Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
File: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft (raw, json)
Hash identifier: r8Y8uhEHckoP8f59ngtcjIpQkpVX5tstCuX2DLC74Jc=
Subject key identifier: 95:A9:48:E9:2C:FC:C4:68:F5:FC:C9:EA:69:28:75:64:6B:A6:B3:1C
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 0198496535994D66B7891DFFC2AE624E4DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
Manifest number: 160F
Signing time: Sun 27 Jul 2025 01:00:26 +0000
Manifest this update: Sun 27 Jul 2025 01:00:26 +0000
Manifest next update: Mon 28 Jul 2025 01:00:26 +0000
Files and hashes: 1: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl (hash: cenD67RbM01VZGiN0xKLbIUge0NGZygPTmtfEx6PhX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:35:99:4d:66:b7:89:1d:ff:c2:ae:62:4e:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Jul 27 01:00:26 2025 GMT
Not After : Jul 28 01:00:26 2025 GMT
Subject: CN=95a948e92cfcc468f5fcc9ea692875646ba6b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:7b:7f:dd:bf:c1:36:b1:f0:9e:93:ab:a5:
5b:96:56:23:5c:cf:88:a2:73:a5:0f:58:c3:51:db:
38:db:f2:c8:84:e2:60:bc:7e:7e:59:ea:34:c7:5f:
4a:5b:30:b9:15:a3:03:80:4a:98:a1:30:f4:37:53:
59:d8:b2:0b:90:58:29:a9:6d:e4:b5:07:3e:e5:9b:
b6:dd:c8:76:4e:0c:d7:6a:02:c6:21:06:5d:0f:a8:
f3:2f:2e:5d:7c:2e:5e:54:3e:41:2b:03:ab:d8:62:
0e:39:4f:03:0d:e3:13:35:2e:f0:ba:9d:28:4b:48:
da:aa:89:b1:e8:71:ea:57:f2:22:d3:eb:0e:16:23:
51:1e:ae:e7:fb:42:0a:fd:aa:52:c3:86:50:21:c9:
f1:d6:fd:8c:c7:59:fa:6c:9f:6a:e9:7e:d7:19:70:
e6:5c:9f:55:f2:22:3b:70:9e:d4:cc:01:53:f9:ff:
e7:99:80:8a:c5:5e:a7:a2:b8:9d:5b:8b:9d:b7:77:
65:1f:21:96:e1:79:7c:2f:18:6c:6a:af:25:4c:dc:
19:9a:36:f4:1d:32:42:be:f0:78:0c:b5:93:cb:f5:
01:49:22:dc:12:92:28:f0:33:21:1b:c6:f7:c5:91:
b7:fb:d3:c7:3b:b9:90:3a:5f:66:09:ed:c6:d2:6a:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:48:E9:2C:FC:C4:68:F5:FC:C9:EA:69:28:75:64:6B:A6:B3:1C
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d6:2a:0f:92:ac:eb:e8:de:45:ca:7d:d9:ed:3f:7d:cb:32:
35:72:ba:04:91:c9:11:44:4e:11:d2:bb:8c:c7:a4:d5:64:a7:
f5:19:d0:de:11:44:a3:36:be:5c:3b:95:f1:81:55:64:41:ad:
8f:26:51:1e:c6:57:78:b0:00:f6:fd:03:e3:a9:f0:18:69:f1:
d0:1c:66:d1:e9:08:a9:88:f3:37:4c:ba:ad:84:ec:ce:78:2a:
1d:6e:d6:06:52:6c:e3:24:34:08:a5:22:20:d7:41:d9:75:71:
f1:68:f5:d7:b5:d4:67:ba:ff:19:83:74:08:20:d6:d0:f9:9e:
ad:3e:0d:4f:2c:e1:c3:d1:29:4f:a4:5d:a2:02:e6:5a:c6:be:
94:a7:71:62:35:89:2a:ae:35:63:1c:32:bc:7b:82:e7:a3:15:
a2:35:19:89:06:0e:c7:e4:7c:79:7c:79:1a:77:bc:98:96:58:
55:aa:c0:dd:47:c3:dc:87:8b:8e:cd:e4:17:55:45:68:fc:e7:
5d:e8:d8:6b:67:a2:7d:56:ea:36:b9:a8:ad:2e:c9:95:39:f1:
7c:47:2e:d7:39:75:a7:d1:19:e0:4b:f6:e9:e7:2e:1c:73:56:
6e:d8:16:b4:de:25:e4:4e:25:97:bc:a9:9a:31:b0:59:0f:af:
49:91:b8:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZTWZTWa3iR3/wq5iTk30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzkyZGZjNmJhMmQzMTg2ZDMyNjljNzA5MWI3MDE5ODE1
MzQ1ZDMwHhcNMjUwNzI3MDEwMDI2WhcNMjUwNzI4MDEwMDI2WjAzMTEwLwYDVQQD
Eyg5NWE5NDhlOTJjZmNjNDY4ZjVmY2M5ZWE2OTI4NzU2NDZiYTZiMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkZ7f92/wTax8J6Tq6VbllYjXM+I
onOlD1jDUds42/LIhOJgvH5+Weo0x19KWzC5FaMDgEqYoTD0N1NZ2LILkFgpqW3k
tQc+5Zu23ch2TgzXagLGIQZdD6jzLy5dfC5eVD5BKwOr2GIOOU8DDeMTNS7wup0o
S0jaqomx6HHqV/Ii0+sOFiNRHq7n+0IK/apSw4ZQIcnx1v2Mx1n6bJ9q6X7XGXDm
XJ9V8iI7cJ7UzAFT+f/nmYCKxV6noridW4udt3dlHyGW4Xl8Lxhsaq8lTNwZmjb0
HTJCvvB4DLWTy/UBSSLcEpIo8DMhG8b3xZG3+9PHO7mQOl9mCe3G0mrPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWpSOks/MRo9fzJ6mkodWRrprMcMB8GA1UdIwQY
MBaAFBo5LfxrotMYbTJpxwkbcBmBU0XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2prdF9HdWkweGh0TW1uSENSdHdHWUZUUmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMmQ4NWQtYTcxNy00ZDY4LTgyYTYt
MmYzNjVmMjJhMThjLzEvR2prdF9HdWkweGh0TW1uSENSdHdHWUZUUmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMmQ4NWQtYTcxNy00ZDY4LTgyYTYtMmYzNjVmMjJhMThj
LzEvR2prdF9HdWkweGh0TW1uSENSdHdHWUZUUmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtYqD5Ks
6+jeRcp92e0/fcsyNXK6BJHJEUROEdK7jMek1WSn9RnQ3hFEoza+XDuV8YFVZEGt
jyZRHsZXeLAA9v0D46nwGGnx0Bxm0ekIqYjzN0y6rYTszngqHW7WBlJs4yQ0CKUi
INdB2XVx8Wj117XUZ7r/GYN0CCDW0PmerT4NTyzhw9EpT6RdogLmWsa+lKdxYjWJ
Kq41YxwyvHuC56MVojUZiQYOx+R8eXx5Gne8mJZYVarA3UfD3IeLjs3kF1VFaPzn
XejYa2eifVbqNrmorS7JlTnxfEcu1zl1p9EZ4Ev26ecuHHNWbtgWtN4l5E4ll7yp
mjGwWQ+vSZG4qA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:00 2025 by rpki-client