Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: eZISiUOotBi3uy+O4fNdH6DnocxgavlEw5eHFfsOfLM=
Subject key identifier: F8:19:D4:EB:38:B7:EA:0F:BE:55:3E:EA:37:C0:7B:95:07:4F:4D:4A
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 01976D3E123334658C937E5A7A0FBE8BD93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 0483
Signing time: Sat 14 Jun 2025 07:01:13 +0000
Manifest this update: Sat 14 Jun 2025 07:01:13 +0000
Manifest next update: Sun 15 Jun 2025 07:01:13 +0000
Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: le0J/boYayzkO6++1IkmvIuhyJ5K3eENQK0A5SnDSPg=)
2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:12:33:34:65:8c:93:7e:5a:7a:0f:be:8b:d9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Jun 14 07:01:13 2025 GMT
Not After : Jun 15 07:01:13 2025 GMT
Subject: CN=f819d4eb38b7ea0fbe553eea37c07b95074f4d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:54:60:fc:5c:8e:a7:b2:26:14:fd:15:9c:
da:1a:5a:b1:b7:e4:83:e3:36:1d:5c:cd:3c:68:d8:
f1:0d:cd:c4:57:82:a1:1c:03:82:9f:96:cb:b1:47:
7d:ff:e2:af:67:c9:2c:54:8d:c0:77:d2:c4:63:76:
ed:d3:8e:a3:46:08:3d:96:5e:05:f4:fc:21:2f:25:
0b:b8:c9:0e:d9:0f:e7:02:52:2e:d8:87:99:54:b2:
3b:48:7c:65:c8:a7:78:cb:70:42:62:dd:43:e9:08:
93:33:bd:1d:2b:79:18:4e:86:40:9c:fa:4d:24:80:
43:da:da:c3:89:70:76:12:af:bc:6f:b4:d1:26:46:
65:8a:12:5c:77:9b:75:4e:c4:ea:a2:0d:5d:b8:ed:
33:57:d4:85:68:5d:de:35:fa:e1:57:b8:d8:db:90:
44:88:69:5d:c3:7f:1c:63:e0:4f:37:b9:ca:3a:49:
3d:98:11:24:d2:90:d2:86:5f:60:9d:7c:e5:b4:c9:
84:3a:c7:e5:3e:d3:d7:13:fa:44:f6:ef:9e:92:46:
f2:d2:1f:62:e7:f6:95:ae:15:60:52:a9:df:cd:4a:
4c:1f:8b:b3:77:ce:23:60:9a:a5:92:5b:df:d0:d1:
65:1b:6b:18:57:aa:22:ee:40:93:56:17:78:cb:55:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:D4:EB:38:B7:EA:0F:BE:55:3E:EA:37:C0:7B:95:07:4F:4D:4A
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:a5:12:c9:2d:55:03:04:96:91:ec:75:e9:16:24:5f:d6:
94:b0:5b:3d:d6:e2:f0:2e:d8:55:aa:ba:c7:72:a6:93:25:a5:
85:db:3f:aa:ec:74:e6:a0:3b:93:72:06:80:55:3f:b9:9e:24:
b8:6a:46:83:15:26:ae:3d:02:27:14:ed:36:22:e3:b0:a9:09:
84:f0:9d:44:73:de:11:a9:50:89:e0:98:42:da:51:4c:2a:54:
79:41:c1:2c:5d:61:e6:3d:73:37:29:7f:4d:29:bc:27:82:06:
25:31:7a:a2:ee:a8:45:c8:21:d8:1e:d8:eb:e1:4d:2c:53:4b:
00:1f:47:7e:82:bd:c8:56:b2:4d:6f:7f:28:32:ba:fe:2f:74:
54:83:22:11:8e:2a:39:85:e1:e9:d0:d7:74:b9:58:dd:a6:e8:
be:3d:2a:f2:e4:e4:12:ed:8b:a6:5e:fa:eb:bb:4e:5b:5b:d9:
cf:18:f5:9c:33:d9:6f:ed:22:c0:ac:7b:33:30:c6:fa:f0:9f:
37:e8:91:7b:13:26:70:0d:ef:2e:d5:5c:bf:3e:f2:13:13:d3:
84:b5:e3:cc:96:e0:c4:75:3b:81:25:f4:9e:f0:eb:21:19:2e:
3a:3d:05:2c:80:c2:58:59:40:0e:2d:58:b3:40:9b:2c:0f:f8:
ac:6f:7a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPhIzNGWMk35aeg++i9k7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw
M2I3NTYwHhcNMjUwNjE0MDcwMTEzWhcNMjUwNjE1MDcwMTEzWjAzMTEwLwYDVQQD
EyhmODE5ZDRlYjM4YjdlYTBmYmU1NTNlZWEzN2MwN2I5NTA3NGY0ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk1UYPxcjqeyJhT9FZzaGlqxt+SD
4zYdXM08aNjxDc3EV4KhHAOCn5bLsUd9/+KvZ8ksVI3Ad9LEY3bt046jRgg9ll4F
9PwhLyULuMkO2Q/nAlIu2IeZVLI7SHxlyKd4y3BCYt1D6QiTM70dK3kYToZAnPpN
JIBD2trDiXB2Eq+8b7TRJkZlihJcd5t1TsTqog1duO0zV9SFaF3eNfrhV7jY25BE
iGldw38cY+BPN7nKOkk9mBEk0pDShl9gnXzltMmEOsflPtPXE/pE9u+ekkby0h9i
5/aVrhVgUqnfzUpMH4uzd84jYJqlklvf0NFlG2sYV6oi7kCTVhd4y1VXIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgZ1Os4t+oPvlU+6jfAe5UHT01KMB8GA1UdIwQY
MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt
MDY5YmZhZjJiY2U0LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0
LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiKlEskt
VQMElpHsdekWJF/WlLBbPdbi8C7YVaq6x3KmkyWlhds/qux05qA7k3IGgFU/uZ4k
uGpGgxUmrj0CJxTtNiLjsKkJhPCdRHPeEalQieCYQtpRTCpUeUHBLF1h5j1zNyl/
TSm8J4IGJTF6ou6oRcgh2B7Y6+FNLFNLAB9HfoK9yFayTW9/KDK6/i90VIMiEY4q
OYXh6dDXdLlY3abovj0q8uTkEu2Lpl7667tOW1vZzxj1nDPZb+0iwKx7MzDG+vCf
N+iRexMmcA3vLtVcvz7yExPThLXjzJbgxHU7gSX0nvDrIRkuOj0FLIDCWFlADi1Y
s0CbLA/4rG96pg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:58 2025 by rpki-client