Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: X4Ga6Sqf6c25Ue3xLTSBj8FnkjCTXeTct3jbsW3Lh0c=
Subject key identifier: 76:11:4A:77:6A:42:C4:8A:AE:9E:F7:C4:03:71:C1:45:A8:77:A9:81
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 01983570A3BF6EB33447E749207874C7A682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0CC7
Signing time: Wed 23 Jul 2025 04:00:31 +0000
Manifest this update: Wed 23 Jul 2025 04:00:31 +0000
Manifest next update: Thu 24 Jul 2025 04:00:31 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: u6G1PZSO3q33U7yyx7Y5HlVZoml21BhCTYaAm0Xoxz4=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:70:a3:bf:6e:b3:34:47:e7:49:20:78:74:c7:a6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Jul 23 04:00:31 2025 GMT
Not After : Jul 24 04:00:31 2025 GMT
Subject: CN=76114a776a42c48aae9ef7c40371c145a877a981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:47:17:49:fd:c1:2b:7e:1a:f5:e8:bc:76:
17:bc:7e:14:07:e0:7a:95:e2:ce:d7:a6:8a:94:30:
18:47:a4:45:49:49:bb:6f:a9:d7:98:c6:2e:88:8a:
82:ad:8b:fd:62:c1:6a:a2:5a:26:76:d0:eb:74:f5:
34:fc:09:e0:85:a1:80:eb:56:f2:5e:28:38:3d:9b:
79:16:d9:7a:f4:1c:c3:50:92:00:2a:8d:6b:15:9e:
34:b6:ea:20:fa:bd:36:83:00:41:ca:34:66:52:b5:
f7:c5:0f:30:c9:ea:15:9c:49:50:74:ea:7b:f3:4a:
53:e7:98:65:75:36:2c:a8:2d:8d:5f:d6:79:85:90:
d6:9d:38:10:c4:81:87:5d:de:e5:9d:ee:8c:ba:69:
af:29:2f:60:b1:b9:e8:a3:a8:72:49:a5:c4:c8:a8:
49:24:a9:ab:81:42:0a:d9:e0:d0:6d:e2:99:e2:31:
da:55:47:ea:96:7b:6a:27:96:7b:5a:b9:2d:b8:a1:
81:0d:c6:bf:be:c8:68:58:21:6b:1e:04:d1:77:d1:
07:a2:cb:2f:12:97:39:c1:6e:58:12:d7:c6:22:6d:
61:d7:8b:52:e2:b9:6e:d7:f0:5e:e1:4a:92:ba:fe:
f0:9e:09:03:78:f6:2c:49:53:cc:51:dc:2c:fb:d1:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:4A:77:6A:42:C4:8A:AE:9E:F7:C4:03:71:C1:45:A8:77:A9:81
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:69:c3:b4:07:e9:f1:7a:b3:f7:e3:1b:64:c3:a3:2f:16:01:
15:7f:be:4d:dd:3d:77:7e:10:0f:31:9a:de:63:af:96:7f:e6:
d3:aa:6f:4b:89:5b:d2:2c:92:0f:90:7d:ea:b0:68:1c:3e:8a:
7f:59:c1:44:df:1b:a3:8f:92:d1:0e:47:81:65:ab:70:e5:83:
e3:f4:a0:ab:9a:17:70:06:4e:06:cd:ad:1f:28:5a:c6:be:bd:
80:a2:cb:7d:85:33:2d:1c:f3:f7:0f:a4:f8:b6:17:ba:6b:2b:
5e:84:67:6c:61:d4:21:42:a6:36:0b:3c:fd:ee:12:6a:b0:0c:
f5:88:6f:65:c8:93:c2:89:7d:69:ff:8e:6c:52:26:75:c4:70:
9c:ee:74:b8:e6:eb:57:cb:62:e8:c4:47:2e:42:56:8a:73:37:
18:91:f2:2f:92:ea:b7:7a:92:5b:d3:97:c2:27:e8:c1:46:92:
4c:52:5e:87:9a:10:55:09:15:c6:b6:f1:2f:c9:d4:7a:ec:1b:
2c:d0:1a:c5:b0:c0:85:b0:db:1c:e4:7e:5f:08:f4:db:9c:83:
af:1e:fa:ef:8b:5c:cd:f6:29:62:f3:3d:d8:76:5c:b0:29:ad:
e0:27:7d:0f:bc:fa:78:5a:0d:98:f2:d2:69:4b:12:f6:83:ab:
8b:82:1c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1cKO/brM0R+dJIHh0x6aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZDk2MDA1OGE1NTNiM2Y1ZGY5ZmU3MjcyMTkwMzdjNDhh
YjUwZTEwHhcNMjUwNzIzMDQwMDMxWhcNMjUwNzI0MDQwMDMxWjAzMTEwLwYDVQQD
Eyg3NjExNGE3NzZhNDJjNDhhYWU5ZWY3YzQwMzcxYzE0NWE4NzdhOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFFHF0n9wSt+GvXovHYXvH4UB+B6
leLO16aKlDAYR6RFSUm7b6nXmMYuiIqCrYv9YsFqolomdtDrdPU0/AnghaGA61by
Xig4PZt5Ftl69BzDUJIAKo1rFZ40tuog+r02gwBByjRmUrX3xQ8wyeoVnElQdOp7
80pT55hldTYsqC2NX9Z5hZDWnTgQxIGHXd7lne6MummvKS9gsbnoo6hySaXEyKhJ
JKmrgUIK2eDQbeKZ4jHaVUfqlntqJ5Z7WrktuKGBDca/vshoWCFrHgTRd9EHossv
Epc5wW5YEtfGIm1h14tS4rlu1/Be4UqSuv7wngkDePYsSVPMUdws+9GIFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYRSndqQsSKrp73xANxwUWod6mBMB8GA1UdIwQY
MBaAFBnZYAWKVTs/Xfn+cnIZA3xIq1DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAt
NTdiOTFlODE1MzMwLzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAtNTdiOTFlODE1MzMw
LzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmnDtAfp
8Xqz9+MbZMOjLxYBFX++Td09d34QDzGa3mOvln/m06pvS4lb0iySD5B96rBoHD6K
f1nBRN8bo4+S0Q5HgWWrcOWD4/Sgq5oXcAZOBs2tHyhaxr69gKLLfYUzLRzz9w+k
+LYXumsrXoRnbGHUIUKmNgs8/e4SarAM9YhvZciTwol9af+ObFImdcRwnO50uObr
V8ti6MRHLkJWinM3GJHyL5Lqt3qSW9OXwifowUaSTFJeh5oQVQkVxrbxL8nUeuwb
LNAaxbDAhbDbHOR+Xwj025yDrx7674tczfYpYvM92HZcsCmt4Cd9D7z6eFoNmPLS
aUsS9oOri4Ic1g==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:19:18 2025 by rpki-client