Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: 6z++C0Oi2xT+yoVFTVnpb8Z2pC12vakzxpxXc1AZFK8=
Subject key identifier: CE:65:C9:EB:92:BD:03:5B:A8:9C:72:82:E7:55:57:77:EB:8F:EE:78
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 01989749F1774002184F74E4D39F10E4422D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 04:01:02 +0000
Manifest this update: Mon 11 Aug 2025 04:01:02 +0000
Manifest next update: Tue 12 Aug 2025 04:01:02 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: Q2F4QRixsmILIEi2EmHn/T+qv+vOqCoErymvDlSu1V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:f1:77:40:02:18:4f:74:e4:d3:9f:10:e4:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Aug 11 04:01:02 2025 GMT
Not After : Aug 12 04:01:02 2025 GMT
Subject: CN=ce65c9eb92bd035ba89c7282e7555777eb8fee78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:46:30:bb:20:8a:9d:85:04:ed:64:cd:55:
e5:b3:87:5b:ab:b7:47:66:c2:59:0d:8b:a3:d0:98:
bb:5d:f9:6d:cc:37:a8:b4:b4:e1:14:e5:ad:f9:b9:
db:92:b0:64:a6:56:5d:4f:7d:47:73:af:cf:5c:99:
ee:7f:3b:32:97:ce:8d:24:ca:52:8a:05:a7:60:41:
bb:de:ad:8e:b3:71:06:df:37:b6:70:d8:bf:14:aa:
6d:97:a4:e0:61:12:1b:83:76:62:de:16:00:9b:ab:
49:fd:24:c3:ca:8d:2b:f2:62:f3:08:c6:0e:f5:57:
e3:13:42:34:97:cb:a1:0e:79:fa:70:1a:cf:d8:e2:
45:0f:0b:c8:f4:21:63:40:ad:e3:e3:e4:f8:88:61:
00:88:59:65:6f:1e:af:77:61:1c:f3:01:ea:3b:46:
91:1d:7d:9d:47:c1:fa:6d:fb:cc:d1:56:dd:15:09:
26:86:8c:2b:bf:8b:f6:09:21:47:b8:e2:83:98:63:
a2:92:f8:4a:15:4d:a5:6b:9f:ed:f8:10:bd:0b:d0:
b3:ab:88:56:f1:bd:10:83:c6:35:c3:84:5d:41:c7:
fa:e4:0b:04:cf:9a:8d:de:d5:de:8e:c7:fa:bf:8d:
19:59:78:a1:e5:13:53:c4:4d:ea:09:6e:16:fd:ee:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:65:C9:EB:92:BD:03:5B:A8:9C:72:82:E7:55:57:77:EB:8F:EE:78
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:86:72:e9:63:88:d0:9b:16:76:ec:50:79:ba:d7:0a:e5:
c2:4d:7c:a9:17:52:9e:80:e0:4f:7f:85:94:5f:42:a2:c9:09:
8d:09:65:03:af:25:b4:80:65:40:72:9c:ec:97:29:7d:72:4c:
9e:72:41:9e:13:e0:a7:e3:69:0c:28:80:17:04:9e:6b:bb:e4:
7e:30:cc:88:89:52:52:5f:61:d1:e7:b3:90:d9:58:cf:b2:4a:
56:e1:9a:2b:ab:e6:ec:28:f8:50:16:e4:76:67:68:fc:25:6a:
e7:2b:ef:a8:08:06:9a:64:03:e9:58:41:78:e4:25:4c:44:c5:
5b:0b:2f:76:d8:c6:a4:14:72:1d:04:a7:e9:d6:ee:90:89:72:
d9:30:1b:1c:97:70:4a:5b:e0:47:97:ea:6e:37:52:42:8d:a4:
a8:e6:3c:ca:30:31:7a:78:8b:e9:9b:43:9f:27:c8:32:fe:cb:
1a:13:b8:1b:4a:36:3f:67:34:47:18:ed:99:e3:9b:a7:4d:50:
2c:1a:87:19:ef:2e:dd:13:40:cc:5b:11:48:ec:4a:e7:c6:58:
e6:e3:78:b7:a5:98:2b:0a:1e:80:0a:77:49:c6:0e:95:e2:50:
18:32:f9:03:8a:d3:64:b7:be:52:23:8f:2f:e9:bc:a7:3c:54:
21:c8:36:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXSfF3QAIYT3Tk058Q5EItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw
ODVhNDMwHhcNMjUwODExMDQwMTAyWhcNMjUwODEyMDQwMTAyWjAzMTEwLwYDVQQD
EyhjZTY1YzllYjkyYmQwMzViYTg5YzcyODJlNzU1NTc3N2ViOGZlZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtBGMLsgip2FBO1kzVXls4dbq7dH
ZsJZDYuj0Ji7XfltzDeotLThFOWt+bnbkrBkplZdT31Hc6/PXJnufzsyl86NJMpS
igWnYEG73q2Os3EG3ze2cNi/FKptl6TgYRIbg3Zi3hYAm6tJ/STDyo0r8mLzCMYO
9VfjE0I0l8uhDnn6cBrP2OJFDwvI9CFjQK3j4+T4iGEAiFllbx6vd2Ec8wHqO0aR
HX2dR8H6bfvM0VbdFQkmhowrv4v2CSFHuOKDmGOikvhKFU2la5/t+BC9C9Czq4hW
8b0Qg8Y1w4RdQcf65AsEz5qN3tXejsf6v40ZWXih5RNTxE3qCW4W/e430wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5lyeuSvQNbqJxygudVV3frj+54MB8GA1UdIwQY
MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt
NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk
LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEuGculj
iNCbFnbsUHm61wrlwk18qRdSnoDgT3+FlF9CoskJjQllA68ltIBlQHKc7JcpfXJM
nnJBnhPgp+NpDCiAFwSea7vkfjDMiIlSUl9h0eezkNlYz7JKVuGaK6vm7Cj4UBbk
dmdo/CVq5yvvqAgGmmQD6VhBeOQlTETFWwsvdtjGpBRyHQSn6dbukIly2TAbHJdw
SlvgR5fqbjdSQo2kqOY8yjAxeniL6ZtDnyfIMv7LGhO4G0o2P2c0RxjtmeObp01Q
LBqHGe8u3RNAzFsRSOxK58ZY5uN4t6WYKwoegAp3ScYOleJQGDL5A4rTZLe+UiOP
L+m8pzxUIcg2Lg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:16 2025 by rpki-client