Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: kt8dIWoHBlcHh0TgQbPbfYU0NTVvf1i5uSLGsgLtZlU=
Subject key identifier: AC:EC:0F:B6:13:A5:35:D6:BC:CF:F2:B5:35:DA:B2:61:32:F8:09:7D
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 019848C053199990ECF9F66F8B4EDE8756FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 22:00:20 +0000
Manifest this update: Sat 26 Jul 2025 22:00:20 +0000
Manifest next update: Sun 27 Jul 2025 22:00:20 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: ZJcIkSiuYMqU+y1Hj34a2zehAOgDyKNLjoL18Cu6bE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:53:19:99:90:ec:f9:f6:6f:8b:4e:de:87:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Jul 26 22:00:20 2025 GMT
Not After : Jul 27 22:00:20 2025 GMT
Subject: CN=acec0fb613a535d6bccff2b535dab26132f8097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:54:69:a5:5a:7d:bf:7f:d1:ed:85:61:6a:
ed:bb:63:7f:f3:b8:bd:8f:e5:47:ab:f7:ee:9a:08:
a7:4b:d8:8d:97:ce:73:fa:53:17:a0:7b:36:64:75:
d3:d1:54:9f:86:3e:4f:c1:29:b2:c8:06:c1:7c:fc:
77:51:8d:74:a3:9d:a8:ca:0f:e4:05:cf:36:25:74:
cf:87:9c:6a:e6:aa:37:62:e2:16:94:c0:fb:dc:c3:
0b:0c:f3:c1:6a:a4:59:69:f8:f5:79:3a:02:39:ed:
92:9f:c3:f0:f1:98:19:4c:fa:ec:6e:a2:52:cb:52:
aa:fc:a6:35:dc:cc:b0:90:92:90:03:72:58:46:11:
f8:2e:df:57:18:e7:93:54:94:12:1c:41:7c:13:7b:
13:ee:dc:22:bf:84:7d:27:5c:a5:ad:56:fe:49:cd:
ef:e4:24:48:4a:55:ac:a5:88:4b:03:28:2c:48:51:
89:1e:ff:ab:ff:9a:17:7b:9c:7e:f2:dc:40:95:a6:
1d:9f:8c:f5:b2:29:6f:96:ce:a5:55:04:3b:e7:87:
c0:d9:83:73:c2:73:1e:24:32:b2:b3:e0:d9:f8:37:
49:8b:5d:40:40:15:0d:a5:b3:7f:73:d7:0c:42:20:
ab:4d:8f:73:b3:e7:53:26:e0:a0:1a:fe:89:0f:db:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:0F:B6:13:A5:35:D6:BC:CF:F2:B5:35:DA:B2:61:32:F8:09:7D
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:e3:d1:73:2f:c7:ef:98:2b:01:35:69:96:64:1a:26:f6:
66:45:72:af:4a:de:1a:60:03:16:a2:f6:41:16:39:2d:6d:f4:
2e:ff:85:a5:b7:be:84:e8:3d:72:dd:98:63:14:9a:26:bd:f2:
b5:c2:a1:ce:ee:a0:7a:e6:84:e5:70:d1:10:c5:af:20:68:78:
d7:c0:9e:e7:07:79:de:65:f4:52:94:ea:bf:d8:69:d0:b1:db:
24:2b:17:46:82:39:04:83:7b:00:c1:ad:bd:ee:c5:67:bd:47:
c2:53:81:30:7c:10:41:18:d6:75:c0:2f:91:b2:86:6c:02:b8:
3a:e4:b3:53:5b:85:ac:64:70:e1:67:dd:10:50:d9:39:3c:55:
82:63:45:0c:a9:60:a5:5e:df:81:56:0d:7e:03:7c:63:0a:1f:
55:b1:a2:4f:b9:19:13:80:75:8d:bc:d1:87:f5:28:da:fe:ec:
6b:73:7a:20:82:63:e2:33:f6:57:0b:c3:94:ad:8a:c4:68:52:
49:8f:6a:b3:57:dc:19:ea:f6:d7:0c:58:f5:dc:3a:a4:6a:36:
17:b3:d6:e0:71:15:4e:73:26:3e:51:5d:50:44:9c:35:2d:10:
4d:41:81:b8:16:58:2b:9e:af:32:7d:41:68:9d:58:1e:51:2a:
98:89:c2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwFMZmZDs+fZvi07eh1b8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjQ2NDU0OWMwNzkxYmNiNjYxMTc3Zjk3YWVkY2YzOWQ1
NGMzOTUwHhcNMjUwNzI2MjIwMDIwWhcNMjUwNzI3MjIwMDIwWjAzMTEwLwYDVQQD
EyhhY2VjMGZiNjEzYTUzNWQ2YmNjZmYyYjUzNWRhYjI2MTMyZjgwOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qFUaaVafb9/0e2FYWrtu2N/87i9
j+VHq/fumginS9iNl85z+lMXoHs2ZHXT0VSfhj5PwSmyyAbBfPx3UY10o52oyg/k
Bc82JXTPh5xq5qo3YuIWlMD73MMLDPPBaqRZafj1eToCOe2Sn8Pw8ZgZTPrsbqJS
y1Kq/KY13MywkJKQA3JYRhH4Lt9XGOeTVJQSHEF8E3sT7twiv4R9J1ylrVb+Sc3v
5CRISlWspYhLAygsSFGJHv+r/5oXe5x+8txAlaYdn4z1silvls6lVQQ754fA2YNz
wnMeJDKys+DZ+DdJi11AQBUNpbN/c9cMQiCrTY9zs+dTJuCgGv6JD9vCjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzsD7YTpTXWvM/ytTXasmEy+Al9MB8GA1UdIwQY
MBaAFBlkZFScB5G8tmEXf5eu3POdVMOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dSa1ZKd0hrYnkyWVJkX2w2N2M4NTFVdzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZjllYTYtZmI2Yi00MTEzLTgwMDUt
NDc1YjI5ZDEyODZhLzEvR1dSa1ZKd0hrYnkyWVJkX2w2N2M4NTFVdzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZjllYTYtZmI2Yi00MTEzLTgwMDUtNDc1YjI5ZDEyODZh
LzEvR1dSa1ZKd0hrYnkyWVJkX2w2N2M4NTFVdzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgfj0XMv
x++YKwE1aZZkGib2ZkVyr0reGmADFqL2QRY5LW30Lv+Fpbe+hOg9ct2YYxSaJr3y
tcKhzu6geuaE5XDREMWvIGh418Ce5wd53mX0UpTqv9hp0LHbJCsXRoI5BIN7AMGt
ve7FZ71HwlOBMHwQQRjWdcAvkbKGbAK4OuSzU1uFrGRw4WfdEFDZOTxVgmNFDKlg
pV7fgVYNfgN8YwofVbGiT7kZE4B1jbzRh/Uo2v7sa3N6IIJj4jP2VwvDlK2KxGhS
SY9qs1fcGer21wxY9dw6pGo2F7PW4HEVTnMmPlFdUEScNS0QTUGBuBZYK56vMn1B
aJ1YHlEqmInC6A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:25 2025 by rpki-client