Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: sDPNQ8YQQ/DGYUSCkTz2E5QITRrWugHJf0vf2BJmADg=
Subject key identifier: A3:3A:F1:A9:A2:AD:2C:F4:34:D3:86:C1:BB:D5:BB:3F:3D:87:63:59
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 0198353A14F67858592385818543CBF3C4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 08FC
Signing time: Wed 23 Jul 2025 03:00:55 +0000
Manifest this update: Wed 23 Jul 2025 03:00:55 +0000
Manifest next update: Thu 24 Jul 2025 03:00:55 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: 5qP2P1R09JIdeqlpj+BHGA9nmqHA6IzCm5+rA16of5E=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:14:f6:78:58:59:23:85:81:85:43:cb:f3:c4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Jul 23 03:00:55 2025 GMT
Not After : Jul 24 03:00:55 2025 GMT
Subject: CN=a33af1a9a2ad2cf434d386c1bbd5bb3f3d876359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:5c:b7:56:28:d3:c7:77:aa:58:61:79:41:
db:c5:40:da:bb:21:35:a2:68:69:a2:b0:7b:a2:3e:
fe:60:80:3f:98:c8:6a:fd:a6:be:ce:74:00:64:e3:
54:1b:ce:f2:78:78:61:64:5a:30:8f:dd:73:3c:1c:
9e:13:33:12:f1:b0:cd:b2:0c:7a:a6:e7:7e:85:5e:
97:ed:92:f5:b1:25:97:21:92:70:ee:c5:28:a6:1f:
83:ab:30:33:6b:95:10:d5:d4:64:3f:b5:bc:05:18:
9f:8d:35:ff:b1:a8:aa:28:39:95:f3:76:0a:b8:9e:
94:f5:d9:a8:9c:84:78:a7:ed:65:58:04:37:6a:9f:
c0:25:7e:f7:42:88:39:6f:6c:21:dc:ff:45:6c:5b:
d8:2b:df:88:c3:72:d4:65:bc:3a:0c:fc:cb:2d:45:
f1:6a:1d:a5:8e:08:bf:be:dc:9f:29:34:f1:98:eb:
eb:c0:73:f6:c1:86:88:2f:9c:c1:5f:3d:a2:b9:f8:
11:47:9f:de:e0:56:e6:45:31:d2:f2:19:ac:d2:75:
c2:17:e7:52:b3:d2:e8:60:dd:9c:c2:8f:ec:b3:f8:
d8:08:2e:28:e4:a8:cf:d5:87:3b:dd:7d:f4:0d:2c:
b6:95:67:41:4f:59:23:9e:0f:10:87:e2:a6:ac:ab:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:F1:A9:A2:AD:2C:F4:34:D3:86:C1:BB:D5:BB:3F:3D:87:63:59
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e2:25:24:95:d7:63:a6:f8:bd:fb:9c:df:27:27:1c:db:7e:
4c:db:82:74:19:63:a7:b5:8c:76:ba:8d:c9:f5:d3:c0:42:52:
ab:c8:99:fa:70:46:bb:51:ec:d3:27:a3:69:e1:6b:6b:9e:40:
cd:db:53:92:9f:9c:72:38:a4:60:e7:ed:1d:b2:27:b1:74:4d:
d1:e9:e2:9f:08:41:0c:74:0d:78:e2:72:4b:ee:0b:9b:c6:3e:
cd:4a:55:c1:fe:a6:b6:26:50:c0:76:4c:de:44:3c:2c:04:cd:
92:85:37:e7:59:41:71:96:24:0c:18:d6:89:ad:db:4b:6b:1f:
ee:77:8e:71:20:30:3e:39:2a:55:b8:53:0d:12:9c:0e:e0:59:
27:0a:d2:0c:7b:09:95:79:b2:a1:68:e3:fb:a1:5c:56:41:c3:
dc:7b:36:6c:30:35:e2:cc:e5:03:a9:37:0d:38:b8:2a:b2:23:
40:8d:c4:0d:c3:9e:be:e3:e4:b1:19:4c:34:8a:70:a2:3d:78:
ce:71:c4:2a:14:90:21:82:2a:be:81:42:b2:92:a4:68:79:89:
fb:61:66:6a:bd:ab:4d:ab:46:84:d4:04:23:08:9e:af:61:d0:
6e:91:c2:ea:d5:c9:b0:c5:7e:37:fc:89:da:ba:82:f2:99:24:
dd:0c:40:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1OhT2eFhZI4WBhUPL88TSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTk5N2E4YmZjNjk4YjhlYjllODcyOGVjYWYxMmE1Mjdi
MzU3ZGYwHhcNMjUwNzIzMDMwMDU1WhcNMjUwNzI0MDMwMDU1WjAzMTEwLwYDVQQD
EyhhMzNhZjFhOWEyYWQyY2Y0MzRkMzg2YzFiYmQ1YmIzZjNkODc2MzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphRct1Yo08d3qlhheUHbxUDauyE1
omhporB7oj7+YIA/mMhq/aa+znQAZONUG87yeHhhZFowj91zPByeEzMS8bDNsgx6
pud+hV6X7ZL1sSWXIZJw7sUoph+DqzAza5UQ1dRkP7W8BRifjTX/saiqKDmV83YK
uJ6U9dmonIR4p+1lWAQ3ap/AJX73Qog5b2wh3P9FbFvYK9+Iw3LUZbw6DPzLLUXx
ah2ljgi/vtyfKTTxmOvrwHP2wYaIL5zBXz2iufgRR5/e4FbmRTHS8hms0nXCF+dS
s9LoYN2cwo/ss/jYCC4o5KjP1Yc73X30DSy2lWdBT1kjng8Qh+KmrKs83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM68amirSz0NNOGwbvVuz89h2NZMB8GA1UdIwQY
MBaAFBlZl6i/xpi4656HKOyvEqUns1ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2Ut
MDkyMTAyMTI3MTRjLzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2UtMDkyMTAyMTI3MTRj
LzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneIlJJXX
Y6b4vfuc3ycnHNt+TNuCdBljp7WMdrqNyfXTwEJSq8iZ+nBGu1Hs0yejaeFra55A
zdtTkp+ccjikYOftHbInsXRN0eninwhBDHQNeOJyS+4Lm8Y+zUpVwf6mtiZQwHZM
3kQ8LATNkoU351lBcZYkDBjWia3bS2sf7neOcSAwPjkqVbhTDRKcDuBZJwrSDHsJ
lXmyoWjj+6FcVkHD3Hs2bDA14szlA6k3DTi4KrIjQI3EDcOevuPksRlMNIpwoj14
znHEKhSQIYIqvoFCspKkaHmJ+2Fmar2rTatGhNQEIwier2HQbpHC6tXJsMV+N/yJ
2rqC8pkk3QxAFA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:29 2025 by rpki-client