
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: WD+UxAs53gu6ei7/AtbVC0qLDtayoUTKTJ1TV3W03oQ=
Subject key identifier: C5:FE:2B:5B:C9:44:50:46:01:3D:32:11:21:F1:CA:11:15:C9:76:7F
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 01987CAE84AB2B02A02D2AC6EBEEA448AAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 046C
Signing time: Wed 06 Aug 2025 00:01:08 +0000
Manifest this update: Wed 06 Aug 2025 00:01:08 +0000
Manifest next update: Thu 07 Aug 2025 00:01:08 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: Yr/GLvtcOPpLbmMrY0hG0umbqiWpyah8cJ+rIbdwFzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:84:ab:2b:02:a0:2d:2a:c6:eb:ee:a4:48:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Aug 6 00:01:08 2025 GMT
Not After : Aug 7 00:01:08 2025 GMT
Subject: CN=c5fe2b5bc9445046013d321121f1ca1115c9767f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:ad:35:c2:bb:c8:3b:36:e7:2b:27:01:8f:
88:12:e8:62:77:f0:b1:9f:cb:8c:c7:15:57:d9:81:
c5:ad:30:4f:d8:c6:7f:53:8d:9a:12:71:72:68:4e:
e7:a3:0b:d0:52:a7:04:fe:29:30:c0:30:8f:0a:07:
6b:c3:88:80:5e:1a:fe:f5:9a:95:12:be:3c:8e:8d:
b0:46:19:ce:ca:58:66:34:e4:e4:df:a9:79:6e:51:
13:38:47:fc:91:1d:de:6d:d8:bf:22:8b:0c:64:56:
08:ff:8c:27:3a:7c:7d:ee:04:25:a5:0f:da:ee:4a:
9f:5d:20:45:6e:9b:d6:d9:cd:88:0d:fd:12:63:93:
26:c8:37:84:28:da:98:f4:f3:65:77:37:f0:b1:63:
8c:15:0d:3e:9b:88:19:7a:fe:a3:32:36:aa:f9:05:
93:8e:f5:cf:16:3c:78:a6:69:02:eb:40:fe:34:fb:
cd:a5:62:d5:86:f7:13:7b:b3:20:7f:2a:ce:72:c8:
f3:ef:2e:c8:b0:c7:bb:7d:1a:6b:ab:00:64:f3:c5:
a0:13:d2:c7:dd:68:8e:f1:37:83:fb:89:6f:b7:0d:
12:d9:c9:d8:3e:0b:45:e1:b3:7d:4f:ed:84:6a:8b:
e6:57:59:18:24:c6:56:e9:13:b3:63:e0:25:a2:66:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:2B:5B:C9:44:50:46:01:3D:32:11:21:F1:CA:11:15:C9:76:7F
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b5:a9:dc:05:5b:ac:a8:dc:d3:b8:62:64:6b:8c:9b:19:d4:
de:ec:e2:20:96:4b:83:00:ca:82:25:0f:72:97:fa:f1:0d:83:
fe:c7:96:40:1b:88:b1:fa:65:23:36:f2:61:52:ec:4e:d9:da:
a9:6e:75:11:c3:c7:0e:c6:72:c2:d8:08:bd:8b:42:70:01:da:
d6:f9:8c:b2:67:1e:ea:48:30:f3:7b:e4:11:19:72:60:72:c3:
d5:46:04:75:d9:0a:53:54:0c:cb:25:25:da:cd:25:9f:af:53:
ea:8e:e2:27:5c:eb:98:25:7c:8f:9c:dc:ea:a8:cc:c8:0e:8a:
cf:81:28:96:22:f3:bc:fc:6a:ec:e6:d1:46:40:0e:9d:70:a8:
7d:ab:a3:88:0b:1b:88:a7:80:40:0b:77:2c:25:32:f5:97:06:
ab:5e:24:32:e9:da:c4:25:62:7b:7a:a2:08:bd:05:f9:f5:50:
ea:4a:1c:86:71:8c:af:de:f2:cb:0b:a0:13:26:b7:ad:1e:54:
fd:bb:5d:89:3a:d6:d7:cc:94:e5:b9:5d:e2:d2:99:de:92:1b:
e4:04:c9:f0:76:d5:bd:75:57:82:24:f9:dd:d5:34:a4:a1:02:
dc:c4:11:68:e4:cb:c1:c1:b0:0f:1f:47:23:ae:a6:4c:f6:89:
a5:30:4f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8roSrKwKgLSrG6+6kSKr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4
OWVjNjIwHhcNMjUwODA2MDAwMTA4WhcNMjUwODA3MDAwMTA4WjAzMTEwLwYDVQQD
EyhjNWZlMmI1YmM5NDQ1MDQ2MDEzZDMyMTEyMWYxY2ExMTE1Yzk3NjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOWtNcK7yDs25ysnAY+IEuhid/Cx
n8uMxxVX2YHFrTBP2MZ/U42aEnFyaE7nowvQUqcE/ikwwDCPCgdrw4iAXhr+9ZqV
Er48jo2wRhnOylhmNOTk36l5blETOEf8kR3ebdi/IosMZFYI/4wnOnx97gQlpQ/a
7kqfXSBFbpvW2c2IDf0SY5MmyDeEKNqY9PNldzfwsWOMFQ0+m4gZev6jMjaq+QWT
jvXPFjx4pmkC60D+NPvNpWLVhvcTe7MgfyrOcsjz7y7IsMe7fRprqwBk88WgE9LH
3WiO8TeD+4lvtw0S2cnYPgtF4bN9T+2EaovmV1kYJMZW6ROzY+AlombUbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX+K1vJRFBGAT0yESHxyhEVyXZ/MB8GA1UdIwQY
MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct
NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3
LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7Wp3AVb
rKjc07hiZGuMmxnU3uziIJZLgwDKgiUPcpf68Q2D/seWQBuIsfplIzbyYVLsTtna
qW51EcPHDsZywtgIvYtCcAHa1vmMsmce6kgw83vkERlyYHLD1UYEddkKU1QMyyUl
2s0ln69T6o7iJ1zrmCV8j5zc6qjMyA6Kz4EoliLzvPxq7ObRRkAOnXCofaujiAsb
iKeAQAt3LCUy9ZcGq14kMunaxCVie3qiCL0F+fVQ6kochnGMr97yywugEya3rR5U
/btdiTrW18yU5bld4tKZ3pIb5ATJ8HbVvXVXgiT53dU0pKEC3MQRaOTLwcGwDx9H
I66mTPaJpTBPEQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:58 2025 by rpki-client