Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
File: gXNntPK_jrMfbhYk7Vbtq6nwITs.mft (raw, json)
Hash identifier: MEcgbxGi/cPCo0yCtCMpASrKAJPeUO08GTp7H/3Gvtg=
Subject key identifier: C5:8F:DE:D5:EB:2D:E9:12:57:99:66:60:54:45:1F:9D:CA:71:ED:60
Authority key identifier: 81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
Certificate issuer: /CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Certificate serial: 01989ECC9E7FD722814C85EE22898287F4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
Manifest number: 0D48
Signing time: Tue 12 Aug 2025 15:01:06 +0000
Manifest this update: Tue 12 Aug 2025 15:01:06 +0000
Manifest next update: Wed 13 Aug 2025 15:01:06 +0000
Files and hashes: 1: gXNntPK_jrMfbhYk7Vbtq6nwITs.crl (hash: FVV+X8kKIW+VPZvYB1HYBU4CpmKu3TRBu5sGsh0GEGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:9e:7f:d7:22:81:4c:85:ee:22:89:82:87:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Validity
Not Before: Aug 12 15:01:06 2025 GMT
Not After : Aug 13 15:01:06 2025 GMT
Subject: CN=c58fded5eb2de9125799666054451f9dca71ed60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:31:d5:a0:7e:ef:ed:c3:a8:70:b7:fe:9d:
3b:9d:2e:59:fe:9d:08:fc:ce:b2:44:89:d3:6c:a0:
1e:cf:fc:59:b0:dc:4e:2e:5f:61:a0:cb:9c:74:7b:
03:cb:f6:ee:c3:27:2d:b6:ae:5e:c0:45:73:86:de:
07:f0:db:9f:85:a3:8f:fb:9c:f3:9f:8e:07:ca:fe:
90:05:de:66:5a:aa:ad:2c:ad:b8:61:3d:36:5a:c0:
27:1f:a9:71:55:61:20:72:5e:5b:26:3d:c8:62:a3:
ba:36:c1:65:22:35:c6:b7:cf:3d:a5:22:fd:2b:34:
e0:a1:22:66:51:96:33:7a:27:b6:0a:3b:d3:c1:65:
72:4e:69:16:fc:6d:41:47:df:e3:d3:63:61:90:48:
aa:97:09:4f:c2:a6:98:42:91:ad:78:81:be:72:ee:
e3:88:78:fd:4d:2b:54:54:04:66:85:99:7d:c1:2c:
b5:51:30:7b:da:b0:9c:fb:65:a6:06:5f:5e:f0:45:
e8:d7:03:56:aa:b3:58:88:9c:88:2f:5a:b3:ae:45:
43:14:53:40:92:54:c4:66:8d:5e:96:d0:8f:96:ea:
38:b6:41:ae:73:00:78:83:9f:72:13:98:23:a3:06:
7b:ac:22:9a:23:db:3e:be:fc:ae:f6:c5:5c:52:0f:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:DE:D5:EB:2D:E9:12:57:99:66:60:54:45:1F:9D:CA:71:ED:60
X509v3 Authority Key Identifier:
keyid:81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f5:7c:a5:c5:df:75:c9:fd:b9:df:5e:90:d2:66:b6:a2:7f:
8f:01:98:f4:03:cb:23:12:da:70:be:02:c6:a6:52:78:78:da:
06:d1:8d:17:0c:c8:2b:e0:ed:af:f6:cc:3a:44:d8:9a:be:5f:
30:41:70:e1:8c:cc:e5:65:bd:93:6b:86:a3:1d:be:75:f6:a6:
8b:1e:d2:3a:0f:06:64:37:28:10:1f:d1:0c:ed:af:af:16:7a:
61:ab:78:8d:96:35:9d:1b:35:cf:76:22:1d:a4:1e:98:e5:d7:
48:84:93:23:fe:d5:58:12:f6:a0:c5:8f:59:61:c6:fd:85:f5:
33:38:1c:02:58:1f:aa:28:30:b7:9a:80:e4:a8:7b:89:27:ae:
40:d6:77:63:18:ed:49:9f:d9:7c:97:67:96:2e:4b:14:06:4a:
19:d5:46:1b:03:76:7f:92:93:c7:9d:0d:2d:33:0c:5f:4f:8a:
84:9c:23:a3:e1:98:4b:5d:02:af:fd:eb:c0:cd:29:43:e3:8c:
0c:46:82:10:fd:bc:bf:96:0f:de:b1:62:81:23:79:96:8b:46:
86:aa:a4:e8:7e:c1:44:87:c1:83:d4:37:97:ff:49:56:55:5c:
c6:21:9b:1e:09:d2:80:7b:b4:f8:de:d8:a0:dd:9f:3b:d5:cd:
40:62:55:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiezJ5/1yKBTIXuIomCh/TXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzM2N2I0ZjJiZjhlYjMxZjZlMTYyNGVkNTZlZGFiYTlm
MDIxM2IwHhcNMjUwODEyMTUwMTA2WhcNMjUwODEzMTUwMTA2WjAzMTEwLwYDVQQD
EyhjNThmZGVkNWViMmRlOTEyNTc5OTY2NjA1NDQ1MWY5ZGNhNzFlZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvAx1aB+7+3DqHC3/p07nS5Z/p0I
/M6yRInTbKAez/xZsNxOLl9hoMucdHsDy/buwycttq5ewEVzht4H8NufhaOP+5zz
n44Hyv6QBd5mWqqtLK24YT02WsAnH6lxVWEgcl5bJj3IYqO6NsFlIjXGt889pSL9
KzTgoSJmUZYzeie2CjvTwWVyTmkW/G1BR9/j02NhkEiqlwlPwqaYQpGteIG+cu7j
iHj9TStUVARmhZl9wSy1UTB72rCc+2WmBl9e8EXo1wNWqrNYiJyIL1qzrkVDFFNA
klTEZo1eltCPluo4tkGucwB4g59yE5gjowZ7rCKaI9s+vvyu9sVcUg/XZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWP3tXrLekSV5lmYFRFH53Kce1gMB8GA1UdIwQY
MBaAFIFzZ7Tyv46zH24WJO1W7aup8CE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hObnRQS19qck1mYmhZazdWYnRxNm53SVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85NTc1ZDAtOWM3Yy00NTcxLTg2M2Et
NTU1MTMwYTU3MDQxLzEvZ1hObnRQS19qck1mYmhZazdWYnRxNm53SVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85NTc1ZDAtOWM3Yy00NTcxLTg2M2EtNTU1MTMwYTU3MDQx
LzEvZ1hObnRQS19qck1mYmhZazdWYnRxNm53SVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfV8pcXf
dcn9ud9ekNJmtqJ/jwGY9APLIxLacL4CxqZSeHjaBtGNFwzIK+Dtr/bMOkTYmr5f
MEFw4YzM5WW9k2uGox2+dfamix7SOg8GZDcoEB/RDO2vrxZ6Yat4jZY1nRs1z3Yi
HaQemOXXSISTI/7VWBL2oMWPWWHG/YX1MzgcAlgfqigwt5qA5Kh7iSeuQNZ3Yxjt
SZ/ZfJdnli5LFAZKGdVGGwN2f5KTx50NLTMMX0+KhJwjo+GYS10Cr/3rwM0pQ+OM
DEaCEP28v5YP3rFigSN5lotGhqqk6H7BRIfBg9Q3l/9JVlVcxiGbHgnSgHu0+N7Y
oN2fO9XNQGJVJw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:27 2025 by rpki-client