Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: wRHS0e6ptc8+77RpyfRDDdd1V46oYVedTkYOlvMS7Y8=
Subject key identifier: 28:AD:56:31:54:9A:1B:4A:EC:A0:DB:F4:20:3C:22:7C:4B:DE:2A:FC
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 0197B9342501DD2430A98E01C36241FAEF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 01:01:31 +0000
Manifest this update: Sun 29 Jun 2025 01:01:31 +0000
Manifest next update: Mon 30 Jun 2025 01:01:31 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: Ir3oRIqkVcUs71EDKzgJVLMqSCeNLFsEVl6HqdKxRaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:25:01:dd:24:30:a9:8e:01:c3:62:41:fa:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Jun 29 01:01:31 2025 GMT
Not After : Jun 30 01:01:31 2025 GMT
Subject: CN=28ad5631549a1b4aeca0dbf4203c227c4bde2afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:fd:56:3f:8b:29:46:0c:2e:f7:6c:98:9d:
8f:63:10:dd:fe:c8:1a:d8:90:65:24:44:e4:07:be:
b1:d0:c9:fc:54:2a:e1:e8:13:01:c9:ac:e9:78:ce:
ea:1c:18:70:1a:0e:db:32:35:c2:39:a5:d3:1d:3c:
f1:ec:61:ea:f6:d4:42:fd:25:1b:39:bf:6e:82:72:
ec:c9:c3:14:c7:91:d1:39:47:0f:ab:b8:66:4b:1e:
7a:b1:47:ee:9d:ba:e8:2b:18:38:7d:e9:21:41:96:
ca:2d:c7:ae:c9:2c:bd:3d:d8:f4:33:14:8a:b8:8f:
f0:0c:b0:14:8e:e1:db:34:de:84:c0:24:a1:84:a8:
f8:50:67:d2:6c:ba:b4:3c:58:ed:55:4f:22:a9:51:
90:35:ef:cd:8a:fe:d7:f9:bf:2a:c0:cb:b7:c4:48:
62:27:bb:ff:69:89:e4:2a:4e:4e:65:55:97:10:fa:
fe:e0:b9:b1:fa:fd:95:f1:b3:f4:87:99:4b:d7:21:
fe:f5:9d:8e:42:41:36:26:ec:bc:15:41:60:e9:b7:
9f:e8:4e:a8:ee:d2:19:a2:02:c3:b8:0a:7d:9c:00:
00:8c:5e:99:29:ce:c5:db:40:80:fc:03:4d:88:e9:
80:9f:89:1c:ac:bc:f0:c7:d6:7e:4f:01:7f:b2:55:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:56:31:54:9A:1B:4A:EC:A0:DB:F4:20:3C:22:7C:4B:DE:2A:FC
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:a1:20:05:57:75:51:83:06:e5:cb:8b:5a:18:ad:06:e3:
10:23:fc:d6:c3:7a:f3:bd:93:b1:f5:c7:f8:3b:8c:61:92:4c:
0b:ed:e7:e1:5f:f3:a9:2b:df:56:c8:84:41:e8:c7:75:d8:9a:
6f:b7:ca:3a:68:2f:b7:67:b3:87:ba:71:17:e8:23:fe:2b:14:
23:69:f7:7a:55:b1:7e:f8:de:d4:b0:de:d3:5d:9a:cf:1c:c9:
99:d5:05:4c:eb:4b:75:f0:ea:2e:a7:e1:06:fa:33:b4:64:3d:
de:ba:83:82:1a:70:df:bc:22:cc:62:4e:8a:34:4f:41:89:6a:
90:ba:a5:c8:ff:63:59:bb:b3:77:31:68:ab:14:af:65:19:df:
43:c8:fd:32:dd:d3:4f:39:84:50:88:23:41:6a:c4:13:52:d2:
6f:6f:b0:04:20:c4:9e:e6:41:31:68:68:29:e5:ec:09:d9:83:
40:94:02:d2:87:af:05:3f:cf:5a:90:83:e4:e9:c9:78:97:0e:
45:c6:f7:d4:6c:a4:3e:f9:bd:74:4a:e6:2d:ea:d0:c3:f6:47:
23:45:66:4d:c2:39:14:32:46:6e:61:ee:24:73:aa:d6:ca:e2:
23:9b:3b:63:4e:b2:0e:2e:b7:20:19:76:ce:a7:26:b0:e4:1b:
a7:34:1f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5NCUB3SQwqY4Bw2JB+u8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0
N2E4ZTAwHhcNMjUwNjI5MDEwMTMxWhcNMjUwNjMwMDEwMTMxWjAzMTEwLwYDVQQD
EygyOGFkNTYzMTU0OWExYjRhZWNhMGRiZjQyMDNjMjI3YzRiZGUyYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsf9Vj+LKUYMLvdsmJ2PYxDd/sga
2JBlJETkB76x0Mn8VCrh6BMByazpeM7qHBhwGg7bMjXCOaXTHTzx7GHq9tRC/SUb
Ob9ugnLsycMUx5HROUcPq7hmSx56sUfunbroKxg4fekhQZbKLceuySy9Pdj0MxSK
uI/wDLAUjuHbNN6EwCShhKj4UGfSbLq0PFjtVU8iqVGQNe/Niv7X+b8qwMu3xEhi
J7v/aYnkKk5OZVWXEPr+4Lmx+v2V8bP0h5lL1yH+9Z2OQkE2Juy8FUFg6bef6E6o
7tIZogLDuAp9nAAAjF6ZKc7F20CA/ANNiOmAn4kcrLzwx9Z+TwF/slWGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCitVjFUmhtK7KDb9CA8InxL3ir8MB8GA1UdIwQY
MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt
OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2
LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARquhIAVX
dVGDBuXLi1oYrQbjECP81sN6872TsfXH+DuMYZJMC+3n4V/zqSvfVsiEQejHddia
b7fKOmgvt2ezh7pxF+gj/isUI2n3elWxfvje1LDe012azxzJmdUFTOtLdfDqLqfh
BvoztGQ93rqDghpw37wizGJOijRPQYlqkLqlyP9jWbuzdzFoqxSvZRnfQ8j9Mt3T
TzmEUIgjQWrEE1LSb2+wBCDEnuZBMWhoKeXsCdmDQJQC0oevBT/PWpCD5OnJeJcO
Rcb31GykPvm9dErmLerQw/ZHI0VmTcI5FDJGbmHuJHOq1sriI5s7Y06yDi63IBl2
zqcmsOQbpzQfsA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:43 2025 by rpki-client