Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier: szI6gXH0Lq1pnKC4UiwpSkisN+t0qNdYTzotGL0gIpY=
Subject key identifier: 3B:6C:E3:4A:5F:24:65:17:B5:B7:BA:28:97:E2:61:5B:10:82:95:69
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 019887321647B09D0FF70A2CD014757A4436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 01:01:03 +0000
Manifest this update: Fri 08 Aug 2025 01:01:03 +0000
Manifest next update: Sat 09 Aug 2025 01:01:03 +0000
Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: zfdzQ2v/9M8c7G61kSwdKDr5BLQVX5KdtAeHazwv3k0=)
2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:16:47:b0:9d:0f:f7:0a:2c:d0:14:75:7a:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Aug 8 01:01:03 2025 GMT
Not After : Aug 9 01:01:03 2025 GMT
Subject: CN=3b6ce34a5f246517b5b7ba2897e2615b10829569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:fa:bc:f3:60:5c:de:61:6f:dc:e9:38:7c:
9e:27:fb:30:3f:9c:c9:1f:ed:d2:30:59:60:28:bc:
14:8a:5a:2d:13:6d:bb:da:78:c5:48:db:53:d6:bd:
7a:58:17:21:0c:e7:71:17:62:fe:fa:00:0d:ee:8c:
ad:d0:14:6e:7d:35:c1:d9:3d:c3:43:bf:87:47:98:
cd:59:5e:d5:c4:0c:de:5a:77:7d:2e:6e:8c:9b:af:
ce:8b:41:7b:f3:be:f1:65:22:6a:7b:12:54:3d:5b:
b7:44:54:6a:ed:fb:aa:c0:9d:fd:7a:66:f3:d9:17:
83:eb:e4:ff:41:0d:2b:ad:b2:5d:8a:b1:08:db:6d:
62:d9:49:5e:8b:99:dd:cb:49:d6:ad:33:1d:b9:86:
a2:79:73:5c:2e:42:94:cb:c5:73:b8:66:35:20:4f:
20:a7:e8:48:6b:15:2b:ae:a3:e9:a9:d2:33:8b:b9:
af:1e:79:3c:ec:01:1b:19:41:0e:94:a6:cc:19:8e:
19:7c:a3:02:ad:79:bb:e2:77:6e:62:d1:3c:39:d5:
44:0a:9c:f1:61:52:a1:5b:0f:aa:fe:a0:53:44:ff:
6a:35:1d:ac:b1:44:b9:c4:d1:2d:e9:42:01:c8:e5:
bf:0e:d7:6c:15:bb:e4:76:d0:b6:49:66:38:39:4a:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:E3:4A:5F:24:65:17:B5:B7:BA:28:97:E2:61:5B:10:82:95:69
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:64:df:cf:50:cf:6d:6e:3a:d2:8e:63:15:eb:ca:8c:ec:ed:
56:71:8b:7d:79:f7:4b:c1:0e:b0:48:1c:7e:f7:b1:02:87:82:
65:3e:ca:3b:3a:56:5b:b6:79:c1:5e:20:79:7a:50:e4:00:85:
9c:9f:79:05:46:6c:c9:58:c4:b6:92:42:c9:63:52:9d:5c:40:
eb:9e:b0:80:dc:79:bb:41:81:c7:b9:7d:44:eb:cb:0e:46:c2:
4b:9e:5e:54:4d:c0:3d:78:55:c4:d6:a6:ea:fd:0d:1f:4e:1f:
79:ce:08:81:af:8b:ea:50:2e:83:f1:be:0f:5f:b5:73:50:9a:
35:06:dc:4e:0f:05:16:e6:cf:54:9d:e0:47:44:1b:b6:71:20:
b0:61:58:af:14:5b:b4:bf:cd:94:28:a0:c3:68:66:3b:49:a2:
66:21:e9:3a:41:1b:c5:3d:36:d5:0c:d5:20:cb:88:d7:04:27:
e6:c8:b8:47:1c:a2:63:19:99:91:8b:85:35:37:96:75:01:59:
61:3b:8d:67:f2:59:a7:5b:93:ad:8c:78:61:fe:79:a4:0c:9f:
d8:41:d4:af:3e:8a:20:12:91:bc:ec:26:dc:9f:4b:42:d2:2c:
2f:b5:18:a2:9e:29:5b:74:0d:8f:2e:60:78:ac:fe:fb:fb:f2:
67:87:38:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHMhZHsJ0P9wos0BR1ekQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmJjMjg0OThlYjE2OTU5MGIwNjlhMDA1NDE0YzQxYTE3
OWIyNDAwHhcNMjUwODA4MDEwMTAzWhcNMjUwODA5MDEwMTAzWjAzMTEwLwYDVQQD
EygzYjZjZTM0YTVmMjQ2NTE3YjViN2JhMjg5N2UyNjE1YjEwODI5NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/X6vPNgXN5hb9zpOHyeJ/swP5zJ
H+3SMFlgKLwUilotE2272njFSNtT1r16WBchDOdxF2L++gAN7oyt0BRufTXB2T3D
Q7+HR5jNWV7VxAzeWnd9Lm6Mm6/Oi0F7877xZSJqexJUPVu3RFRq7fuqwJ39embz
2ReD6+T/QQ0rrbJdirEI221i2Ulei5ndy0nWrTMduYaieXNcLkKUy8VzuGY1IE8g
p+hIaxUrrqPpqdIzi7mvHnk87AEbGUEOlKbMGY4ZfKMCrXm74nduYtE8OdVECpzx
YVKhWw+q/qBTRP9qNR2ssUS5xNEt6UIByOW/DtdsFbvkdtC2SWY4OUrXAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDts40pfJGUXtbe6KJfiYVsQgpVpMB8GA1UdIwQY
MBaAFBm7woSY6xaVkLBpoAVBTEGhebJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQt
N2YwMTk3MjE4NmEzLzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQtN2YwMTk3MjE4NmEz
LzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmTfz1DP
bW460o5jFevKjOztVnGLfXn3S8EOsEgcfvexAoeCZT7KOzpWW7Z5wV4geXpQ5ACF
nJ95BUZsyVjEtpJCyWNSnVxA656wgNx5u0GBx7l9ROvLDkbCS55eVE3APXhVxNam
6v0NH04fec4Iga+L6lAug/G+D1+1c1CaNQbcTg8FFubPVJ3gR0QbtnEgsGFYrxRb
tL/NlCigw2hmO0miZiHpOkEbxT021QzVIMuI1wQn5si4RxyiYxmZkYuFNTeWdQFZ
YTuNZ/JZp1uTrYx4Yf55pAyf2EHUrz6KIBKRvOwm3J9LQtIsL7UYop4pW3QNjy5g
eKz++/vyZ4c4NQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:48 2025 by rpki-client