Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File: gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier: eKYpN6dD69Tgfo5m+VMhXnSVT9fLNZwsuSwpCvaNEr0=
Subject key identifier: CF:CC:76:C5:84:E1:AC:8F:EF:EB:FD:77:26:29:94:80:CB:9A:70:61
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer: /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial: 0198733D24FD7B1528858F49EAA45AA07A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 04:00:43 +0000
Manifest this update: Mon 04 Aug 2025 04:00:43 +0000
Manifest next update: Tue 05 Aug 2025 04:00:43 +0000
Files and hashes: 1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: Tmegd7nIDdl3kKQM/oLUAahhC4hiDAGBYzzXvZdiG94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:24:fd:7b:15:28:85:8f:49:ea:a4:5a:a0:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Validity
Not Before: Aug 4 04:00:43 2025 GMT
Not After : Aug 5 04:00:43 2025 GMT
Subject: CN=cfcc76c584e1ac8fefebfd7726299480cb9a7061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:a4:5e:e6:c3:6a:2a:75:db:f7:a7:a2:9d:
8a:9a:6a:76:af:82:26:9a:75:8f:4c:95:cc:35:0a:
b4:2c:16:41:87:57:ac:76:11:31:9f:32:44:39:70:
62:08:3c:49:08:cd:23:3f:fd:27:fe:51:df:ea:ea:
34:ba:38:64:77:e9:dc:34:60:37:60:09:04:a0:56:
e8:1c:a0:97:dc:20:e6:48:4e:8e:4f:a0:8b:b6:ff:
cf:52:46:ec:e3:d2:43:94:95:86:f3:23:d3:8e:01:
45:89:f8:8f:1b:cb:d8:bc:65:41:64:d4:fd:c3:52:
d3:5b:b1:ca:a1:a5:83:f1:bc:ec:54:34:2c:28:a5:
3e:3e:ec:f1:ce:78:ab:3e:70:79:b3:1a:f1:89:0a:
af:5e:3e:82:6d:f0:99:89:29:81:88:c5:ee:2f:77:
de:0a:d6:9a:e2:00:a3:fe:00:1c:a5:e3:11:12:2c:
0c:84:3b:cc:b1:6e:2e:e3:44:d3:ac:48:11:f8:6c:
a5:40:87:c9:4e:62:9c:12:01:39:54:41:a3:97:72:
a8:3e:62:69:9c:d4:4a:81:67:50:23:36:a7:e2:a7:
83:ce:9a:ba:36:4d:92:cc:53:6f:4f:fb:f4:c6:bf:
72:19:2f:50:21:60:c0:4e:c6:00:31:82:49:73:fc:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:76:C5:84:E1:AC:8F:EF:EB:FD:77:26:29:94:80:CB:9A:70:61
X509v3 Authority Key Identifier:
keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2e:b1:f4:56:4d:72:c6:16:b9:3d:0f:3b:42:ff:fc:bb:f3:
2f:47:39:82:39:43:ea:90:1c:cf:89:fa:c2:cc:1f:49:f1:1f:
1f:9f:64:fa:fa:5e:a0:33:85:6f:03:72:aa:cf:5d:f3:d8:74:
a4:d0:5c:10:89:bb:dc:d0:57:16:b8:13:c6:ce:b2:7c:a9:c6:
dd:d9:06:37:69:b4:dd:c3:93:c5:ea:b7:23:c8:fa:ac:6e:41:
83:15:6f:91:40:2a:69:f4:b8:66:ce:1d:e3:40:3f:a0:e6:39:
7d:70:6c:f8:b6:f4:ab:66:87:ad:61:8f:e0:c2:25:c0:78:93:
14:cf:48:32:e2:54:eb:c4:f3:48:f0:33:cf:40:88:57:cf:3c:
b9:57:94:49:6f:c5:c0:d8:c8:e9:59:48:2b:f8:10:36:31:62:
59:0b:f7:24:bb:ad:88:fc:dd:63:f6:03:c2:fc:e2:07:fb:4d:
26:62:47:5c:bd:ea:c8:23:37:02:63:26:ef:e3:06:a6:37:17:
40:1a:f8:93:80:66:41:03:5f:ea:ed:0f:cf:ea:14:fa:3f:3d:
99:6e:d7:63:a2:5e:20:c0:9a:a0:f5:9c:c7:e1:52:8f:0b:12:
5e:ca:46:e6:32:4d:b2:4a:d2:fa:3d:61:80:0f:9c:9b:04:7a:
79:ec:05:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPST9exUohY9J6qRaoHocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmEyN2JmZDg2YTgxMGExNzk1N2QxZjcyNmZlMTYwZDRl
YjMyMjUwHhcNMjUwODA0MDQwMDQzWhcNMjUwODA1MDQwMDQzWjAzMTEwLwYDVQQD
EyhjZmNjNzZjNTg0ZTFhYzhmZWZlYmZkNzcyNjI5OTQ4MGNiOWE3MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcqkXubDaip12/enop2Kmmp2r4Im
mnWPTJXMNQq0LBZBh1esdhExnzJEOXBiCDxJCM0jP/0n/lHf6uo0ujhkd+ncNGA3
YAkEoFboHKCX3CDmSE6OT6CLtv/PUkbs49JDlJWG8yPTjgFFifiPG8vYvGVBZNT9
w1LTW7HKoaWD8bzsVDQsKKU+PuzxznirPnB5sxrxiQqvXj6CbfCZiSmBiMXuL3fe
Ctaa4gCj/gAcpeMREiwMhDvMsW4u40TTrEgR+GylQIfJTmKcEgE5VEGjl3KoPmJp
nNRKgWdQIzan4qeDzpq6Nk2SzFNvT/v0xr9yGS9QIWDATsYAMYJJc/wGCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/MdsWE4ayP7+v9dyYplIDLmnBhMB8GA1UdIwQY
MBaAFIC6J7/YaoEKF5V9H3Jv4WDU6zIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQt
MDM2ZTdlZmM5YWNhLzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQtMDM2ZTdlZmM5YWNh
LzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi6x9FZN
csYWuT0PO0L//LvzL0c5gjlD6pAcz4n6wswfSfEfH59k+vpeoDOFbwNyqs9d89h0
pNBcEIm73NBXFrgTxs6yfKnG3dkGN2m03cOTxeq3I8j6rG5BgxVvkUAqafS4Zs4d
40A/oOY5fXBs+Lb0q2aHrWGP4MIlwHiTFM9IMuJU68TzSPAzz0CIV888uVeUSW/F
wNjI6VlIK/gQNjFiWQv3JLutiPzdY/YDwvziB/tNJmJHXL3qyCM3AmMm7+MGpjcX
QBr4k4BmQQNf6u0Pz+oU+j89mW7XY6JeIMCaoPWcx+FSjwsSXspG5jJNskrS+j1h
gA+cmwR6eewFZg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:59 2025 by rpki-client