Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: g1pEzvOY6IxSqxJhG6HjaJXldn2pZQiK0wVoxbTx4gk=
Subject key identifier: CB:F6:AA:40:64:94:87:E7:CF:0F:4F:52:4E:A8:4F:5B:50:5F:10:BF
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 01987B9B76515B17399CC4C4F6FB7D6C1977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 0F3D
Signing time: Tue 05 Aug 2025 19:00:42 +0000
Manifest this update: Tue 05 Aug 2025 19:00:42 +0000
Manifest next update: Wed 06 Aug 2025 19:00:42 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: Sassmlz030VPjoHcv+p8Eu0kThBrSZXGVzX2xVk7zts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:76:51:5b:17:39:9c:c4:c4:f6:fb:7d:6c:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: Aug 5 19:00:42 2025 GMT
Not After : Aug 6 19:00:42 2025 GMT
Subject: CN=cbf6aa40649487e7cf0f4f524ea84f5b505f10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:af:3c:15:d0:93:e4:e1:05:70:8a:de:22:
1a:e1:e4:d1:d5:5d:4a:6e:43:30:2a:e2:00:a6:7e:
26:96:0d:70:6b:ac:de:3b:59:1c:6d:1a:63:91:0f:
d4:fa:00:9f:72:13:a0:63:dd:63:38:81:41:a8:f5:
5d:72:ca:33:c0:3b:24:e4:7c:26:44:50:e8:33:0d:
5d:27:02:a0:45:34:f3:6b:e4:b3:ef:cc:48:a9:62:
bd:bc:57:af:78:e8:ab:77:21:27:fc:66:c4:6f:04:
cc:d2:87:da:f1:af:af:a1:9e:60:0f:27:8a:30:96:
9b:64:86:f7:7d:d6:b3:6e:b2:5f:ac:3b:fc:72:4f:
40:f4:22:33:f8:b4:0c:57:eb:1f:68:3c:00:90:eb:
39:f8:34:61:14:f6:78:32:63:0b:85:d7:98:df:42:
c7:48:02:cd:72:a4:26:53:ee:96:a2:e5:c1:f4:93:
de:04:f0:12:ec:b3:78:79:3a:c9:8e:66:ac:2a:9d:
6e:1f:84:be:f3:ca:aa:af:74:1e:35:e5:16:d8:63:
87:90:6b:41:61:f9:41:fb:3a:d4:e1:ea:3b:f6:4c:
4b:5a:98:88:0f:38:9a:b7:18:50:8c:61:43:fa:11:
d4:af:5f:b6:0b:6d:a5:b2:b7:95:35:23:e9:38:f7:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:AA:40:64:94:87:E7:CF:0F:4F:52:4E:A8:4F:5B:50:5F:10:BF
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:a1:9b:6f:a3:32:43:91:e2:1e:4c:c4:23:a8:aa:8c:ca:
3a:79:51:a3:07:c3:75:7c:6d:ce:21:da:2c:80:e9:8d:35:3b:
03:c9:f9:a2:2f:31:fc:47:6a:40:cd:a8:bb:13:49:06:09:87:
a1:9e:32:6c:ee:5a:f9:72:fe:d2:90:94:8f:57:da:cc:f2:40:
dd:69:8a:24:87:f1:41:cc:4d:dc:42:0d:0e:64:70:84:5e:76:
e3:31:44:97:91:86:82:24:a0:d3:57:63:08:65:38:4e:5c:dc:
c4:48:55:8f:30:0f:8c:70:be:d7:25:15:2c:9f:01:14:4f:f8:
60:3a:26:37:58:de:5f:b1:28:b5:33:3a:45:48:b9:b6:e5:7c:
ab:be:16:95:7f:09:f3:bf:f1:1b:38:e4:17:7d:25:4b:9a:c4:
11:1e:28:49:6a:d4:6c:55:c0:f2:95:69:8b:31:e6:5b:a6:61:
c1:8e:98:2b:ec:d4:b7:6b:fa:9e:aa:88:5f:55:e2:2a:9c:c1:
db:97:7d:9d:ba:8b:98:fd:02:d0:44:5b:7b:38:41:0d:c4:99:
1b:95:24:c0:fa:80:a6:8e:39:e3:9e:aa:44:5f:ea:43:ac:d1:
6b:a7:f3:e1:90:1a:cd:42:ca:b2:0f:35:2e:4e:13:32:2a:e9:
01:ef:b7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m3ZRWxc5nMTE9vt9bBl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTgzMTUyYTY0MWE0MDM3YmQ2Y2EwYTZhYjQxY2JhNDZk
YTU3ZGIwHhcNMjUwODA1MTkwMDQyWhcNMjUwODA2MTkwMDQyWjAzMTEwLwYDVQQD
EyhjYmY2YWE0MDY0OTQ4N2U3Y2YwZjRmNTI0ZWE4NGY1YjUwNWYxMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeevPBXQk+ThBXCK3iIa4eTR1V1K
bkMwKuIApn4mlg1wa6zeO1kcbRpjkQ/U+gCfchOgY91jOIFBqPVdcsozwDsk5Hwm
RFDoMw1dJwKgRTTza+Sz78xIqWK9vFeveOirdyEn/GbEbwTM0ofa8a+voZ5gDyeK
MJabZIb3fdazbrJfrDv8ck9A9CIz+LQMV+sfaDwAkOs5+DRhFPZ4MmMLhdeY30LH
SALNcqQmU+6WouXB9JPeBPAS7LN4eTrJjmasKp1uH4S+88qqr3QeNeUW2GOHkGtB
YflB+zrU4eo79kxLWpiIDziatxhQjGFD+hHUr1+2C22lsreVNSPpOPfmzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv2qkBklIfnzw9PUk6oT1tQXxC/MB8GA1UdIwQY
MBaAFBoYMVKmQaQDe9bKCmq0HLpG2lfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hneFVxWkJwQU43MXNvS2FyUWN1a2JhVjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jM2UwM2QtYTRkYi00MDUwLTkwNmMt
NTYyOTRjNzA4ZmFmLzEvR2hneFVxWkJwQU43MXNvS2FyUWN1a2JhVjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jM2UwM2QtYTRkYi00MDUwLTkwNmMtNTYyOTRjNzA4ZmFm
LzEvR2hneFVxWkJwQU43MXNvS2FyUWN1a2JhVjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDyhm2+j
MkOR4h5MxCOoqozKOnlRowfDdXxtziHaLIDpjTU7A8n5oi8x/EdqQM2ouxNJBgmH
oZ4ybO5a+XL+0pCUj1fazPJA3WmKJIfxQcxN3EINDmRwhF524zFEl5GGgiSg01dj
CGU4TlzcxEhVjzAPjHC+1yUVLJ8BFE/4YDomN1jeX7EotTM6RUi5tuV8q74WlX8J
87/xGzjkF30lS5rEER4oSWrUbFXA8pVpizHmW6ZhwY6YK+zUt2v6nqqIX1XiKpzB
25d9nbqLmP0C0ERbezhBDcSZG5UkwPqApo45456qRF/qQ6zRa6fz4ZAazULKsg81
Lk4TMirpAe+3lw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:22 2025 by rpki-client