Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: uFFsTH2jx1BjaOV6BAlXtuBkl4FtN5jk8sVOXuoqmGY=
Subject key identifier: 76:87:C3:7C:78:47:4A:5F:01:26:91:DC:C3:16:8E:C9:3A:DB:40:8F
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 01976C61CCC29690AEA5AF72AF601023161B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 9A
Signing time: Sat 14 Jun 2025 03:00:38 +0000
Manifest this update: Sat 14 Jun 2025 03:00:38 +0000
Manifest next update: Sun 15 Jun 2025 03:00:38 +0000
Files and hashes: 1: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: kshmMPZ8h7nZoNWrQNEKUFWeUa4L8viZ6aKsUTRBM/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:cc:c2:96:90:ae:a5:af:72:af:60:10:23:16:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jun 14 03:00:38 2025 GMT
Not After : Jun 15 03:00:38 2025 GMT
Subject: CN=7687c37c78474a5f012691dcc3168ec93adb408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:c2:04:d0:89:7f:8e:a0:ab:b0:46:c9:8a:
d3:87:9a:78:6c:47:0d:40:6e:00:af:c7:9b:de:d2:
76:c4:c6:f5:f0:c9:b8:e6:4e:5c:a7:ed:23:02:b7:
18:8f:3d:f9:ab:17:98:85:4e:7f:f0:bd:86:c9:85:
2b:30:8d:9d:63:d5:c7:65:4b:d3:7d:38:11:82:13:
48:31:dc:db:6f:4c:82:7e:28:d3:c4:ef:a6:55:54:
ae:e4:fc:68:13:77:e6:0b:cb:95:20:9e:fd:6e:51:
68:d9:70:e1:aa:05:68:a4:8e:38:91:c7:22:24:05:
12:3e:23:09:2a:f9:15:35:6c:fe:61:27:8b:fa:8d:
18:0a:f0:4a:ca:23:db:6b:b9:44:b1:32:d9:be:f4:
07:fc:96:43:5c:0a:33:7f:25:00:07:42:ee:35:ff:
ce:3f:35:92:22:1f:d4:9f:72:52:a3:df:ed:a2:58:
3e:49:ff:80:27:c7:78:7b:44:ba:24:42:b2:88:33:
dc:2a:c3:7c:8d:9b:73:aa:7d:4f:9b:a7:25:07:a7:
e9:33:5d:dd:a6:b5:94:2d:3b:a5:db:96:61:cc:f9:
2a:a6:26:08:cf:ea:16:6c:9e:0d:a7:ea:c5:5e:c9:
d9:cf:a7:58:42:74:81:6f:a7:98:d6:85:c9:8e:19:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:C3:7C:78:47:4A:5F:01:26:91:DC:C3:16:8E:C9:3A:DB:40:8F
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:57:5d:03:6f:e9:4a:94:c1:92:c9:1f:ed:93:53:2a:dd:
1d:d8:3d:8f:2a:ff:db:67:0a:c9:e1:f6:d1:4c:99:8d:e2:74:
f1:49:28:54:b8:3a:be:6d:c6:3e:e1:c7:1e:e9:9e:e3:f8:7c:
5c:e5:aa:42:e5:be:92:1f:04:c2:46:5c:ca:db:28:ef:97:cd:
4a:8a:55:f1:c6:70:6d:f5:a5:d0:01:32:a1:99:01:5d:7b:44:
d4:b4:1b:43:49:f6:8e:e8:7f:4a:78:5d:ff:bb:a2:e5:2e:ff:
2a:b3:9d:d4:0b:14:2f:3a:90:c7:e7:bb:d4:e2:f7:4d:b7:b0:
23:24:b9:3f:33:c5:e5:cd:31:0a:b1:96:72:d3:d1:42:bc:9b:
b1:58:8b:fc:cf:1c:86:76:33:a9:a5:9f:52:57:05:f9:9d:e9:
61:05:cd:69:54:ba:8d:55:34:c3:12:c5:56:c8:f8:49:e8:5d:
e9:8d:7e:46:2a:ca:81:60:1a:7a:0b:b6:d5:20:b3:3f:bc:11:
19:e9:b8:0c:ef:5f:63:35:62:be:8c:3a:9c:b8:2e:d1:29:f5:
98:41:9c:28:6f:27:da:49:a7:11:ba:c9:fa:2e:07:c6:45:55:
1c:bd:98:11:58:14:f5:11:40:96:8c:ec:55:9f:01:1f:3b:c0:
9f:22:43:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYczClpCupa9yr2AQIxYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2
MDVlMGUwHhcNMjUwNjE0MDMwMDM4WhcNMjUwNjE1MDMwMDM4WjAzMTEwLwYDVQQD
Eyg3Njg3YzM3Yzc4NDc0YTVmMDEyNjkxZGNjMzE2OGVjOTNhZGI0MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkanCBNCJf46gq7BGyYrTh5p4bEcN
QG4Ar8eb3tJ2xMb18Mm45k5cp+0jArcYjz35qxeYhU5/8L2GyYUrMI2dY9XHZUvT
fTgRghNIMdzbb0yCfijTxO+mVVSu5PxoE3fmC8uVIJ79blFo2XDhqgVopI44kcci
JAUSPiMJKvkVNWz+YSeL+o0YCvBKyiPba7lEsTLZvvQH/JZDXAozfyUAB0LuNf/O
PzWSIh/Un3JSo9/tolg+Sf+AJ8d4e0S6JEKyiDPcKsN8jZtzqn1Pm6clB6fpM13d
prWULTul25ZhzPkqpiYIz+oWbJ4Np+rFXsnZz6dYQnSBb6eY1oXJjhmuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaHw3x4R0pfASaR3MMWjsk620CPMB8GA1UdIwQY
MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt
ZGZmM2JjZWU2YjY2LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2
LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLdXXQNv
6UqUwZLJH+2TUyrdHdg9jyr/22cKyeH20UyZjeJ08UkoVLg6vm3GPuHHHume4/h8
XOWqQuW+kh8EwkZcytso75fNSopV8cZwbfWl0AEyoZkBXXtE1LQbQ0n2juh/Snhd
/7ui5S7/KrOd1AsULzqQx+e71OL3TbewIyS5PzPF5c0xCrGWctPRQrybsViL/M8c
hnYzqaWfUlcF+Z3pYQXNaVS6jVU0wxLFVsj4Sehd6Y1+RirKgWAaegu21SCzP7wR
Gem4DO9fYzVivow6nLgu0Sn1mEGcKG8n2kmnEbrJ+i4HxkVVHL2YEVgU9RFAlozs
VZ8BHzvAnyJDDw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:18 2025 by rpki-client