Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier: VPCWL2jTUrVZr7roXWd67LRSr7GGjDRX8564qddNVp8=
Subject key identifier: D5:8E:3C:A7:6D:04:31:69:43:79:AB:54:6C:B2:44:82:DB:72:B9:6C
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial: 019768BBCBC41124F98C3B8422E8D3687316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number: 01DD
Signing time: Fri 13 Jun 2025 10:00:27 +0000
Manifest this update: Fri 13 Jun 2025 10:00:27 +0000
Manifest next update: Sat 14 Jun 2025 10:00:27 +0000
Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: JiV9CbvnDajujAKEsANxVYsyuWTapTu8FLCmJHw7HG4=)
2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:cb:c4:11:24:f9:8c:3b:84:22:e8:d3:68:73:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Validity
Not Before: Jun 13 10:00:27 2025 GMT
Not After : Jun 14 10:00:27 2025 GMT
Subject: CN=d58e3ca76d0431694379ab546cb24482db72b96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:2c:51:4e:e4:ff:35:98:00:78:40:f7:15:
c7:5b:68:fa:d1:30:75:15:80:2e:23:18:ce:01:f4:
83:f4:9d:1c:11:d9:a5:ea:05:d7:59:d2:77:6d:8a:
3a:27:6b:04:8f:4a:d1:da:5e:13:fb:ed:22:e6:07:
d3:5c:c3:5f:98:21:e2:25:57:e2:ab:02:e2:7d:f9:
ac:3c:cf:ca:40:6d:65:ea:b7:a8:78:93:4c:0d:f4:
c8:42:f2:66:35:80:a0:db:c6:0b:48:a4:2b:55:67:
b0:9e:5f:58:0b:22:25:7d:69:9b:67:7c:46:ef:3b:
b2:f3:ce:f7:77:82:7f:80:ee:1b:c8:73:85:b9:22:
05:04:d6:01:25:65:e4:da:16:d3:d7:c4:28:34:de:
cb:7e:85:06:3f:48:dd:72:7d:34:94:65:1a:05:0a:
72:d6:63:0e:b9:d8:49:02:7b:af:eb:8b:11:6a:90:
ef:fc:c4:f6:2c:96:db:84:6e:18:6a:d7:b7:f8:18:
b5:fc:a9:6d:27:ce:cf:85:12:88:db:be:6a:ce:1e:
84:92:d9:e1:0f:51:fd:76:ab:e3:04:64:78:07:97:
72:ba:5b:1b:1d:be:51:ba:bc:f3:fa:09:78:9e:7f:
16:a0:cc:fd:67:0f:1c:fb:9e:09:1d:a5:bd:b1:28:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:3C:A7:6D:04:31:69:43:79:AB:54:6C:B2:44:82:DB:72:B9:6C
X509v3 Authority Key Identifier:
keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:42:74:35:3b:cb:6e:07:eb:c1:52:ef:42:e6:90:31:9b:
e2:d4:95:e1:e2:a2:13:d7:38:dc:ee:bb:92:e5:c8:e1:bd:54:
61:9c:7c:9e:ff:9e:e9:82:5e:5b:5a:2d:2f:8b:7e:91:6a:7f:
19:d3:d9:96:eb:6b:15:a0:81:94:8b:fd:65:2c:5a:5a:94:9a:
82:0e:a4:ae:f3:bc:dd:12:ab:8a:b8:7e:1d:52:87:dd:d8:ac:
7a:74:90:5a:55:af:03:24:51:67:c9:e8:2f:1e:34:47:15:45:
aa:9a:14:a5:8b:a6:e4:d3:9d:87:01:7d:1d:56:ea:df:ba:c3:
9f:f3:c8:ac:d2:3f:d2:67:fb:ec:b1:81:75:56:1b:5a:fa:97:
de:6d:b6:34:c6:0e:3b:79:b2:91:61:e0:19:47:bd:0b:13:83:
c6:73:6c:fc:3d:9c:2c:45:d7:b3:36:a2:f8:b4:90:48:34:e0:
9d:3a:b4:b1:10:1b:84:46:14:13:0b:f7:3a:30:b3:5e:d3:98:
f2:8b:7b:a0:35:08:ff:95:90:bf:d3:6e:8d:3d:6d:d1:83:a4:
48:45:d4:97:9d:b8:59:cb:33:6f:18:16:e6:95:2f:30:8b:fd:
a4:45:70:cf:31:d8:ac:07:5f:3d:63:54:65:80:24:f4:3c:f7:
b3:5a:e1:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou8vEEST5jDuEIujTaHMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzYxY2I4MzMyMGZmY2JhMDFmZDgwN2EwNmU4ODljYzMx
ZDg1ZTcwHhcNMjUwNjEzMTAwMDI3WhcNMjUwNjE0MTAwMDI3WjAzMTEwLwYDVQQD
EyhkNThlM2NhNzZkMDQzMTY5NDM3OWFiNTQ2Y2IyNDQ4MmRiNzJiOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOgsUU7k/zWYAHhA9xXHW2j60TB1
FYAuIxjOAfSD9J0cEdml6gXXWdJ3bYo6J2sEj0rR2l4T++0i5gfTXMNfmCHiJVfi
qwLiffmsPM/KQG1l6reoeJNMDfTIQvJmNYCg28YLSKQrVWewnl9YCyIlfWmbZ3xG
7zuy8873d4J/gO4byHOFuSIFBNYBJWXk2hbT18QoNN7LfoUGP0jdcn00lGUaBQpy
1mMOudhJAnuv64sRapDv/MT2LJbbhG4Yate3+Bi1/KltJ87PhRKI275qzh6Ektnh
D1H9dqvjBGR4B5dyulsbHb5Rurzz+gl4nn8WoMz9Zw8c+54JHaW9sSjznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWOPKdtBDFpQ3mrVGyyRILbcrlsMB8GA1UdIwQY
MBaAFBl2HLgzIP/LoB/YB6BuiJzDHYXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgt
Y2Q4YmUxYzU5ZDhkLzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgtY2Q4YmUxYzU5ZDhk
LzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyBCdDU7
y24H68FS70LmkDGb4tSV4eKiE9c43O67kuXI4b1UYZx8nv+e6YJeW1otL4t+kWp/
GdPZlutrFaCBlIv9ZSxaWpSagg6krvO83RKrirh+HVKH3disenSQWlWvAyRRZ8no
Lx40RxVFqpoUpYum5NOdhwF9HVbq37rDn/PIrNI/0mf77LGBdVYbWvqX3m22NMYO
O3mykWHgGUe9CxODxnNs/D2cLEXXszai+LSQSDTgnTq0sRAbhEYUEwv3OjCzXtOY
8ot7oDUI/5WQv9NujT1t0YOkSEXUl524WcszbxgW5pUvMIv9pEVwzzHYrAdfPWNU
ZYAk9Dz3s1rhRg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:10 2025 by rpki-client