Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: ALkhDBj9eYDg2QpjkJ5dyNd2ikqXZ+9t2jFUcC4eoNI=
Subject key identifier: 22:21:92:FC:6E:24:E0:3E:BD:56:40:6D:96:CA:1C:48:05:B5:1D:E9
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 0198861F7D18ACF8A76AA0BFD24C79D760A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 088A
Signing time: Thu 07 Aug 2025 20:01:07 +0000
Manifest this update: Thu 07 Aug 2025 20:01:07 +0000
Manifest next update: Fri 08 Aug 2025 20:01:07 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: 9M413G4xFGXG+HfYDFEwvOmgB4zqTcMXOP9kp+ZyeSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:7d:18:ac:f8:a7:6a:a0:bf:d2:4c:79:d7:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Aug 7 20:01:07 2025 GMT
Not After : Aug 8 20:01:07 2025 GMT
Subject: CN=222192fc6e24e03ebd56406d96ca1c4805b51de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:9b:ed:65:0a:8a:f5:9b:37:39:b9:0f:f1:
c0:99:1e:7a:59:8e:66:3e:71:23:2d:61:ae:cb:4c:
08:df:83:fb:c7:a0:b2:b9:16:c5:72:53:e6:3c:cf:
62:ce:6d:e5:93:f1:2a:3f:96:d8:43:72:bb:75:c9:
1e:f4:2f:d9:68:11:a7:c6:f5:8a:78:95:d7:8a:e6:
70:63:be:15:ea:48:08:26:45:d3:ac:28:de:ab:18:
9d:20:b3:7a:e0:67:f4:45:1a:8e:4e:77:13:f0:e2:
e6:a1:94:df:fa:36:24:63:16:a8:90:ca:4a:8b:4c:
c7:94:3f:14:86:f0:55:2b:27:0a:1e:90:11:1a:12:
d7:9d:74:52:a9:aa:18:91:e3:a1:11:d9:26:07:0a:
80:c4:43:b8:b2:60:98:f0:bf:e6:c6:f4:47:7d:45:
b5:89:fa:a1:ae:8d:9e:20:89:e6:c0:68:67:a5:a7:
83:3a:9a:00:f5:8b:fb:3f:9a:c0:1a:71:b5:61:a0:
ad:44:1a:80:9b:d7:1e:93:ba:6b:a5:73:f6:2f:42:
bb:97:f7:e4:91:bb:dd:46:5f:c7:3e:da:e1:fd:94:
79:f2:b1:b8:9b:1f:b4:83:8f:22:fc:6d:41:ed:67:
7b:37:70:83:cd:6f:f9:3b:46:b7:59:08:ec:00:b6:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:21:92:FC:6E:24:E0:3E:BD:56:40:6D:96:CA:1C:48:05:B5:1D:E9
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5f:62:06:18:3d:21:98:94:3f:65:a8:b4:dd:6e:09:e6:a3:
bd:e3:ce:8a:0d:6f:ed:ba:67:27:56:70:24:36:6a:d8:ea:c3:
ff:bb:38:7a:6c:8c:6b:a3:59:47:d4:1d:98:28:09:76:6d:08:
fb:d3:fb:08:1c:5a:53:45:1c:ef:95:5e:da:24:b2:42:80:4e:
69:b8:b6:6b:2b:92:91:90:f1:9e:d1:a5:b4:67:39:42:a9:97:
13:7c:d8:60:6d:8f:80:9e:a3:33:66:4d:3f:f0:58:53:40:90:
06:58:f0:6b:50:e7:7f:26:c5:8b:30:b1:f8:92:a4:df:fd:75:
ad:45:f1:e2:3d:b5:f1:c8:e6:a6:d3:f5:85:94:52:12:18:5e:
dd:eb:1b:c8:60:d1:0c:44:e5:a4:bd:8b:ac:67:53:e9:fc:e3:
66:88:90:7a:65:e5:a9:42:e3:d7:26:dd:6f:ae:44:97:0a:06:
51:9b:7f:00:4f:0d:c3:1d:a5:df:52:77:ed:05:13:57:cb:b8:
3e:bc:b0:da:f3:62:16:46:e4:70:65:cd:7c:21:ee:60:d6:98:
ed:6e:0f:8c:a1:12:95:ff:e8:6f:da:6d:6f:82:2d:5a:fb:6f:
4a:95:e2:bc:54:50:39:bf:c8:8e:64:aa:7a:99:32:6b:1f:b4:
60:25:7d:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGH30YrPinaqC/0kx512CoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDlmNjBjOGI4NWVmZWQzNjFkZjViNmI1MWM5ZmVkYWUx
YzdmOTYwHhcNMjUwODA3MjAwMTA3WhcNMjUwODA4MjAwMTA3WjAzMTEwLwYDVQQD
EygyMjIxOTJmYzZlMjRlMDNlYmQ1NjQwNmQ5NmNhMWM0ODA1YjUxZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UOb7WUKivWbNzm5D/HAmR56WY5m
PnEjLWGuy0wI34P7x6CyuRbFclPmPM9izm3lk/EqP5bYQ3K7dcke9C/ZaBGnxvWK
eJXXiuZwY74V6kgIJkXTrCjeqxidILN64Gf0RRqOTncT8OLmoZTf+jYkYxaokMpK
i0zHlD8UhvBVKycKHpARGhLXnXRSqaoYkeOhEdkmBwqAxEO4smCY8L/mxvRHfUW1
ifqhro2eIInmwGhnpaeDOpoA9Yv7P5rAGnG1YaCtRBqAm9cek7prpXP2L0K7l/fk
kbvdRl/HPtrh/ZR58rG4mx+0g48i/G1B7Wd7N3CDzW/5O0a3WQjsALbJiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIhkvxuJOA+vVZAbZbKHEgFtR3pMB8GA1UdIwQY
MBaAFBkJ9gyLhe/tNh31trUcn+2uHH+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMt
NThlN2RiMzBlYTQ0LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMtNThlN2RiMzBlYTQ0
LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl9iBhg9
IZiUP2WotN1uCeajvePOig1v7bpnJ1ZwJDZq2OrD/7s4emyMa6NZR9QdmCgJdm0I
+9P7CBxaU0Uc75Ve2iSyQoBOabi2ayuSkZDxntGltGc5QqmXE3zYYG2PgJ6jM2ZN
P/BYU0CQBljwa1DnfybFizCx+JKk3/11rUXx4j218cjmptP1hZRSEhhe3esbyGDR
DETlpL2LrGdT6fzjZoiQemXlqULj1ybdb65ElwoGUZt/AE8Nwx2l31J37QUTV8u4
Pryw2vNiFkbkcGXNfCHuYNaY7W4PjKESlf/ob9ptb4ItWvtvSpXivFRQOb/IjmSq
epkyax+0YCV9/g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:45 2025 by rpki-client