Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: eymVV3W+621jLCQMlCjSuhvqycL7BM2tYDFrx1V1tbw=
Subject key identifier: 0D:0A:11:61:C6:F0:E6:3E:E6:F1:1D:D8:88:1B:71:BF:AE:7D:D9:C0
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0197B6A114B955D9FCCC9B44153767AE7AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0DFC
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: YPeZ/KYNSeA4FUxiM7YEQ/cTVb+jF9bkprVvkLToPFY=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:14:b9:55:d9:fc:cc:9b:44:15:37:67:ae:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=0d0a1161c6f0e63ee6f11dd8881b71bfae7dd9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:28:29:88:f2:4d:a4:17:27:a1:9e:ff:1f:
bf:6b:4c:f0:10:2c:5d:a2:77:e9:b4:69:83:ab:12:
c1:60:36:32:65:d1:a7:87:0f:7f:e4:ca:7d:86:e7:
46:cc:1e:a8:b1:4c:54:76:95:84:26:64:28:d8:ac:
bf:9d:06:6f:db:42:63:6c:07:52:64:ba:08:64:4e:
24:af:fc:ad:af:9a:ba:f8:50:c3:ef:d1:a0:78:b6:
c4:42:99:76:79:5a:48:68:91:d0:f6:d9:62:17:0e:
3e:39:c3:11:eb:3f:25:3e:0b:d1:3b:07:d6:3d:f8:
dc:de:ee:94:ff:3c:98:ac:32:e3:07:27:13:0d:2d:
56:7e:0c:d2:82:91:8c:41:ae:0a:10:49:bd:7a:ef:
15:88:6e:61:af:19:1e:f1:27:4b:75:27:7f:2f:8a:
6b:a7:4c:38:9f:f2:92:a0:17:06:18:0f:12:c4:97:
6b:e1:14:20:97:2c:cb:00:09:c3:de:58:db:94:a9:
ee:91:cc:dc:ad:27:33:9f:11:2e:a5:31:50:99:88:
39:d7:8d:5e:88:79:0e:24:c5:42:ba:39:78:70:4a:
a3:a7:fb:c1:16:67:46:b5:fe:90:f3:e6:2e:8e:50:
37:df:3a:1b:7a:e9:5f:7e:03:72:f3:83:df:57:98:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:11:61:C6:F0:E6:3E:E6:F1:1D:D8:88:1B:71:BF:AE:7D:D9:C0
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:8a:e6:cd:e5:6f:9a:28:15:b0:08:82:d7:18:d6:bd:b1:
e1:de:e5:91:6e:a2:5d:a4:f8:e2:8e:e3:3b:57:2a:81:3d:35:
97:e2:f0:fe:8b:3d:59:55:b0:2f:45:48:fd:4d:46:b0:fe:38:
5c:54:29:58:8a:12:d0:99:55:43:8f:b6:d5:ed:ce:4c:be:96:
94:5f:ef:17:74:5a:e6:ea:27:fc:9f:bc:b8:8b:8b:84:d6:ad:
ae:33:89:76:d4:d5:bd:71:10:92:e4:56:2e:3c:c8:d9:c6:e7:
cb:4b:4f:1a:3b:f9:ff:ca:c8:83:a8:a9:e9:98:36:02:38:5e:
6a:d5:79:d5:9d:85:70:b2:6d:ee:bc:1c:7a:0c:35:6f:e7:79:
6c:f6:33:ec:8a:7f:b0:79:62:1c:cf:bc:cd:ec:b1:ea:84:01:
2e:2d:1b:27:7a:40:71:ed:70:15:0d:53:d0:24:3e:cd:38:79:
1a:bf:0e:76:21:89:38:04:df:e6:5f:68:d8:ad:3f:98:88:17:
e3:b0:5c:76:5d:80:ef:0d:4f:7c:d5:6d:e3:cf:18:af:8e:37:
d9:da:48:5f:c0:fb:ca:98:52:e0:3f:d5:90:c6:d7:14:97:10:
a0:15:68:60:39:f0:2e:f5:a8:5d:e2:4b:d5:71:af:77:ab:43:
ab:ce:9a:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRS5Vdn8zJtEFTdnrnq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTUwNGJhZjgyZWY4ZWIwYWU1MDhhZjQwYjYzOGUzNjYw
YTU0ODgwHhcNMjUwNjI4MTMwMTM5WhcNMjUwNjI5MTMwMTM5WjAzMTEwLwYDVQQD
EygwZDBhMTE2MWM2ZjBlNjNlZTZmMTFkZDg4ODFiNzFiZmFlN2RkOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3UoKYjyTaQXJ6Ge/x+/a0zwECxd
onfptGmDqxLBYDYyZdGnhw9/5Mp9hudGzB6osUxUdpWEJmQo2Ky/nQZv20JjbAdS
ZLoIZE4kr/ytr5q6+FDD79GgeLbEQpl2eVpIaJHQ9tliFw4+OcMR6z8lPgvROwfW
Pfjc3u6U/zyYrDLjBycTDS1WfgzSgpGMQa4KEEm9eu8ViG5hrxke8SdLdSd/L4pr
p0w4n/KSoBcGGA8SxJdr4RQglyzLAAnD3ljblKnukczcrScznxEupTFQmYg5141e
iHkOJMVCujl4cEqjp/vBFmdGtf6Q8+YujlA33zobeulffgNy84PfV5hG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0KEWHG8OY+5vEd2Igbcb+ufdnAMB8GA1UdIwQY
MBaAFBsVBLr4LvjrCuUIr0C2OONmClSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUt
MmMzZWE0Yjg2ZTIwLzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUtMmMzZWE0Yjg2ZTIw
LzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMCK5s3l
b5ooFbAIgtcY1r2x4d7lkW6iXaT44o7jO1cqgT01l+Lw/os9WVWwL0VI/U1GsP44
XFQpWIoS0JlVQ4+21e3OTL6WlF/vF3Ra5uon/J+8uIuLhNatrjOJdtTVvXEQkuRW
LjzI2cbny0tPGjv5/8rIg6ip6Zg2AjheatV51Z2FcLJt7rwcegw1b+d5bPYz7Ip/
sHliHM+8zeyx6oQBLi0bJ3pAce1wFQ1T0CQ+zTh5Gr8OdiGJOATf5l9o2K0/mIgX
47Bcdl2A7w1PfNVt488Yr4432dpIX8D7yphS4D/VkMbXFJcQoBVoYDnwLvWoXeJL
1XGvd6tDq86awg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:22 2025 by rpki-client