Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: r28AmlZI8x6nXVFYWs2QmsG5X11nmloDxy+dZu3bbxc=
Subject key identifier: CF:10:93:C2:D9:43:A7:D1:33:86:FA:8F:69:C4:E0:7B:A4:3D:FB:5B
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 0197B70F1A70161EEA7F06511B741FE791F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 04F5
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: e/zlt6WEmBZGirL5Y0UCU/pmR7TH3AYpm4wbQwkXMSc=)
2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1a:70:16:1e:ea:7f:06:51:1b:74:1f:e7:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=cf1093c2d943a7d13386fa8f69c4e07ba43dfb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:1c:1e:b2:06:a8:40:8e:7f:c7:c4:4b:51:
c7:e3:83:85:6a:6f:38:61:ee:65:f2:23:d8:72:8c:
3a:32:90:df:87:e9:88:8b:60:f8:68:48:ee:05:32:
4a:c8:6b:66:91:c9:e6:68:85:69:99:c9:3b:c9:2d:
0c:5f:9d:07:f7:5c:6a:7d:1d:d9:5e:0f:a6:2d:81:
20:76:01:ec:24:56:45:3a:1b:4c:22:48:cc:35:7e:
91:d4:49:46:e6:4e:61:17:cc:79:69:95:a3:56:80:
c1:2f:4c:9d:cd:0a:4b:00:8e:5b:26:dd:fa:52:02:
9a:6d:f9:6f:4c:3d:82:35:9d:55:d1:02:8a:6b:fa:
ea:9e:97:83:ac:05:08:bf:f4:42:cf:71:1e:72:08:
f9:3c:37:f2:f0:85:fd:3d:37:82:bd:92:b3:84:b2:
39:a7:56:2c:af:1b:5f:e5:f3:62:a7:fb:59:68:25:
a0:c8:d6:c1:21:5c:1d:b4:8f:cc:13:eb:e7:67:d2:
2f:62:9f:6f:9a:ab:29:97:64:91:04:3b:4d:b9:5a:
c6:18:cc:82:f0:f0:db:64:b5:de:ed:d9:ba:f0:73:
a2:21:82:d2:b1:f8:2b:74:51:55:5a:e5:ab:b2:78:
15:1a:9b:44:84:b0:6b:27:3e:66:b7:2f:85:97:ac:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:93:C2:D9:43:A7:D1:33:86:FA:8F:69:C4:E0:7B:A4:3D:FB:5B
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:e1:61:5d:d9:4b:90:4a:a7:fe:ca:31:f1:8c:9d:57:17:
7f:8a:33:d7:42:18:06:82:0a:70:7b:ed:d9:7c:96:cf:65:06:
5e:9c:b5:54:6a:bc:65:c6:54:47:7c:b0:92:9f:d3:2d:c9:9e:
d7:45:b0:9e:62:8e:e3:90:03:08:92:07:fa:4b:84:d3:0c:39:
1f:3c:bf:35:1b:91:e7:87:8c:4c:21:8a:09:d5:c4:a1:5d:14:
6a:d3:fe:e6:00:45:5b:12:35:91:86:b4:b9:3c:4d:ed:0f:7a:
07:a7:4b:95:40:5c:7a:5d:65:9a:59:45:4b:a0:a6:51:d5:3e:
12:64:f4:65:be:fd:b2:d8:e6:4c:41:95:50:d3:dd:76:65:54:
93:e7:3b:68:9b:09:17:3b:b5:c2:8b:c9:57:5f:12:09:09:88:
08:91:1a:5d:cc:49:6b:4a:00:f1:b9:86:24:bb:34:cf:a4:71:
f7:24:ce:88:ec:90:be:df:8e:ef:3f:43:bf:00:19:83:80:0a:
5b:36:cd:ad:71:1e:e3:26:71:a1:22:7c:4d:c5:67:c8:df:d1:
95:44:a2:4c:11:49:56:10:f0:93:4a:68:14:08:81:7e:e6:96:
65:e8:99:13:7e:64:1f:7f:5a:02:6c:e3:1d:1d:b9:dc:31:00:
41:6a:9f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DxpwFh7qfwZRG3Qf55H2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3
MmFiMDAwHhcNMjUwNjI4MTUwMTQ5WhcNMjUwNjI5MTUwMTQ5WjAzMTEwLwYDVQQD
EyhjZjEwOTNjMmQ5NDNhN2QxMzM4NmZhOGY2OWM0ZTA3YmE0M2RmYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6wcHrIGqECOf8fES1HH44OFam84
Ye5l8iPYcow6MpDfh+mIi2D4aEjuBTJKyGtmkcnmaIVpmck7yS0MX50H91xqfR3Z
Xg+mLYEgdgHsJFZFOhtMIkjMNX6R1ElG5k5hF8x5aZWjVoDBL0ydzQpLAI5bJt36
UgKabflvTD2CNZ1V0QKKa/rqnpeDrAUIv/RCz3Eecgj5PDfy8IX9PTeCvZKzhLI5
p1Ysrxtf5fNip/tZaCWgyNbBIVwdtI/ME+vnZ9IvYp9vmqspl2SRBDtNuVrGGMyC
8PDbZLXe7dm68HOiIYLSsfgrdFFVWuWrsngVGptEhLBrJz5mty+Fl6wWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8Qk8LZQ6fRM4b6j2nE4HukPftbMB8GA1UdIwQY
MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt
MjBkZTY5NzI2MDliLzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli
LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcnhYV3Z
S5BKp/7KMfGMnVcXf4oz10IYBoIKcHvt2XyWz2UGXpy1VGq8ZcZUR3ywkp/TLcme
10WwnmKO45ADCJIH+kuE0ww5Hzy/NRuR54eMTCGKCdXEoV0UatP+5gBFWxI1kYa0
uTxN7Q96B6dLlUBcel1lmllFS6CmUdU+EmT0Zb79stjmTEGVUNPddmVUk+c7aJsJ
Fzu1wovJV18SCQmICJEaXcxJa0oA8bmGJLs0z6Rx9yTOiOyQvt+O7z9DvwAZg4AK
WzbNrXEe4yZxoSJ8TcVnyN/RlUSiTBFJVhDwk0poFAiBfuaWZeiZE35kH39aAmzj
HR253DEAQWqfzg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:34 2025 by rpki-client