Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
File: giKx_lqaAWNQKFrAeI08yrPrORk.mft (raw, json)
Hash identifier: fNs0SRfMPvTTjSj142i97okdHm4d4WOx/0iwAW91GSM=
Subject key identifier: 5E:97:75:D3:59:EF:43:60:62:42:22:95:50:76:08:4E:48:10:DC:6A
Authority key identifier: 82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
Certificate issuer: /CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919
Certificate serial: 019847ADD44C9D76278D3F81CF33FD857F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
Manifest number: 0748
Signing time: Sat 26 Jul 2025 17:00:30 +0000
Manifest this update: Sat 26 Jul 2025 17:00:30 +0000
Manifest next update: Sun 27 Jul 2025 17:00:30 +0000
Files and hashes: 1: giKx_lqaAWNQKFrAeI08yrPrORk.crl (hash: oIdvvU0OnfUWdOHZzwmpmyPTQ9soGxVEgwBC/PKS1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
rsync://rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d4:4c:9d:76:27:8d:3f:81:cf:33:fd:85:7f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919
Validity
Not Before: Jul 26 17:00:30 2025 GMT
Not After : Jul 27 17:00:30 2025 GMT
Subject: CN=5e9775d359ef4360624222955076084e4810dc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:e5:c8:18:18:0b:7e:14:c4:b3:e7:b2:f7:
10:35:0e:1c:cd:89:36:7c:4a:a8:52:d7:0f:98:2a:
08:c1:29:b4:32:96:7f:56:ed:3a:a7:d1:f4:d8:d0:
66:bf:ce:ad:4f:89:44:4b:9c:8a:4f:cd:94:8a:71:
8b:2a:7f:dd:f1:f1:68:fa:2f:76:83:c2:e2:d8:38:
42:ff:1c:fe:56:2e:8f:24:ed:fc:3c:09:9e:98:db:
4f:86:5b:b8:8f:30:9c:6c:5a:da:70:49:f6:de:84:
5e:bf:c9:08:88:a8:ac:e1:d0:84:c8:9c:81:f1:c0:
8f:ad:c0:5d:1f:3d:02:a6:a3:44:57:41:b4:75:9a:
71:fa:a3:cb:c1:db:21:b6:79:3c:ac:68:43:e7:19:
c4:73:56:0f:72:73:99:34:17:b3:f0:26:44:0e:08:
4e:56:34:fb:d3:18:c6:3c:0f:87:d7:9f:fb:62:ed:
f4:23:84:5a:45:45:8f:36:dd:45:b6:b1:f3:0c:95:
d9:2e:14:b2:50:6b:31:7c:01:12:a4:22:1b:8e:1a:
30:2d:2f:bc:34:99:91:4f:65:89:2a:72:dc:e1:f2:
79:82:30:cf:f4:76:bb:5f:09:3f:ff:c3:e0:c4:0c:
89:ba:fc:cc:b3:b5:57:59:2d:16:ad:02:94:85:fd:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:75:D3:59:EF:43:60:62:42:22:95:50:76:08:4E:48:10:DC:6A
X509v3 Authority Key Identifier:
keyid:82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:78:0f:43:d3:5a:4e:45:3a:0a:3e:4f:b2:a9:fe:c0:a0:a1:
b7:73:c3:d2:92:bc:ef:c5:ae:ab:14:41:14:bc:fc:12:cd:c7:
8f:56:c4:e0:6d:e7:33:ff:09:3c:82:33:59:43:72:cb:c2:f6:
dc:84:32:a8:3e:d6:03:5c:6a:4b:8f:44:59:6d:95:86:6b:23:
d6:55:c6:42:c1:bf:ac:4b:2f:c3:0b:45:28:70:c9:16:a5:54:
e8:4f:3b:fd:f2:37:26:f0:f2:79:cd:6c:5d:4a:71:ab:ee:5e:
24:cc:ea:25:05:cb:be:6f:62:21:24:fa:51:97:b6:fe:9f:a6:
66:98:fa:7f:10:30:0b:b4:a0:e3:fc:c6:aa:fe:61:c9:f3:f2:
c9:34:8c:ba:b2:4a:ca:5d:81:1e:09:de:33:10:d2:44:d1:75:
ae:69:03:c6:15:72:f3:3e:36:3b:81:ba:1b:58:f2:22:f4:05:
59:bc:44:74:a6:6c:98:8d:ca:a0:df:9b:67:4f:dc:66:c9:77:
84:c1:d1:a3:5d:5f:36:bc:c9:75:93:fa:c0:74:20:73:a9:88:
78:fa:b3:03:50:31:f8:0a:62:24:0b:13:2b:ad:0a:7b:5f:66:
49:ba:a0:e3:26:40:4b:54:d1:d2:ec:4e:72:58:a2:fc:e9:65:
b2:fa:02:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrdRMnXYnjT+BzzP9hX89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMjJiMWZlNWE5YTAxNjM1MDI4NWFjMDc4OGQzY2NhYjNl
YjM5MTkwHhcNMjUwNzI2MTcwMDMwWhcNMjUwNzI3MTcwMDMwWjAzMTEwLwYDVQQD
Eyg1ZTk3NzVkMzU5ZWY0MzYwNjI0MjIyOTU1MDc2MDg0ZTQ4MTBkYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcvlyBgYC34UxLPnsvcQNQ4czYk2
fEqoUtcPmCoIwSm0MpZ/Vu06p9H02NBmv86tT4lES5yKT82UinGLKn/d8fFo+i92
g8Li2DhC/xz+Vi6PJO38PAmemNtPhlu4jzCcbFracEn23oRev8kIiKis4dCEyJyB
8cCPrcBdHz0CpqNEV0G0dZpx+qPLwdshtnk8rGhD5xnEc1YPcnOZNBez8CZEDghO
VjT70xjGPA+H15/7Yu30I4RaRUWPNt1FtrHzDJXZLhSyUGsxfAESpCIbjhowLS+8
NJmRT2WJKnLc4fJ5gjDP9Ha7Xwk//8PgxAyJuvzMs7VXWS0WrQKUhf0PVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6XddNZ70NgYkIilVB2CE5IENxqMB8GA1UdIwQY
MBaAFIIisf5amgFjUChawHiNPMqz6zkZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lLeF9scWFBV05RS0ZyQWVJMDh5clByT1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMjBjYWUtODQ1OS00ODcwLWE2YTIt
MzBhMTY0ODVmNWM0LzEvZ2lLeF9scWFBV05RS0ZyQWVJMDh5clByT1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMjBjYWUtODQ1OS00ODcwLWE2YTItMzBhMTY0ODVmNWM0
LzEvZ2lLeF9scWFBV05RS0ZyQWVJMDh5clByT1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQngPQ9Na
TkU6Cj5Psqn+wKCht3PD0pK878WuqxRBFLz8Es3Hj1bE4G3nM/8JPIIzWUNyy8L2
3IQyqD7WA1xqS49EWW2Vhmsj1lXGQsG/rEsvwwtFKHDJFqVU6E87/fI3JvDyec1s
XUpxq+5eJMzqJQXLvm9iIST6UZe2/p+mZpj6fxAwC7Sg4/zGqv5hyfPyyTSMurJK
yl2BHgneMxDSRNF1rmkDxhVy8z42O4G6G1jyIvQFWbxEdKZsmI3KoN+bZ0/cZsl3
hMHRo11fNrzJdZP6wHQgc6mIePqzA1Ax+ApiJAsTK60Ke19mSbqg4yZAS1TR0uxO
clii/OllsvoCVg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:18:30 2025 by rpki-client