Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
File: GHrmJafreY8V_B5hw-E3AaNW_hY.mft (raw, json)
Hash identifier: LRhysXvvHYNo52mfG07oTA26xDXCjJsoBRD8h5EzfFs=
Subject key identifier: 3E:C4:C5:AF:98:FD:0E:25:A5:B8:5C:E4:7A:13:C3:F9:EE:C1:CD:26
Authority key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Certificate issuer: /CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Certificate serial: 019873E2C3ED74747DF506B3AE4BA858E9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
Manifest number: 36
Signing time: Mon 04 Aug 2025 07:01:37 +0000
Manifest this update: Mon 04 Aug 2025 07:01:37 +0000
Manifest next update: Tue 05 Aug 2025 07:01:37 +0000
Files and hashes: 1: GHrmJafreY8V_B5hw-E3AaNW_hY.crl (hash: Y3SFcBhiIqsmwvxuNImvdSLgOTb5GtP1QjscWy7nIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c3:ed:74:74:7d:f5:06:b3:ae:4b:a8:58:e9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Validity
Not Before: Aug 4 07:01:37 2025 GMT
Not After : Aug 5 07:01:37 2025 GMT
Subject: CN=3ec4c5af98fd0e25a5b85ce47a13c3f9eec1cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:a1:c6:1c:85:20:2e:db:85:2a:96:74:85:
08:c2:75:51:a6:d9:f5:1b:5c:88:d5:9e:fe:b0:2b:
07:d6:4a:75:10:f9:aa:75:36:f3:55:62:3e:85:98:
18:14:06:a2:20:d4:f9:a0:40:15:3e:39:72:90:ef:
94:bc:aa:6c:62:92:76:3d:69:43:2c:6c:54:e0:8a:
9b:4c:65:48:71:b4:37:13:9f:ff:cb:ee:1a:77:3f:
52:5e:2f:fa:64:80:c6:ca:7c:8b:d8:f9:fd:7e:42:
e9:e3:50:4c:83:3e:70:c7:f3:a6:64:ff:21:8f:ca:
90:4f:c6:b6:29:c4:b9:77:c6:8e:9e:ae:1c:e3:66:
1c:83:4a:a3:41:72:92:2b:2e:75:cd:23:79:80:94:
1e:6c:bb:af:76:3b:f4:aa:d5:25:2b:21:86:c9:ab:
7b:f9:e5:b7:87:25:f8:4c:b7:20:ba:f3:7c:41:21:
8f:a0:b3:ea:d0:83:bd:df:d1:02:66:08:ee:73:cb:
10:64:98:02:e2:18:8e:23:38:6c:19:92:a8:b7:c4:
48:4b:d4:b2:a4:4e:95:6d:b9:68:df:ec:d7:40:43:
0d:41:c5:83:f3:37:b1:28:1c:43:32:b0:50:57:0c:
1e:cf:fd:7d:ea:24:01:4d:a2:72:09:93:ab:e4:4a:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:C5:AF:98:FD:0E:25:A5:B8:5C:E4:7A:13:C3:F9:EE:C1:CD:26
X509v3 Authority Key Identifier:
keyid:18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a1:46:a1:34:8e:4e:23:9c:1e:5f:f7:cb:71:46:e0:0b:a9:
35:dc:1c:1d:88:53:c4:f8:1e:61:a1:ca:82:3e:b1:db:5c:a4:
f3:2d:77:91:a9:06:f6:1a:2c:3e:9c:d1:d5:de:7e:6a:71:f6:
bc:43:da:37:69:04:bc:ca:78:8e:f9:e1:e6:d8:f9:d9:ab:7c:
99:67:28:46:9e:23:c8:02:c8:6e:34:04:50:df:81:3d:94:ba:
48:23:65:50:0b:80:36:4f:5c:42:54:b9:d8:fa:55:8e:60:2a:
fb:ea:b5:69:6c:4f:05:5d:ee:b1:7e:f2:66:ab:40:0c:23:87:
83:11:28:5d:5e:c5:8b:2a:2f:2f:56:78:1a:d8:20:50:07:71:
a8:f6:31:0b:33:db:27:05:7d:f0:09:fc:20:9b:01:f3:c0:af:
9b:f2:24:a4:b4:6f:c0:73:fb:ec:6f:ea:33:ac:61:a2:3a:b9:
33:e4:00:d3:91:6c:1b:34:1d:50:31:27:01:4b:c5:29:95:8e:
83:3d:d3:f4:85:3c:92:52:4d:86:f3:df:06:d2:1c:24:f3:82:
f8:5b:ff:0a:c7:82:60:19:b1:28:e9:da:eb:a0:8a:8e:cf:cf:
0f:26:c6:7a:30:01:f6:3a:01:3a:e5:a9:72:51:36:42:bf:cd:
79:4a:df:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4sPtdHR99QazrkuoWOmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4N2FlNjI1YTdlYjc5OGYxNWZjMWU2MWMzZTEzNzAxYTM1
NmZlMTYwHhcNMjUwODA0MDcwMTM3WhcNMjUwODA1MDcwMTM3WjAzMTEwLwYDVQQD
EygzZWM0YzVhZjk4ZmQwZTI1YTViODVjZTQ3YTEzYzNmOWVlYzFjZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCqhxhyFIC7bhSqWdIUIwnVRptn1
G1yI1Z7+sCsH1kp1EPmqdTbzVWI+hZgYFAaiINT5oEAVPjlykO+UvKpsYpJ2PWlD
LGxU4IqbTGVIcbQ3E5//y+4adz9SXi/6ZIDGynyL2Pn9fkLp41BMgz5wx/OmZP8h
j8qQT8a2KcS5d8aOnq4c42Ycg0qjQXKSKy51zSN5gJQebLuvdjv0qtUlKyGGyat7
+eW3hyX4TLcguvN8QSGPoLPq0IO939ECZgjuc8sQZJgC4hiOIzhsGZKot8RIS9Sy
pE6Vbblo3+zXQEMNQcWD8zexKBxDMrBQVwwez/196iQBTaJyCZOr5EqDMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7Exa+Y/Q4lpbhc5HoTw/nuwc0mMB8GA1UdIwQY
MBaAFBh65iWn63mPFfweYcPhNwGjVv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0hybUphZnJlWThWX0I1aHctRTNBYU5XX2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85YTVhZjItNWRhZi00MDBiLWI5MWEt
NWMwMGNiZTc2ZjM0LzEvR0hybUphZnJlWThWX0I1aHctRTNBYU5XX2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85YTVhZjItNWRhZi00MDBiLWI5MWEtNWMwMGNiZTc2ZjM0
LzEvR0hybUphZnJlWThWX0I1aHctRTNBYU5XX2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqFGoTSO
TiOcHl/3y3FG4AupNdwcHYhTxPgeYaHKgj6x21yk8y13kakG9hosPpzR1d5+anH2
vEPaN2kEvMp4jvnh5tj52at8mWcoRp4jyALIbjQEUN+BPZS6SCNlUAuANk9cQlS5
2PpVjmAq++q1aWxPBV3usX7yZqtADCOHgxEoXV7FiyovL1Z4GtggUAdxqPYxCzPb
JwV98An8IJsB88Cvm/IkpLRvwHP77G/qM6xhojq5M+QA05FsGzQdUDEnAUvFKZWO
gz3T9IU8klJNhvPfBtIcJPOC+Fv/CseCYBmxKOna66CKjs/PDybGejAB9joBOuWp
clE2Qr/NeUrfVg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:00 2025 by rpki-client