Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: OqsZMCqO7wQnm8+bICurwfUX5IturMS3w0nkI/CAz7Y=
Subject key identifier: BF:83:6B:7A:94:49:7C:88:95:3A:53:BB:0C:4F:F5:C4:6D:52:F4:2F
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 019873E22AFF63F63BA6C197F92C928BA7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 0DB0
Signing time: Mon 04 Aug 2025 07:00:58 +0000
Manifest this update: Mon 04 Aug 2025 07:00:58 +0000
Manifest next update: Tue 05 Aug 2025 07:00:58 +0000
Files and hashes: 1: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: Lf5TzDbgBgBGQZ0ZYsvrTK9++lKcyCdtJNNXPJaXEQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2a:ff:63:f6:3b:a6:c1:97:f9:2c:92:8b:a7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Aug 4 07:00:58 2025 GMT
Not After : Aug 5 07:00:58 2025 GMT
Subject: CN=bf836b7a94497c88953a53bb0c4ff5c46d52f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:d6:6f:08:ed:f6:8e:9e:cd:37:7e:f4:3c:
69:ea:02:21:52:3a:5f:b5:de:bb:b8:cf:f4:e7:ea:
b9:d4:c1:f2:ef:9e:65:9f:10:66:06:7f:8f:bd:c2:
e6:5f:20:00:72:26:aa:d3:c8:df:5e:ef:6f:b6:9f:
02:08:5e:d9:13:3d:d7:4a:16:6b:37:b4:b8:df:95:
0c:96:c4:8e:f5:30:44:7a:20:68:bd:df:e1:1f:72:
cb:82:fa:66:86:77:f4:df:2a:6e:da:fe:28:90:da:
82:5c:64:c5:c0:c4:ad:38:1a:0a:f4:dc:97:21:e9:
24:de:04:db:34:21:2d:4c:17:75:f6:21:ce:ff:07:
2d:98:f8:d1:11:66:5d:bc:c3:64:76:3c:0c:4b:a5:
52:18:3d:e9:2f:05:97:a8:80:b3:b0:50:c4:52:97:
65:bc:d7:17:a1:ae:96:79:14:82:03:9c:f2:d8:f8:
fc:01:39:13:12:fb:d0:90:04:86:0e:af:57:03:49:
8f:af:43:20:76:3b:41:f3:eb:77:33:ef:a3:9e:6f:
92:63:df:28:05:03:1e:0d:2f:e3:f7:76:05:f1:02:
e0:2e:8a:8d:e9:e4:d3:29:84:01:c0:c8:0e:c9:70:
fd:98:b9:72:55:31:15:5a:ac:a0:d0:f6:34:00:3c:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:6B:7A:94:49:7C:88:95:3A:53:BB:0C:4F:F5:C4:6D:52:F4:2F
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:f9:be:c4:c4:fc:07:e8:d5:5f:ac:40:bc:9f:f2:40:86:
d0:7d:be:ee:ee:d1:1d:a1:26:93:54:24:5b:ff:84:be:bb:15:
c8:f3:7a:e6:98:3a:72:cd:38:38:92:ff:97:9c:8d:66:e4:e1:
7d:5c:f6:56:b2:ba:bf:a9:11:19:89:48:1d:e3:4d:d5:e7:30:
e5:39:ba:8c:0d:81:38:06:6c:21:9b:32:13:74:e7:d4:f2:b9:
64:c0:97:19:99:a5:9d:e1:f4:89:c8:60:f2:1d:72:f1:6a:9e:
9f:a3:70:29:d0:05:6c:6f:c3:2e:04:61:ee:08:76:56:5f:9d:
07:76:2c:bc:2e:b5:53:cf:5b:ae:ba:78:57:91:d5:73:59:c8:
db:ba:a6:77:86:bc:b9:89:a3:38:3d:89:24:e7:a1:f4:c6:dc:
71:b6:9d:13:90:72:11:5b:9d:30:e2:e9:f4:12:db:7e:91:71:
72:b2:59:73:6d:fd:a4:fd:c2:9b:b1:9a:bc:ec:d4:cd:79:76:
65:ca:6f:14:9b:bb:01:3e:f4:a1:a5:21:b4:29:51:aa:6d:36:
48:76:83:94:19:d3:c4:ad:22:7b:b2:7d:d9:ca:29:80:79:54:
f2:db:1e:90:ab:58:e9:1b:f6:98:74:74:b9:1b:34:29:7d:72:
bd:b6:63:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ir/Y/Y7psGX+SySi6e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjQ4NzJiMWRkYmUzMjY0ZmE2NjZhNjZmMWY0ZTRiYjUy
ZmQ4NTQwHhcNMjUwODA0MDcwMDU4WhcNMjUwODA1MDcwMDU4WjAzMTEwLwYDVQQD
EyhiZjgzNmI3YTk0NDk3Yzg4OTUzYTUzYmIwYzRmZjVjNDZkNTJmNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoabWbwjt9o6ezTd+9Dxp6gIhUjpf
td67uM/05+q51MHy755lnxBmBn+PvcLmXyAAciaq08jfXu9vtp8CCF7ZEz3XShZr
N7S435UMlsSO9TBEeiBovd/hH3LLgvpmhnf03ypu2v4okNqCXGTFwMStOBoK9NyX
Iekk3gTbNCEtTBd19iHO/wctmPjREWZdvMNkdjwMS6VSGD3pLwWXqICzsFDEUpdl
vNcXoa6WeRSCA5zy2Pj8ATkTEvvQkASGDq9XA0mPr0MgdjtB8+t3M++jnm+SY98o
BQMeDS/j93YF8QLgLoqN6eTTKYQBwMgOyXD9mLlyVTEVWqyg0PY0ADzN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+Da3qUSXyIlTpTuwxP9cRtUvQvMB8GA1UdIwQY
MBaAFIMkhysd2+MmT6Zmpm8fTku1L9hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTct
Zjg3YjYyZmI2MWZmLzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTctZjg3YjYyZmI2MWZm
LzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGP/5vsTE
/Afo1V+sQLyf8kCG0H2+7u7RHaEmk1QkW/+EvrsVyPN65pg6cs04OJL/l5yNZuTh
fVz2VrK6v6kRGYlIHeNN1ecw5Tm6jA2BOAZsIZsyE3Tn1PK5ZMCXGZmlneH0ichg
8h1y8Wqen6NwKdAFbG/DLgRh7gh2Vl+dB3YsvC61U89brrp4V5HVc1nI27qmd4a8
uYmjOD2JJOeh9MbccbadE5ByEVudMOLp9BLbfpFxcrJZc239pP3Cm7GavOzUzXl2
ZcpvFJu7AT70oaUhtClRqm02SHaDlBnTxK0ie7J92copgHlU8tsekKtY6Rv2mHR0
uRs0KX1yvbZjoA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:58 2025 by rpki-client