Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: nUOHEFyeq0zw5+VY0FL9R2ilJEietLW9QlM5nEQw6c4=
Subject key identifier: 69:A6:2F:08:C8:58:28:DD:27:7C:09:17:E3:A8:36:D1:09:E5:33:19
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 019854FB5AC88FC60EA9BDBEE0BE1222EABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1602
Signing time: Tue 29 Jul 2025 07:00:15 +0000
Manifest this update: Tue 29 Jul 2025 07:00:15 +0000
Manifest next update: Wed 30 Jul 2025 07:00:15 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: zyYWtA6wjyYds+YjKMPfzfnY8olZpJdn+Ght3SdmEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:5a:c8:8f:c6:0e:a9:bd:be:e0:be:12:22:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Jul 29 07:00:15 2025 GMT
Not After : Jul 30 07:00:15 2025 GMT
Subject: CN=69a62f08c85828dd277c0917e3a836d109e53319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:f2:ae:f9:20:85:ae:9d:11:3b:c6:85:72:
7a:0d:3a:5c:48:dd:58:b7:c6:33:60:a7:08:49:06:
a0:79:a7:c2:8b:14:bb:51:a8:e5:17:4d:6b:d0:c2:
92:9f:38:5c:c8:f9:2d:81:ed:08:5e:ee:52:30:fb:
d4:3a:a7:43:ae:8b:a2:a7:34:72:a0:e1:05:90:cd:
4c:b8:9d:08:f2:cc:fa:70:2e:68:57:dc:c1:d7:7b:
c9:94:83:17:56:60:8f:db:4a:46:0a:b0:c3:d0:3c:
99:7f:10:b0:c7:59:f2:96:7a:bf:6c:0f:e8:68:86:
45:dc:73:aa:56:46:d7:6a:95:7b:f9:4c:ee:32:86:
52:c5:91:51:6c:71:dd:9d:4e:f5:2f:62:42:70:52:
8e:f5:c4:3f:49:4d:59:e5:85:65:2a:57:fc:f2:4b:
cc:ae:51:cc:e3:d2:c9:f4:7f:5d:b3:2b:7b:7c:42:
f9:80:68:ec:e7:ed:5f:2e:21:69:df:18:74:b1:ac:
cb:36:0f:03:e7:7e:b2:44:77:76:45:2f:aa:dd:fa:
f8:d3:4d:98:17:fe:de:78:91:f2:a9:27:d1:69:13:
99:54:23:d6:8b:22:9c:21:43:37:f0:79:31:04:25:
e9:0e:cd:ea:81:da:57:11:a9:31:af:7f:59:2a:1f:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:2F:08:C8:58:28:DD:27:7C:09:17:E3:A8:36:D1:09:E5:33:19
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:14:12:ed:d9:e1:8a:ab:c0:a3:3b:84:ef:cd:fa:f2:09:
9f:13:4f:47:6c:c9:66:62:c6:d5:02:2a:5d:b0:9f:c0:fb:f5:
3f:b9:cb:30:95:cf:db:3d:73:0a:ae:78:63:94:e1:10:25:5d:
06:dc:45:60:8c:a8:b2:7d:64:d4:dc:0c:e0:3f:c2:b9:47:0d:
a7:e2:de:9b:a5:cc:da:76:4d:ec:15:c4:c7:3d:76:83:9d:b8:
e3:3c:25:29:4a:8b:a1:90:5c:cf:26:0a:e8:89:7c:ac:76:e9:
8c:9b:28:cf:29:48:7e:b1:8e:ba:5e:ef:b4:de:3b:0f:e3:89:
bb:45:f1:56:24:f7:48:50:92:77:f4:e3:8c:0e:54:12:64:8e:
86:73:15:97:a8:dc:21:8d:9a:f1:91:c0:0a:c7:15:01:80:0e:
c2:ba:51:ce:e2:1c:16:64:4b:7e:47:88:9c:7a:8b:a7:fe:e0:
b8:55:8c:57:b5:19:49:df:2a:c7:86:44:c9:bb:97:f2:92:af:
43:d9:7e:f1:49:d4:52:84:7a:cc:2b:06:1e:c7:b8:fe:a6:9c:
ec:2b:67:17:11:43:38:fa:97:9e:e2:59:90:20:93:b2:5b:f7:
3d:cd:70:d9:94:78:ad:bd:4a:7d:a2:18:6a:48:4e:fc:a8:7a:
0d:42:34:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU+1rIj8YOqb2+4L4SIuq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDE2NWU5NWEyNWEzN2I4NzNjZmJhOWY1MzI0YTdlMjUz
YmJkZDgwHhcNMjUwNzI5MDcwMDE1WhcNMjUwNzMwMDcwMDE1WjAzMTEwLwYDVQQD
Eyg2OWE2MmYwOGM4NTgyOGRkMjc3YzA5MTdlM2E4MzZkMTA5ZTUzMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKPyrvkgha6dETvGhXJ6DTpcSN1Y
t8YzYKcISQageafCixS7UajlF01r0MKSnzhcyPktge0IXu5SMPvUOqdDrouipzRy
oOEFkM1MuJ0I8sz6cC5oV9zB13vJlIMXVmCP20pGCrDD0DyZfxCwx1nylnq/bA/o
aIZF3HOqVkbXapV7+UzuMoZSxZFRbHHdnU71L2JCcFKO9cQ/SU1Z5YVlKlf88kvM
rlHM49LJ9H9dsyt7fEL5gGjs5+1fLiFp3xh0sazLNg8D536yRHd2RS+q3fr4002Y
F/7eeJHyqSfRaROZVCPWiyKcIUM38HkxBCXpDs3qgdpXEakxr39ZKh+kuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmmLwjIWCjdJ3wJF+OoNtEJ5TMZMB8GA1UdIwQY
MBaAFIABZelaJaN7hzz7qfUySn4lO73YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80YmQ0NjktNDkyNS00ZWVlLWI2YTIt
ZDlhZWI5MzA1MWFiLzEvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80YmQ0NjktNDkyNS00ZWVlLWI2YTItZDlhZWI5MzA1MWFi
LzEvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEoUEu3Z
4YqrwKM7hO/N+vIJnxNPR2zJZmLG1QIqXbCfwPv1P7nLMJXP2z1zCq54Y5ThECVd
BtxFYIyosn1k1NwM4D/CuUcNp+Lem6XM2nZN7BXExz12g5244zwlKUqLoZBczyYK
6Il8rHbpjJsozylIfrGOul7vtN47D+OJu0XxViT3SFCSd/TjjA5UEmSOhnMVl6jc
IY2a8ZHACscVAYAOwrpRzuIcFmRLfkeInHqLp/7guFWMV7UZSd8qx4ZEybuX8pKv
Q9l+8UnUUoR6zCsGHse4/qac7CtnFxFDOPqXnuJZkCCTslv3Pc1w2ZR4rb1KfaIY
akhO/Kh6DUI0xA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:13:30 2025 by rpki-client