Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: 2JYjPkyTt3IGjdwsqtpBhI4/Avy2iTtID0ViEFpPY+c=
Subject key identifier: EC:56:1E:91:54:2B:7F:90:73:12:0C:EC:B6:DF:64:B0:57:13:32:71
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 0197673BBC4D732C01BBB46BC543FA49C7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 03:00:57 +0000
Manifest this update: Fri 13 Jun 2025 03:00:57 +0000
Manifest next update: Sat 14 Jun 2025 03:00:57 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: kpnqSM0KOsiQ5ZuTOiYrrGFe2bGAmheKBPk06DoZsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:bc:4d:73:2c:01:bb:b4:6b:c5:43:fa:49:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Jun 13 03:00:57 2025 GMT
Not After : Jun 14 03:00:57 2025 GMT
Subject: CN=ec561e91542b7f9073120cecb6df64b057133271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:1e:fd:fd:90:93:d2:cc:47:dd:88:a7:28:
67:16:0c:4b:07:d4:9d:47:67:de:e6:2e:b5:57:69:
30:cb:be:d0:25:ae:f5:81:d7:a7:0b:52:3d:e6:68:
f2:93:e5:99:10:df:c9:df:d8:88:56:32:8b:66:1c:
39:1b:6f:6b:43:9c:d4:ab:49:69:7b:7d:37:8e:c2:
74:27:9f:a4:ba:9d:70:38:d7:b7:83:ae:bc:30:96:
6f:b3:f1:78:b8:63:ed:de:4a:6a:33:30:50:f5:d7:
fc:f2:91:a6:a9:b0:ef:ba:59:ce:3a:e4:ff:ec:8a:
45:7e:f0:d6:f3:c7:f8:08:0e:49:d8:80:b3:96:b7:
e6:5d:af:83:ec:ba:69:1d:7e:4f:43:cc:6a:e1:3c:
70:1a:36:20:c5:e6:3f:df:bc:19:a0:af:5a:33:9c:
63:92:51:68:85:f0:fc:77:7d:cb:19:8c:81:05:02:
33:b9:0f:37:00:7d:66:83:e0:50:b0:c4:98:6d:ca:
e3:1c:64:a3:c9:d6:f3:50:8e:3f:9d:02:be:51:c6:
37:b5:85:20:bc:2b:52:28:63:ed:ef:b0:45:3d:75:
1d:a2:73:49:24:ed:19:a1:a8:61:46:d8:48:dd:cf:
da:dd:7a:d0:cd:bb:fc:70:02:3a:40:19:35:18:02:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:1E:91:54:2B:7F:90:73:12:0C:EC:B6:DF:64:B0:57:13:32:71
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b6:4a:ce:70:29:6e:29:33:c1:99:e0:2b:c7:ce:25:66:7c:
4e:2a:e8:01:b3:7c:60:68:84:5b:27:88:26:75:83:a9:20:13:
66:3a:4b:71:97:8d:ae:f0:07:65:84:e4:7d:48:cc:d5:35:48:
c0:a4:d9:38:f9:30:59:4c:85:ac:f7:a4:64:57:d0:6f:7b:ad:
b6:6d:cb:e3:09:0d:ad:a8:3f:9c:94:a3:4c:9d:f6:99:44:63:
50:84:5b:99:01:df:22:45:5e:b2:b6:41:e6:13:c0:ca:3b:86:
8d:23:94:bd:3d:86:3f:c5:0a:12:a3:70:ea:e7:d5:5e:7c:c8:
9d:4c:be:02:bb:12:fe:5c:05:dd:5d:c6:50:48:d6:5c:26:a4:
a9:36:78:21:79:8f:35:00:2c:49:71:05:f1:e8:c3:09:53:93:
3a:6c:13:fc:e2:05:8b:b9:0e:cd:81:c8:9f:7d:77:44:9d:36:
a9:cd:86:9e:5d:70:07:2f:2b:77:43:5f:9e:c3:ea:f3:99:34:
04:51:17:8a:ad:cd:bd:88:c8:ce:b6:cd:6e:bf:f0:5e:a1:3d:
2e:74:63:3b:b4:43:c9:3e:ee:ec:70:15:d6:ba:c7:df:9f:1d:
91:52:58:ac:f8:e0:6c:b4:f7:0f:42:6f:19:66:2c:68:89:b1:
36:76:7e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO7xNcywBu7RrxUP6ScfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTA2MzM3MzkyNDNmNzFhMjllZWQxOGRjMTNkMDA2NzZj
N2NlM2MwHhcNMjUwNjEzMDMwMDU3WhcNMjUwNjE0MDMwMDU3WjAzMTEwLwYDVQQD
EyhlYzU2MWU5MTU0MmI3ZjkwNzMxMjBjZWNiNmRmNjRiMDU3MTMzMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCYe/f2Qk9LMR92IpyhnFgxLB9Sd
R2fe5i61V2kwy77QJa71gdenC1I95mjyk+WZEN/J39iIVjKLZhw5G29rQ5zUq0lp
e303jsJ0J5+kup1wONe3g668MJZvs/F4uGPt3kpqMzBQ9df88pGmqbDvulnOOuT/
7IpFfvDW88f4CA5J2ICzlrfmXa+D7LppHX5PQ8xq4TxwGjYgxeY/37wZoK9aM5xj
klFohfD8d33LGYyBBQIzuQ83AH1mg+BQsMSYbcrjHGSjydbzUI4/nQK+UcY3tYUg
vCtSKGPt77BFPXUdonNJJO0ZoahhRthI3c/a3XrQzbv8cAI6QBk1GAIOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxWHpFUK3+QcxIM7LbfZLBXEzJxMB8GA1UdIwQY
MBaAFBgQYzc5JD9xop7tGNwT0AZ2x848MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEt
ZWQzZjJmNzBjZjE0LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEtZWQzZjJmNzBjZjE0
LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLZKznAp
bikzwZngK8fOJWZ8TiroAbN8YGiEWyeIJnWDqSATZjpLcZeNrvAHZYTkfUjM1TVI
wKTZOPkwWUyFrPekZFfQb3uttm3L4wkNrag/nJSjTJ32mURjUIRbmQHfIkVesrZB
5hPAyjuGjSOUvT2GP8UKEqNw6ufVXnzInUy+ArsS/lwF3V3GUEjWXCakqTZ4IXmP
NQAsSXEF8ejDCVOTOmwT/OIFi7kOzYHIn313RJ02qc2Gnl1wBy8rd0NfnsPq85k0
BFEXiq3NvYjIzrbNbr/wXqE9LnRjO7RDyT7u7HAV1rrH358dkVJYrPjgbLT3D0Jv
GWYsaImxNnZ++A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:36:57 2025 by rpki-client