Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: zZAQ4+v6yYlRCaLY7aD9m2tv3dSQ61LUOCR3vmjrqU0=
Subject key identifier: 3E:64:36:9E:26:11:BD:A9:D9:54:19:F5:4E:8D:41:76:0F:99:B6:30
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 01977075A90B7DA22A18F85F22496FCA56FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 12C0
Signing time: Sat 14 Jun 2025 22:00:48 +0000
Manifest this update: Sat 14 Jun 2025 22:00:48 +0000
Manifest next update: Sun 15 Jun 2025 22:00:48 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: x8KBqNxB/ylTBqtqT7YG/hK9cLQJXIC8UoSxFItBNWA=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:a9:0b:7d:a2:2a:18:f8:5f:22:49:6f:ca:56:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jun 14 22:00:48 2025 GMT
Not After : Jun 15 22:00:48 2025 GMT
Subject: CN=3e64369e2611bda9d95419f54e8d41760f99b630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:09:5e:f6:fd:9e:ba:35:7e:da:6e:41:53:
74:2e:71:40:f1:78:61:32:c3:0d:85:49:6c:a4:f3:
5c:c8:82:50:54:06:bc:0c:37:b8:7c:aa:91:18:63:
73:50:52:8a:8c:fb:cb:c1:4b:bb:56:23:98:ba:17:
45:ce:26:30:8f:c1:e9:1c:ed:67:0f:f1:be:ad:5d:
e6:dc:44:fd:2c:21:b2:d9:68:e7:10:a3:39:c1:ca:
97:ac:c8:27:78:96:45:6c:a0:32:5c:76:72:85:1f:
50:b9:47:d3:3d:95:7e:16:a6:57:b9:5b:df:17:8b:
0a:ff:ee:b7:e2:9a:3f:40:e9:46:94:87:01:c5:76:
5d:aa:cf:78:8e:63:b6:09:17:44:8c:c3:26:83:0e:
11:4e:0c:9d:b9:b2:61:68:51:d1:15:a1:c6:e7:ee:
a4:92:d8:81:81:9d:1f:13:7e:61:39:7c:cc:7a:c6:
7a:2d:a5:1c:44:96:fc:6b:9d:20:6b:51:53:aa:0c:
6b:5b:fa:8b:fd:2b:fc:0e:45:1d:96:44:b7:cd:19:
ed:41:4c:a6:20:be:9d:33:55:77:5a:35:30:c6:7e:
a8:6c:8f:b8:85:08:e1:bb:28:83:6e:a5:c8:9f:15:
f4:55:35:a1:17:d4:56:3b:92:12:17:4e:1f:3c:d8:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:36:9E:26:11:BD:A9:D9:54:19:F5:4E:8D:41:76:0F:99:B6:30
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a2:1d:99:9e:8e:e5:97:76:49:ad:dd:d3:72:1b:4c:c7:71:
03:12:ba:70:e7:3b:2b:07:de:db:c1:59:1d:cd:91:e8:87:4a:
06:ed:45:c7:1a:bf:7b:14:b9:d5:6a:ab:7a:7a:73:7e:fa:fd:
1e:8d:b5:8f:dc:54:bb:e9:47:e4:1b:85:3d:16:cc:64:91:a0:
4d:94:60:9b:8b:d8:6a:4d:ee:46:b7:ff:77:e2:52:38:30:bf:
f5:f6:a6:10:6b:2d:b2:98:d2:c7:44:43:86:a6:25:50:d5:a8:
1b:76:92:de:cf:72:77:82:9f:ba:47:60:6f:64:de:5b:26:86:
a9:25:c9:22:6c:80:f0:55:d1:e8:99:4f:b4:d9:13:bf:2f:18:
b4:13:89:1c:78:e7:75:80:fd:0f:77:c5:cf:1d:47:cc:e2:ce:
76:6c:fd:af:79:9a:91:c3:4f:5e:4c:cc:3f:a5:ad:f1:6b:ca:
a4:4e:87:d2:92:c9:a2:5c:c0:86:77:82:4c:61:04:4d:16:33:
c5:49:a2:10:55:db:16:9d:61:18:31:b4:ee:a1:ca:a8:fd:26:
77:fa:b4:41:df:18:24:71:29:db:93:9a:22:03:df:4b:c0:b9:
6e:31:e1:82:47:86:83:d2:c6:96:58:93:92:b0:17:f4:0a:ae:
05:79:2a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdakLfaIqGPhfIklvylb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwNjE0MjIwMDQ4WhcNMjUwNjE1MjIwMDQ4WjAzMTEwLwYDVQQD
EygzZTY0MzY5ZTI2MTFiZGE5ZDk1NDE5ZjU0ZThkNDE3NjBmOTliNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1AJXvb9nro1ftpuQVN0LnFA8Xhh
MsMNhUlspPNcyIJQVAa8DDe4fKqRGGNzUFKKjPvLwUu7ViOYuhdFziYwj8HpHO1n
D/G+rV3m3ET9LCGy2WjnEKM5wcqXrMgneJZFbKAyXHZyhR9QuUfTPZV+FqZXuVvf
F4sK/+634po/QOlGlIcBxXZdqs94jmO2CRdEjMMmgw4RTgydubJhaFHRFaHG5+6k
ktiBgZ0fE35hOXzMesZ6LaUcRJb8a50ga1FTqgxrW/qL/Sv8DkUdlkS3zRntQUym
IL6dM1V3WjUwxn6obI+4hQjhuyiDbqXInxX0VTWhF9RWO5ISF04fPNhdjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5kNp4mEb2p2VQZ9U6NQXYPmbYwMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaIdmZ6O
5Zd2Sa3d03IbTMdxAxK6cOc7Kwfe28FZHc2R6IdKBu1Fxxq/exS51Wqrenpzfvr9
Ho21j9xUu+lH5BuFPRbMZJGgTZRgm4vYak3uRrf/d+JSODC/9famEGstspjSx0RD
hqYlUNWoG3aS3s9yd4Kfukdgb2TeWyaGqSXJImyA8FXR6JlPtNkTvy8YtBOJHHjn
dYD9D3fFzx1HzOLOdmz9r3makcNPXkzMP6Wt8WvKpE6H0pLJolzAhneCTGEETRYz
xUmiEFXbFp1hGDG07qHKqP0md/q0Qd8YJHEp25OaIgPfS8C5bjHhgkeGg9LGlliT
krAX9AquBXkqqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:45 2025 by rpki-client