Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: WLq2jntDcTJ8QAfFSZo3lbi1y8VtTtjeo7nGnVMt0G8=
Subject key identifier: CF:7E:8A:C2:41:D7:73:2E:AA:9E:0C:28:57:25:3F:38:4C:DA:BC:C4
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 01976F62A85CAF5B9959BBA928A449E3B625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 17:00:25 +0000
Manifest this update: Sat 14 Jun 2025 17:00:25 +0000
Manifest next update: Sun 15 Jun 2025 17:00:25 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: wR1gIjjZGrNRaUXbRCkmyqcv7QW+VXH+p7p68PtvSDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:a8:5c:af:5b:99:59:bb:a9:28:a4:49:e3:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Jun 14 17:00:25 2025 GMT
Not After : Jun 15 17:00:25 2025 GMT
Subject: CN=cf7e8ac241d7732eaa9e0c2857253f384cdabcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:74:20:f5:62:df:65:85:06:66:d3:9c:13:
b2:04:b8:3c:58:f9:ad:3f:1b:4d:63:3b:87:a8:ce:
c1:2b:ef:6d:07:5d:c7:10:c8:2d:cc:dd:c3:b6:03:
0f:aa:bb:f8:9c:0d:7a:d2:0b:9f:cb:9e:06:fa:75:
e4:af:92:f0:36:8b:55:91:b7:22:53:89:56:58:00:
87:fa:a8:a2:89:30:ba:dc:05:7c:71:f4:5f:00:74:
19:90:84:65:aa:86:97:07:22:73:48:42:e5:8b:92:
c6:1c:5b:0c:69:79:4b:87:bc:91:4d:a7:3f:7b:fa:
13:aa:a4:ae:01:85:e0:57:29:29:f3:4b:29:66:0a:
3e:90:7f:d3:7c:8e:51:06:e1:95:f4:90:ff:a6:04:
3d:3f:2b:96:9e:f2:09:4b:2f:6c:bc:fc:46:37:83:
a9:d3:b9:52:75:4e:44:9d:64:11:24:7a:c7:42:62:
20:ab:df:a2:65:60:f3:ff:5b:31:93:dd:08:ab:71:
09:de:47:bf:be:98:42:84:05:27:c8:14:3c:0e:15:
84:18:5e:bd:7f:90:cd:f3:40:38:5e:27:27:33:e5:
e8:f0:08:4c:f1:5e:51:73:39:d5:8c:0d:e0:6d:2b:
1b:5d:d2:6d:07:34:3e:9f:a0:a1:af:a8:31:0f:fd:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7E:8A:C2:41:D7:73:2E:AA:9E:0C:28:57:25:3F:38:4C:DA:BC:C4
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d4:ba:d4:f3:09:e5:33:af:e1:eb:8c:4e:7d:2c:ec:67:92:
02:1e:8a:9a:89:06:7c:b2:1f:f0:f4:15:1b:ed:c8:63:fd:37:
6b:50:cc:1b:3d:72:90:21:3d:0e:82:70:a1:55:07:17:5e:97:
f2:39:da:48:b6:60:f1:1b:5f:25:4c:18:98:1a:b8:4f:c0:15:
b2:87:5a:ef:ab:5c:9f:40:99:61:01:14:f5:b7:c8:26:f0:f0:
ca:12:04:8f:13:09:df:d7:83:74:c6:65:8f:1a:5e:31:5b:1b:
86:f9:0a:f6:46:41:dd:46:12:c6:d9:47:f6:b0:df:0e:d7:0b:
18:c9:35:4e:ad:9f:bc:f0:e1:d5:74:36:9f:7f:0c:23:b9:1c:
9c:62:c4:3d:96:f0:f8:3f:33:a4:55:1b:47:e3:84:52:23:9a:
2a:76:33:9b:7b:da:83:d0:21:00:b8:6e:62:a4:34:e6:0e:96:
27:75:56:5f:d8:74:1f:c2:bc:bb:03:93:d3:35:e9:b7:b3:f9:
7b:13:50:d0:d5:3e:fa:25:08:49:8a:eb:69:88:a2:7d:2c:ad:
d5:d5:21:57:e2:8b:db:c8:92:51:b4:f2:76:5e:37:93:e1:76:
3d:96:29:db:ee:cd:ce:45:5a:66:01:a9:8d:1d:40:62:ea:15:
cc:1c:6d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYqhcr1uZWbupKKRJ47YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi
NjY3NjIwHhcNMjUwNjE0MTcwMDI1WhcNMjUwNjE1MTcwMDI1WjAzMTEwLwYDVQQD
EyhjZjdlOGFjMjQxZDc3MzJlYWE5ZTBjMjg1NzI1M2YzODRjZGFiY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoat0IPVi32WFBmbTnBOyBLg8WPmt
PxtNYzuHqM7BK+9tB13HEMgtzN3DtgMPqrv4nA160gufy54G+nXkr5LwNotVkbci
U4lWWACH+qiiiTC63AV8cfRfAHQZkIRlqoaXByJzSELli5LGHFsMaXlLh7yRTac/
e/oTqqSuAYXgVykp80spZgo+kH/TfI5RBuGV9JD/pgQ9PyuWnvIJSy9svPxGN4Op
07lSdU5EnWQRJHrHQmIgq9+iZWDz/1sxk90Iq3EJ3ke/vphChAUnyBQ8DhWEGF69
f5DN80A4XicnM+Xo8AhM8V5RcznVjA3gbSsbXdJtBzQ+n6Chr6gxD/3GDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9+isJB13Muqp4MKFclPzhM2rzEMB8GA1UdIwQY
MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut
YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1
LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNS61PMJ
5TOv4euMTn0s7GeSAh6KmokGfLIf8PQVG+3IY/03a1DMGz1ykCE9DoJwoVUHF16X
8jnaSLZg8RtfJUwYmBq4T8AVsoda76tcn0CZYQEU9bfIJvDwyhIEjxMJ39eDdMZl
jxpeMVsbhvkK9kZB3UYSxtlH9rDfDtcLGMk1Tq2fvPDh1XQ2n38MI7kcnGLEPZbw
+D8zpFUbR+OEUiOaKnYzm3vag9AhALhuYqQ05g6WJ3VWX9h0H8K8uwOT0zXpt7P5
exNQ0NU++iUISYrraYiifSyt1dUhV+KL28iSUbTydl43k+F2PZYp2+7NzkVaZgGp
jR1AYuoVzBxt/w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:34:51 2025 by rpki-client