Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: OzB+zv5Ewi8XgZPSEqNm0aqjXF1AJz3FVJ1Q3Tcy4T4=
Subject key identifier: B8:40:25:1E:B5:4B:87:A0:22:D6:BF:96:63:77:51:E0:C0:7A:BD:2B
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 019768176C3B2C331D5206C2A97914E638B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 07:00:54 +0000
Manifest this update: Fri 13 Jun 2025 07:00:54 +0000
Manifest next update: Sat 14 Jun 2025 07:00:54 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: NqVZJvX1vSCsZik2dAHldLVvEnp3BpOo/zt+Yd6huqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:6c:3b:2c:33:1d:52:06:c2:a9:79:14:e6:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Jun 13 07:00:54 2025 GMT
Not After : Jun 14 07:00:54 2025 GMT
Subject: CN=b840251eb54b87a022d6bf96637751e0c07abd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:b2:77:11:3f:8e:ca:6d:f4:c9:73:6c:6c:
52:2b:8d:7f:d3:f8:a2:24:d9:bf:16:ab:fc:3d:6e:
3e:21:6b:8a:18:29:8e:17:c9:20:49:ea:31:09:53:
7c:0d:ef:cc:70:81:16:4e:a0:16:bc:f8:98:fd:7f:
ac:89:61:0b:49:6e:43:cc:c7:dc:e8:e2:e1:06:5f:
a9:4e:70:9d:39:8a:af:0e:03:64:bd:d1:6c:f5:a9:
fb:86:b5:a8:3b:99:2e:b3:40:bd:e0:2c:9a:35:b9:
22:aa:de:75:76:63:e4:fb:ce:7e:fd:c2:cb:ee:48:
bb:60:73:b8:50:23:9d:50:73:e7:48:1f:9c:21:80:
06:ff:1d:3f:7a:a8:03:67:ca:c3:ad:cf:58:3b:45:
45:1a:f9:06:cb:fd:a4:6c:3e:3c:5a:c1:55:13:f1:
a8:0f:65:25:f0:c3:2e:7e:67:bc:5d:50:47:8c:58:
6f:eb:c0:c2:14:61:69:7a:56:76:8b:48:4b:c1:04:
4c:58:c0:09:76:39:37:4d:05:29:21:e3:d5:ad:7b:
03:e0:c3:06:02:80:86:8b:bd:3f:8f:bc:0f:9f:26:
54:8a:49:d4:71:d0:46:e3:29:01:45:bb:d5:a2:d7:
34:64:8f:b8:78:c1:e2:93:a7:87:10:1d:ad:8d:4a:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:25:1E:B5:4B:87:A0:22:D6:BF:96:63:77:51:E0:C0:7A:BD:2B
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:45:47:c4:1d:55:f5:95:75:90:1d:62:17:20:39:de:9c:31:
58:be:4d:b8:26:50:de:5a:c2:c1:12:15:09:fb:c0:31:55:b0:
0e:2e:91:ad:95:eb:88:ff:9f:b0:51:aa:d7:53:35:f2:f8:52:
1c:f1:21:d6:66:0c:8e:14:67:00:97:05:cb:80:5a:23:c2:3a:
d4:79:4c:32:e1:50:1d:6c:eb:36:dd:9c:98:af:ad:d5:c5:7e:
c7:8f:2f:6a:ee:4c:3e:c3:f8:ef:73:10:f1:84:1a:47:c7:db:
7e:6c:d4:4b:f5:c3:a7:ef:08:35:44:01:cc:e1:e1:4c:a9:08:
70:8d:9c:3a:70:90:42:e3:09:81:1d:1d:78:fb:5d:48:5e:1b:
24:d3:82:a7:21:16:38:2b:96:49:22:87:04:d4:cb:01:6e:a5:
93:56:5e:72:bc:cb:86:6a:be:9e:b7:d6:57:8f:51:bc:0c:c5:
81:fd:f0:73:d3:7e:3f:18:f3:6d:b0:50:ac:06:02:7f:a9:e3:
56:5c:7d:fe:e1:29:6a:4b:6b:73:65:ab:7f:e0:9a:ca:46:35:
fd:ed:4f:4f:fb:df:d5:29:81:e6:10:19:7f:ab:3f:85:7f:7e:
55:b5:0b:bb:a0:ff:07:94:21:f7:b4:fd:0e:61:75:ca:bf:b1:
78:d0:6e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoF2w7LDMdUgbCqXkU5jiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw
ODVhNDMwHhcNMjUwNjEzMDcwMDU0WhcNMjUwNjE0MDcwMDU0WjAzMTEwLwYDVQQD
EyhiODQwMjUxZWI1NGI4N2EwMjJkNmJmOTY2Mzc3NTFlMGMwN2FiZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrWydxE/jspt9MlzbGxSK41/0/ii
JNm/Fqv8PW4+IWuKGCmOF8kgSeoxCVN8De/McIEWTqAWvPiY/X+siWELSW5DzMfc
6OLhBl+pTnCdOYqvDgNkvdFs9an7hrWoO5kus0C94CyaNbkiqt51dmPk+85+/cLL
7ki7YHO4UCOdUHPnSB+cIYAG/x0/eqgDZ8rDrc9YO0VFGvkGy/2kbD48WsFVE/Go
D2Ul8MMufme8XVBHjFhv68DCFGFpelZ2i0hLwQRMWMAJdjk3TQUpIePVrXsD4MMG
AoCGi70/j7wPnyZUiknUcdBG4ykBRbvVotc0ZI+4eMHik6eHEB2tjUoQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhAJR61S4egIta/lmN3UeDAer0rMB8GA1UdIwQY
MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt
NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk
LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkVHxB1V
9ZV1kB1iFyA53pwxWL5NuCZQ3lrCwRIVCfvAMVWwDi6RrZXriP+fsFGq11M18vhS
HPEh1mYMjhRnAJcFy4BaI8I61HlMMuFQHWzrNt2cmK+t1cV+x48vau5MPsP473MQ
8YQaR8fbfmzUS/XDp+8INUQBzOHhTKkIcI2cOnCQQuMJgR0dePtdSF4bJNOCpyEW
OCuWSSKHBNTLAW6lk1ZecrzLhmq+nrfWV49RvAzFgf3wc9N+PxjzbbBQrAYCf6nj
Vlx9/uEpaktrc2Wrf+CaykY1/e1PT/vf1SmB5hAZf6s/hX9+VbULu6D/B5Qh97T9
DmF1yr+xeNBuHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:02:56 2025 by rpki-client