Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: XwhkNzQ0r0QueLHudJ96sdEZB8XhS4wB/kUbCHveFCk=
Subject key identifier: 13:7A:0F:02:28:3C:00:4B:10:66:BD:43:9B:48:91:1A:23:B8:F5:14
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 0197488C5B99E6B864127EDDC35B84CF071B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 04:00:47 +0000
Manifest this update: Sat 07 Jun 2025 04:00:47 +0000
Manifest next update: Sun 08 Jun 2025 04:00:47 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: y3DUO9G3bbcaYFSV8S31DKgZxp662xpJBuXXE2OL7yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5b:99:e6:b8:64:12:7e:dd:c3:5b:84:cf:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Jun 7 04:00:47 2025 GMT
Not After : Jun 8 04:00:47 2025 GMT
Subject: CN=137a0f02283c004b1066bd439b48911a23b8f514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:c5:61:03:3e:c9:de:7a:cf:c8:fa:d1:ab:
72:45:97:02:96:ee:ab:26:50:0c:5b:4e:19:55:d3:
d8:e6:4b:41:69:2e:95:90:cf:f2:eb:2c:d7:a4:cb:
92:2a:de:c0:04:cb:da:79:93:75:cd:02:01:db:16:
04:d1:f3:ba:59:63:fc:30:1a:da:f8:13:2f:08:6c:
19:12:9c:c7:cf:cf:6f:a2:3c:d4:82:62:eb:ac:61:
5e:d0:83:e0:55:38:a8:ab:b7:39:63:0a:68:ce:69:
f3:34:a3:e6:fa:ba:1f:83:1c:e6:b5:55:d5:93:6f:
80:ae:75:78:bf:f0:7b:33:6f:f9:9d:23:36:12:a2:
1c:f7:8f:11:c0:92:9c:9a:80:ba:ef:86:1f:b3:3f:
c8:94:1c:c4:9b:b7:da:1f:a8:32:5f:c6:83:9c:bb:
35:b8:73:4a:46:a7:59:97:77:9a:12:a0:9d:2a:d2:
f3:2b:c8:7f:cc:b6:a9:83:9f:0c:8e:c0:a2:17:95:
70:dd:77:a7:eb:88:7e:46:6f:49:33:7d:22:e7:78:
8f:1e:24:e1:13:f5:62:37:ca:88:ad:a7:14:d4:3b:
8b:8d:a4:53:6d:3e:04:58:c0:ad:9f:7f:ed:44:26:
4c:b9:bf:bd:d7:1f:c7:43:aa:0d:ef:a1:27:ec:bc:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:0F:02:28:3C:00:4B:10:66:BD:43:9B:48:91:1A:23:B8:F5:14
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:37:11:41:b6:cb:83:a3:48:77:a1:2a:21:a1:4e:72:00:
24:de:0a:36:16:74:f0:72:10:eb:b0:e7:69:6c:a6:ba:7c:7e:
31:50:1b:52:6c:37:52:95:17:97:5a:94:53:94:aa:08:4c:1c:
66:b1:c0:5f:58:f9:6c:f4:c8:59:73:0b:8a:c9:e4:66:cc:79:
dd:9a:8b:07:f3:d2:f0:4d:16:08:ce:74:5c:68:aa:97:1f:f2:
b4:80:6c:cd:13:f0:c9:1b:eb:60:1f:f4:80:b1:55:e6:03:23:
b3:25:0b:1a:c4:01:06:51:c7:bc:e7:cf:7c:31:c0:f8:bf:65:
20:14:3a:ba:7a:a4:85:d2:5a:62:cf:23:00:6a:e2:77:eb:f4:
e9:67:a5:ca:e9:cd:15:86:34:4e:5b:37:37:84:c3:0e:a1:67:
83:4c:ca:4c:cc:f4:a5:04:63:de:36:2f:0f:e4:b0:6c:44:b2:
16:bc:e1:e4:9b:f4:14:63:c7:d6:cf:88:33:e1:2b:2f:da:7c:
bc:37:44:33:4b:05:31:67:4e:5a:2f:7a:29:96:b7:c4:be:b0:
12:a3:7f:5c:89:84:26:ee:04:ca:c0:ca:40:8e:c3:4e:a3:1c:
7a:2b:ac:1e:5b:7b:e0:d1:4d:8a:cf:40:ad:c6:7d:95:49:2e:
cb:73:e2:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjFuZ5rhkEn7dw1uEzwcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM0NWE4MmNlNzE2ZGQzZTc2MzMxNzJmODcwMzA0N2Y2
YjdkOTQwHhcNMjUwNjA3MDQwMDQ3WhcNMjUwNjA4MDQwMDQ3WjAzMTEwLwYDVQQD
EygxMzdhMGYwMjI4M2MwMDRiMTA2NmJkNDM5YjQ4OTExYTIzYjhmNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj3FYQM+yd56z8j60atyRZcClu6r
JlAMW04ZVdPY5ktBaS6VkM/y6yzXpMuSKt7ABMvaeZN1zQIB2xYE0fO6WWP8MBra
+BMvCGwZEpzHz89vojzUgmLrrGFe0IPgVTioq7c5YwpozmnzNKPm+rofgxzmtVXV
k2+ArnV4v/B7M2/5nSM2EqIc948RwJKcmoC674Yfsz/IlBzEm7faH6gyX8aDnLs1
uHNKRqdZl3eaEqCdKtLzK8h/zLapg58MjsCiF5Vw3Xen64h+Rm9JM30i53iPHiTh
E/ViN8qIracU1DuLjaRTbT4EWMCtn3/tRCZMub+91x/HQ6oN76En7LyMnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN6DwIoPABLEGa9Q5tIkRojuPUUMB8GA1UdIwQY
MBaAFIDzRags5xbdPnYzFy+HAwR/a32UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAt
NzRjNWRiN2MwOTNhLzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAtNzRjNWRiN2MwOTNh
LzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpg3EUG2
y4OjSHehKiGhTnIAJN4KNhZ08HIQ67DnaWymunx+MVAbUmw3UpUXl1qUU5SqCEwc
ZrHAX1j5bPTIWXMLisnkZsx53ZqLB/PS8E0WCM50XGiqlx/ytIBszRPwyRvrYB/0
gLFV5gMjsyULGsQBBlHHvOfPfDHA+L9lIBQ6unqkhdJaYs8jAGrid+v06WelyunN
FYY0Tls3N4TDDqFng0zKTMz0pQRj3jYvD+SwbESyFrzh5Jv0FGPH1s+IM+ErL9p8
vDdEM0sFMWdOWi96KZa3xL6wEqN/XImEJu4EysDKQI7DTqMceiusHlt74NFNis9A
rcZ9lUkuy3PirQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:35 2025 by rpki-client