Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier: pRqF8tYP71mWEtD2NlpOy5haXr/J6lnFvfYvTmGvFY8=
Subject key identifier: 11:E8:71:EC:FF:5A:2C:5D:8A:71:FF:03:44:66:A9:3D:DC:23:BF:33
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial: 0197CC83929D0A12FC9DB6F950BD3AB7CCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number: 1036
Signing time: Wed 02 Jul 2025 19:01:04 +0000
Manifest this update: Wed 02 Jul 2025 19:01:04 +0000
Manifest next update: Thu 03 Jul 2025 19:01:04 +0000
Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: DBpa2wt4Xzbrjs2oNSADlibkxi768810sWZlC9GIFSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:92:9d:0a:12:fc:9d:b6:f9:50:bd:3a:b7:cc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
Validity
Not Before: Jul 2 19:01:04 2025 GMT
Not After : Jul 3 19:01:04 2025 GMT
Subject: CN=11e871ecff5a2c5d8a71ff034466a93ddc23bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:1d:44:13:d1:34:44:bb:87:fb:aa:ed:1b:
52:3c:2e:23:3f:09:cf:f3:f3:5a:36:22:83:b5:05:
7f:85:35:df:32:b4:2f:47:a3:f5:7a:d5:fb:4a:91:
de:f3:d0:49:8b:1b:f6:ff:e6:4c:74:a4:30:d2:05:
b1:16:dc:18:9b:d0:06:55:f1:4d:c0:cf:28:70:46:
22:ff:7b:94:d6:f0:79:3f:33:b7:06:1f:31:91:cd:
fe:c3:85:11:86:3a:9e:86:bd:dd:e4:8f:74:75:04:
9a:b2:f0:98:82:c3:9f:42:99:c4:76:e5:50:dc:b8:
b1:ac:09:46:65:b8:e9:2e:04:4f:49:f7:a5:89:4f:
36:4c:df:c6:f6:09:5e:70:5e:9e:9e:45:94:5c:20:
84:fd:f9:8d:c5:b4:85:54:ef:75:67:ea:7c:64:d8:
10:38:36:c3:67:7f:03:ff:3c:c4:95:d1:2f:37:96:
7f:8c:ec:e2:d0:f8:55:22:50:c7:80:2b:a2:35:55:
e2:2e:e7:76:3a:b7:cd:79:56:ed:8f:9f:1d:1f:0d:
7d:80:96:76:b5:bf:03:39:42:a3:75:d8:7c:e9:ae:
82:32:a3:c7:22:20:39:d5:5c:35:bf:b3:9f:9c:e2:
64:6e:4a:52:67:8d:01:0e:f7:77:1e:ba:f3:66:70:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:71:EC:FF:5A:2C:5D:8A:71:FF:03:44:66:A9:3D:DC:23:BF:33
X509v3 Authority Key Identifier:
keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e7:a5:37:86:1c:0c:78:e4:cd:9c:90:6a:ac:67:fc:ea:59:
76:7d:f5:67:f6:8c:46:6b:f2:55:a6:6b:3c:0a:ea:1c:60:47:
d7:e9:5e:a9:1e:68:73:1a:6e:52:fb:c8:8e:3e:0d:09:49:80:
84:80:c1:5a:d4:af:92:46:75:1f:01:2b:1c:fa:67:42:ee:9e:
4e:bd:10:42:65:1c:87:cc:b8:be:9c:78:e1:0f:c4:43:40:d9:
83:ec:3d:ff:44:63:05:48:fa:82:53:51:55:32:ef:c0:b9:92:
7b:28:61:ad:72:d5:c3:2a:42:df:9a:e9:a1:47:cb:31:ec:76:
6c:c5:71:a7:48:c8:ae:4d:11:83:32:ce:1d:1d:97:40:e2:7b:
74:de:11:80:ea:ab:72:bb:88:e4:14:f8:56:2b:3e:9c:bb:19:
50:6d:b1:1d:9d:6f:a6:4b:08:b0:ef:51:82:f3:29:78:f9:83:
c3:43:c7:d2:6e:79:e8:c9:f3:c0:29:90:5a:0e:9e:57:17:a3:
b6:82:ba:b0:d7:b6:5f:c2:b0:ec:50:29:ca:b8:63:47:b0:43:
82:90:e9:d4:4f:d1:25:c3:71:4b:1b:0d:7f:5c:13:ea:a3:a0:
fa:f1:ca:f2:b3:c2:03:10:a2:49:0d:1b:91:24:12:12:77:71:
bd:db:25:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMg5KdChL8nbb5UL06t8zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzkyYmRjYjYyMWNiZjIxYzA0NTYzMzNiODQzY2EzMmMx
MzFhZmMwHhcNMjUwNzAyMTkwMTA0WhcNMjUwNzAzMTkwMTA0WjAzMTEwLwYDVQQD
EygxMWU4NzFlY2ZmNWEyYzVkOGE3MWZmMDM0NDY2YTkzZGRjMjNiZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SsdRBPRNES7h/uq7RtSPC4jPwnP
8/NaNiKDtQV/hTXfMrQvR6P1etX7SpHe89BJixv2/+ZMdKQw0gWxFtwYm9AGVfFN
wM8ocEYi/3uU1vB5PzO3Bh8xkc3+w4URhjqehr3d5I90dQSasvCYgsOfQpnEduVQ
3LixrAlGZbjpLgRPSfeliU82TN/G9glecF6enkWUXCCE/fmNxbSFVO91Z+p8ZNgQ
ODbDZ38D/zzEldEvN5Z/jOzi0PhVIlDHgCuiNVXiLud2OrfNeVbtj58dHw19gJZ2
tb8DOUKjddh86a6CMqPHIiA51Vw1v7OfnOJkbkpSZ40BDvd3HrrzZnBptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHocez/WixdinH/A0RmqT3cI78zMB8GA1UdIwQY
MBaAFIB5K9y2IcvyHARWMzuEPKMsExr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEt
N2RhOWU4OGQ2NWI5LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEtN2RhOWU4OGQ2NWI5
LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuelN4Yc
DHjkzZyQaqxn/OpZdn31Z/aMRmvyVaZrPArqHGBH1+leqR5ocxpuUvvIjj4NCUmA
hIDBWtSvkkZ1HwErHPpnQu6eTr0QQmUch8y4vpx44Q/EQ0DZg+w9/0RjBUj6glNR
VTLvwLmSeyhhrXLVwypC35rpoUfLMex2bMVxp0jIrk0RgzLOHR2XQOJ7dN4RgOqr
cruI5BT4Vis+nLsZUG2xHZ1vpksIsO9RgvMpePmDw0PH0m556MnzwCmQWg6eVxej
toK6sNe2X8Kw7FApyrhjR7BDgpDp1E/RJcNxSxsNf1wT6qOg+vHK8rPCAxCiSQ0b
kSQSEndxvdslGQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:24 2025 by rpki-client