Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: 9UFPO133rrflb1v+A4TpY8b+jkxXUqTCGpASY2fRG9k=
Subject key identifier: 26:47:D7:20:F4:2A:0B:43:AD:AA:2E:48:04:40:8D:3E:2A:86:24:6A
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 01976BF3F7F11B79A0423CFDBD96E106CE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 01:00:39 +0000
Manifest this update: Sat 14 Jun 2025 01:00:39 +0000
Manifest next update: Sun 15 Jun 2025 01:00:39 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: N05DaFMekEOwBfxBvatWra6gXEJXWLekJ7c7qrbD23Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f7:f1:1b:79:a0:42:3c:fd:bd:96:e1:06:ce:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Jun 14 01:00:39 2025 GMT
Not After : Jun 15 01:00:39 2025 GMT
Subject: CN=2647d720f42a0b43adaa2e4804408d3e2a86246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:49:5a:cd:71:59:93:aa:e2:e2:46:74:46:
40:f0:c2:1c:f5:8d:db:46:8a:24:97:17:4f:cd:c4:
27:3c:c6:f1:7e:23:fd:9f:4b:28:c4:e1:e4:52:13:
61:c2:1f:8b:21:fb:53:01:6c:48:8b:1b:a1:74:73:
10:52:a6:4c:ac:14:22:34:37:81:fd:90:bc:f7:b6:
5e:a8:4e:63:c6:56:25:ef:16:4c:6b:45:2f:8f:da:
33:51:66:30:42:8c:2a:f5:45:5c:f6:ae:a2:0a:bc:
fb:84:2d:15:10:bc:61:62:68:d2:18:07:b4:eb:90:
18:2e:cb:02:22:8b:41:6c:03:a4:88:a5:ea:a1:8a:
c8:47:8f:1f:57:dd:fe:2c:21:5d:3d:cf:64:ae:04:
5e:03:3f:25:32:16:5d:18:b9:b1:8d:1f:62:5a:5a:
cf:fc:bd:0f:35:16:40:1a:13:d1:f0:00:45:30:11:
18:f5:a6:cc:24:7a:1d:ec:8a:18:6d:08:62:0d:e4:
bf:7d:c1:ec:0f:d1:d4:f1:41:8a:d0:94:3d:f2:35:
73:06:84:78:48:8f:6b:16:d2:54:aa:d1:dd:72:df:
a8:b7:e7:86:a5:ba:b2:d6:b0:4a:d2:59:0a:c7:73:
e7:b2:b9:d6:0f:1c:88:c7:9f:ed:52:11:c7:6b:f9:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:D7:20:F4:2A:0B:43:AD:AA:2E:48:04:40:8D:3E:2A:86:24:6A
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:21:ff:9c:8a:d0:9d:f8:7d:09:31:f6:6b:a2:97:33:69:
94:49:b5:b6:17:d6:f0:14:85:78:c1:9c:93:7a:0d:09:c2:c4:
21:a4:46:e5:39:00:17:9a:cc:14:ee:bf:3c:ad:29:01:56:f2:
06:d6:c5:63:5e:14:6e:15:c2:a2:05:31:05:e3:0e:97:fc:55:
ca:85:f4:66:21:67:f0:f9:60:57:65:39:cb:ae:10:36:88:ae:
90:70:f7:d7:af:83:f9:e0:63:10:cb:04:a7:dc:21:72:f8:45:
7f:0a:18:17:86:05:a5:1c:d3:1d:e3:9e:20:17:76:bd:f3:ed:
ce:6b:da:40:6c:5a:15:e1:8d:5b:96:e2:ef:f6:1e:f6:40:65:
ef:c3:41:7c:fc:b3:c1:b4:96:36:4f:79:ef:08:8a:e4:22:1c:
11:d6:ef:c2:58:84:eb:26:8c:66:59:fe:68:e9:58:25:30:4f:
37:3d:3a:fc:e8:7b:69:7d:a9:7d:e0:dd:1f:e4:88:80:88:44:
8e:7b:3b:56:28:31:87:e8:f0:64:81:3a:11:06:20:8b:17:d3:
eb:01:64:08:05:14:11:4a:90:58:6e:0a:77:cc:f6:2a:73:7a:
cf:27:44:e8:66:b2:f8:e1:57:92:44:d0:e8:41:5e:11:6b:fb:
4d:a8:e0:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr8/fxG3mgQjz9vZbhBs58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw
ODVhNDMwHhcNMjUwNjE0MDEwMDM5WhcNMjUwNjE1MDEwMDM5WjAzMTEwLwYDVQQD
EygyNjQ3ZDcyMGY0MmEwYjQzYWRhYTJlNDgwNDQwOGQzZTJhODYyNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhRJWs1xWZOq4uJGdEZA8MIc9Y3b
RooklxdPzcQnPMbxfiP9n0soxOHkUhNhwh+LIftTAWxIixuhdHMQUqZMrBQiNDeB
/ZC897ZeqE5jxlYl7xZMa0Uvj9ozUWYwQowq9UVc9q6iCrz7hC0VELxhYmjSGAe0
65AYLssCIotBbAOkiKXqoYrIR48fV93+LCFdPc9krgReAz8lMhZdGLmxjR9iWlrP
/L0PNRZAGhPR8ABFMBEY9abMJHod7IoYbQhiDeS/fcHsD9HU8UGK0JQ98jVzBoR4
SI9rFtJUqtHdct+ot+eGpbqy1rBK0lkKx3PnsrnWDxyIx5/tUhHHa/mRzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZH1yD0KgtDraouSARAjT4qhiRqMB8GA1UdIwQY
MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt
NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk
LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV88h/5yK
0J34fQkx9muilzNplEm1thfW8BSFeMGck3oNCcLEIaRG5TkAF5rMFO6/PK0pAVby
BtbFY14UbhXCogUxBeMOl/xVyoX0ZiFn8PlgV2U5y64QNoiukHD316+D+eBjEMsE
p9whcvhFfwoYF4YFpRzTHeOeIBd2vfPtzmvaQGxaFeGNW5bi7/Ye9kBl78NBfPyz
wbSWNk957wiK5CIcEdbvwliE6yaMZln+aOlYJTBPNz06/Oh7aX2pfeDdH+SIgIhE
jns7Vigxh+jwZIE6EQYgixfT6wFkCAUUEUqQWG4Kd8z2KnN6zydE6Gay+OFXkkTQ
6EFeEWv7Tajgxw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:53 2025 by rpki-client