Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: 5LtvU32Z7gvSUhuhcC0mE+s+3eBSk3D3xWtL5JxV66M=
Subject key identifier: 07:46:F1:5C:89:11:2C:24:1E:23:0A:DF:E7:70:9E:65:A9:CE:CA:B1
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 0197B6A1E6D94B30BEEBFE688FE75414ED6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: u9RZ/N1/G4lqH7cXJ5Q9aC7JH+0U8ZdcewRBHwTvHTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e6:d9:4b:30:be:eb:fe:68:8f:e7:54:14:ed:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=0746f15c89112c241e230adfe7709e65a9cecab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:c8:cd:5d:95:76:c6:62:d3:08:73:2d:a5:
c9:fe:93:14:e0:d7:08:c4:b5:0e:f8:74:66:ff:f4:
21:00:31:d7:89:ed:21:32:ff:a3:b8:99:79:55:b0:
21:cd:ba:c7:df:a1:92:b8:21:66:42:f8:31:29:ca:
06:e9:fa:ec:84:57:73:bb:a7:e5:96:a8:d1:c3:cc:
6f:a7:48:6d:b9:d5:d3:97:1a:33:52:16:db:9d:5f:
9a:41:44:0c:b2:c1:20:2f:3d:a8:17:a7:f3:ab:3b:
5e:88:71:b9:64:5d:df:5f:a0:8f:0e:83:bd:20:81:
ef:fc:92:90:79:9e:63:3a:89:e9:dd:33:da:e6:11:
1d:4f:e6:27:a9:2b:26:c5:94:b2:b7:fd:29:c6:4b:
6c:14:f9:2c:51:5f:f2:58:4e:14:27:40:3a:57:74:
d1:fb:30:64:f1:f1:0c:4d:22:44:f1:ca:84:99:3f:
f7:72:0d:fd:c7:93:0c:96:cc:9b:2e:ad:88:47:18:
e6:72:5c:e0:21:a0:2f:c5:cc:ad:ba:8b:e5:71:c4:
cb:c0:e3:a9:4f:17:a1:60:fa:7e:46:f7:f2:88:1e:
9d:2b:9f:de:ff:92:39:23:13:1b:72:4c:bd:1d:e3:
06:28:b3:cf:b2:f5:c8:d0:b7:01:59:c8:dd:5a:39:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:46:F1:5C:89:11:2C:24:1E:23:0A:DF:E7:70:9E:65:A9:CE:CA:B1
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:75:7e:f3:f5:b9:8e:44:6f:fb:32:e2:49:d0:6f:18:f3:f9:
05:28:8f:f0:be:11:fb:bd:e2:61:77:b1:ee:aa:76:cb:7b:15:
9c:55:7f:6b:ad:e4:70:e2:a3:03:54:fa:6a:0e:9c:f8:df:65:
d9:a1:52:92:68:20:fc:81:61:c7:6e:50:01:53:6b:85:8f:54:
a8:e7:31:d2:5f:86:a8:ad:97:ab:49:4c:00:6f:ea:57:da:f5:
e1:72:14:04:07:a7:bb:15:7b:ad:d4:71:95:68:ce:99:6b:10:
8f:e3:61:c4:f0:ee:53:bd:1a:76:88:4f:08:29:a7:15:9f:cf:
6b:a3:c0:4f:1f:2a:ee:c0:97:a3:ec:82:4f:02:d6:b7:bf:dd:
2e:02:2e:30:bf:e9:78:96:d6:bb:3a:19:ba:7a:7f:98:cc:c9:
dc:94:d0:99:4d:5b:cd:4c:0d:12:8f:59:66:f7:69:9b:b5:bd:
7c:d3:b4:2f:a7:66:e5:30:4f:77:b4:0a:95:b1:31:90:67:67:
60:cd:00:c8:1a:39:b3:70:a5:04:57:53:88:bd:30:38:5d:4d:
18:94:e7:02:8e:46:82:f0:1f:9e:dd:67:3d:07:e5:7c:dc:1a:
51:f1:d9:33:2e:95:b5:69:9f:67:71:0c:5b:94:19:aa:a0:c7:
90:b6:2e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oebZSzC+6/5oj+dUFO1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGQ1YjA1NDNiZDg1YThlY2Y5NjlhYmI4NTAzYzlkZWFk
MGRmOTgwHhcNMjUwNjI4MTMwMjMzWhcNMjUwNjI5MTMwMjMzWjAzMTEwLwYDVQQD
EygwNzQ2ZjE1Yzg5MTEyYzI0MWUyMzBhZGZlNzcwOWU2NWE5Y2VjYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6HIzV2VdsZi0whzLaXJ/pMU4NcI
xLUO+HRm//QhADHXie0hMv+juJl5VbAhzbrH36GSuCFmQvgxKcoG6frshFdzu6fl
lqjRw8xvp0htudXTlxozUhbbnV+aQUQMssEgLz2oF6fzqzteiHG5ZF3fX6CPDoO9
IIHv/JKQeZ5jOonp3TPa5hEdT+YnqSsmxZSyt/0pxktsFPksUV/yWE4UJ0A6V3TR
+zBk8fEMTSJE8cqEmT/3cg39x5MMlsybLq2IRxjmclzgIaAvxcytuovlccTLwOOp
TxehYPp+RvfyiB6dK5/e/5I5IxMbcky9HeMGKLPPsvXI0LcBWcjdWjmjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdG8VyJESwkHiMK3+dwnmWpzsqxMB8GA1UdIwQY
MBaAFBkNWwVDvYWo7Plpq7hQPJ3q0N+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt
Y2NjNTgxNDA5NGFkLzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk
LzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHV+8/W5
jkRv+zLiSdBvGPP5BSiP8L4R+73iYXex7qp2y3sVnFV/a63kcOKjA1T6ag6c+N9l
2aFSkmgg/IFhx25QAVNrhY9UqOcx0l+GqK2Xq0lMAG/qV9r14XIUBAenuxV7rdRx
lWjOmWsQj+NhxPDuU70adohPCCmnFZ/Pa6PATx8q7sCXo+yCTwLWt7/dLgIuML/p
eJbWuzoZunp/mMzJ3JTQmU1bzUwNEo9ZZvdpm7W9fNO0L6dm5TBPd7QKlbExkGdn
YM0AyBo5s3ClBFdTiL0wOF1NGJTnAo5GgvAfnt1nPQflfNwaUfHZMy6VtWmfZ3EM
W5QZqqDHkLYuGg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:19 2025 by rpki-client