Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: Um07L6zzW+9Ktscjtctlr/bQnX67tUDRiM4D7CE1hpY=
Subject key identifier: 7B:EB:04:28:FB:AB:08:F8:CE:E8:A9:C5:78:63:05:65:DF:5B:12:77
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 0197B7EAAF8D8633FE451AB94C4999B29E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 05FF
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: GGLZH4ORxVH7SD0o0t0qrvoi4/IGXaGjfvKFUp3xfBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:af:8d:86:33:fe:45:1a:b9:4c:49:99:b2:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=7beb0428fbab08f8cee8a9c578630565df5b1277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:b9:42:42:40:8c:ca:ce:fc:a1:1d:4d:5f:
16:1e:93:4c:f3:fc:92:4c:33:b7:4f:9d:ea:dd:34:
96:75:8e:66:00:ae:dd:5e:19:e3:a0:8c:d8:7b:a9:
28:d6:61:ee:0a:aa:85:03:35:d5:73:e8:a2:56:d0:
2b:d6:2a:0d:37:f0:50:47:60:bd:7d:90:97:d3:82:
a6:2f:d3:d0:ea:2e:9f:01:66:9f:08:8e:3f:18:48:
35:7e:9c:d2:3a:35:b9:1a:93:0e:fc:c9:26:07:06:
fd:f0:20:98:5c:31:b6:03:6b:46:a0:c2:22:b9:17:
da:d0:b4:e1:24:d3:6e:c0:e4:a3:37:60:80:66:e2:
45:ff:cb:51:c0:bf:20:a9:fe:19:ff:ad:8f:21:1c:
a4:ab:69:5f:66:f8:28:e8:6b:2d:a4:24:7c:0b:26:
82:fa:9b:32:e6:c8:d2:e6:ee:0c:5f:9b:77:cf:40:
74:20:9a:17:7c:e3:af:67:2d:2c:c7:e8:f0:02:25:
c9:26:49:07:0b:e2:47:22:8b:d5:e5:39:f7:8e:90:
a1:dd:99:3a:28:e6:6c:28:a4:91:74:a5:ef:57:66:
24:65:77:b3:ff:80:08:13:c2:7a:76:30:28:62:28:
8b:60:99:b9:8a:2b:19:8f:1f:cd:29:f6:87:b4:00:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:04:28:FB:AB:08:F8:CE:E8:A9:C5:78:63:05:65:DF:5B:12:77
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1a:7f:7e:d2:19:d0:d3:a5:92:b4:c0:12:b5:25:ee:c7:40:
06:3d:48:16:7e:48:83:29:f8:9e:7a:a0:61:96:7d:7d:39:43:
7b:ef:6f:27:58:19:82:5c:eb:d7:90:91:96:b7:db:78:3f:a6:
80:38:2e:dc:5b:e5:5b:87:b1:ff:d2:28:be:63:54:6a:5d:7c:
bb:cb:6b:42:09:4a:91:92:fa:f6:cf:66:54:b9:37:21:b3:aa:
54:ac:c8:c0:12:03:77:38:87:ad:37:f8:6d:67:dd:78:37:ab:
47:8d:fd:f7:3e:50:8c:53:a2:8a:45:7e:cb:79:8d:f5:c8:1c:
79:3c:19:2e:05:33:05:18:4e:05:00:05:ff:f0:ee:40:da:71:
3c:24:9b:d2:82:e0:62:3d:57:42:e8:9a:26:20:8f:40:27:75:
37:60:3d:c8:48:d2:c8:36:9d:9d:e3:86:ed:11:8d:cd:65:c5:
d0:0d:b3:40:c1:93:65:6d:72:bc:69:d7:d2:53:55:e3:89:9d:
63:f0:dc:10:89:c5:0d:36:77:4f:01:cc:62:60:4a:46:40:eb:
f3:9c:80:88:36:ef:bf:2b:40:ce:9a:9a:4c:dd:a5:bb:84:9c:
7a:c9:e2:31:73:3e:1e:02:85:5d:60:1b:85:52:df:f3:27:57:
c5:7f:59:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36q+NhjP+RRq5TEmZsp5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzAyZWQzNWU4ZWZlZTA0Y2FhYjk5OTg0MjZiYzNkNDNj
YWViMmMwHhcNMjUwNjI4MTkwMTQwWhcNMjUwNjI5MTkwMTQwWjAzMTEwLwYDVQQD
Eyg3YmViMDQyOGZiYWIwOGY4Y2VlOGE5YzU3ODYzMDU2NWRmNWIxMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucC5QkJAjMrO/KEdTV8WHpNM8/yS
TDO3T53q3TSWdY5mAK7dXhnjoIzYe6ko1mHuCqqFAzXVc+iiVtAr1ioNN/BQR2C9
fZCX04KmL9PQ6i6fAWafCI4/GEg1fpzSOjW5GpMO/MkmBwb98CCYXDG2A2tGoMIi
uRfa0LThJNNuwOSjN2CAZuJF/8tRwL8gqf4Z/62PIRykq2lfZvgo6GstpCR8CyaC
+psy5sjS5u4MX5t3z0B0IJoXfOOvZy0sx+jwAiXJJkkHC+JHIovV5Tn3jpCh3Zk6
KOZsKKSRdKXvV2YkZXez/4AIE8J6djAoYiiLYJm5iisZjx/NKfaHtAA8EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvrBCj7qwj4zuipxXhjBWXfWxJ3MB8GA1UdIwQY
MBaAFIBwLtNejv7gTKq5mYQmvD1DyussMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hBdTAxNk9fdUJNcXJtWmhDYThQVVBLNnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82NWUyOTYtNzJhYS00ODhhLWE0MzMt
OWFhNGQyZjlhZmYxLzEvZ0hBdTAxNk9fdUJNcXJtWmhDYThQVVBLNnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS82NWUyOTYtNzJhYS00ODhhLWE0MzMtOWFhNGQyZjlhZmYx
LzEvZ0hBdTAxNk9fdUJNcXJtWmhDYThQVVBLNnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxp/ftIZ
0NOlkrTAErUl7sdABj1IFn5Igyn4nnqgYZZ9fTlDe+9vJ1gZglzr15CRlrfbeD+m
gDgu3FvlW4ex/9IovmNUal18u8trQglKkZL69s9mVLk3IbOqVKzIwBIDdziHrTf4
bWfdeDerR4399z5QjFOiikV+y3mN9cgceTwZLgUzBRhOBQAF//DuQNpxPCSb0oLg
Yj1XQuiaJiCPQCd1N2A9yEjSyDadneOG7RGNzWXF0A2zQMGTZW1yvGnX0lNV44md
Y/DcEInFDTZ3TwHMYmBKRkDr85yAiDbvvytAzpqaTN2lu4ScesniMXM+HgKFXWAb
hVLf8ydXxX9Zqg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:53 2025 by rpki-client