14
vKyKTAN7lCcIRSpXNjB7zMv7VZ912JEJQI+LhNSm2W+bf1orS7dIzal9P7GNihPS
HNs5j6xnKdVv1oM8txouXALpmrv+Oek/73hay+z2zrVBwRcK+KZqBz8jSKuBIdBU
BWTbg930rMvl+NvY7mBiKz7nOjC0GKwY8VvifB7wwbgKwbI0Cf8bsgBYCkV+jkvp
Daleh8vIQE5f0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:59:06 2025 by rpki-client