Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: TcDjhkN8bk728E27P102X2lyOGLnB5rjWpQ8eFDzxKs=
Subject key identifier: FC:6E:52:DE:C3:E8:C7:F9:2C:12:27:04:AE:FA:49:E6:07:BD:60:13
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019752D8A7ED05491410FD7C6B9E14B3782D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 12ED
Signing time: Mon 09 Jun 2025 04:00:19 +0000
Manifest this update: Mon 09 Jun 2025 04:00:19 +0000
Manifest next update: Tue 10 Jun 2025 04:00:19 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: Eo05HbY6OvfzZl5uU7hPGgxLaDklG59fOAQL3zTfO0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:a7:ed:05:49:14:10:fd:7c:6b:9e:14:b3:78:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Jun 9 04:00:19 2025 GMT
Not After : Jun 10 04:00:19 2025 GMT
Subject: CN=fc6e52dec3e8c7f92c122704aefa49e607bd6013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:a2:bb:6a:f9:c8:be:42:d6:ef:a6:42:5c:
c2:46:25:4a:1a:3a:af:f4:d1:a7:43:71:da:39:72:
e8:ed:1a:7c:76:35:30:7c:77:a0:24:a5:2e:21:ef:
be:14:4c:c0:2c:93:1f:cf:5f:5b:ab:fe:ed:0f:e9:
94:e2:c5:95:6e:f9:56:9e:8b:20:39:03:a9:f2:f2:
ce:47:db:50:d4:52:f5:c7:c4:21:74:35:57:0a:59:
ca:fd:03:b9:3a:84:ba:26:7d:4c:50:57:68:70:ba:
00:4b:ac:fe:e0:82:c4:e5:a8:81:32:b4:11:07:d3:
08:43:90:6b:44:8a:85:c5:5b:ca:77:63:d0:5e:8d:
d5:6c:7a:77:ce:a3:83:c6:7a:3c:ad:37:bf:dd:df:
bd:ee:e6:0e:37:7b:be:bc:ba:62:b0:fd:48:2e:45:
c1:17:64:2e:ae:84:6c:33:71:15:fd:82:06:b3:30:
c1:46:e7:69:ec:cf:99:59:bd:47:86:b7:8b:e9:48:
0a:1b:0c:2b:24:33:f9:ed:6e:b7:7e:60:f2:9a:00:
64:29:b1:32:e1:66:ca:43:e7:6d:41:6d:44:b9:c3:
e1:6c:69:b7:42:54:b3:bc:12:5a:f8:b7:b0:b6:cc:
69:bd:de:9c:ed:03:4e:a5:25:31:85:58:d1:12:51:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:52:DE:C3:E8:C7:F9:2C:12:27:04:AE:FA:49:E6:07:BD:60:13
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:6a:91:c1:66:3a:b1:05:6e:bf:bd:f6:ba:f7:47:c1:39:
ac:71:1e:dc:85:5b:ab:f3:8d:81:ba:4e:4a:51:a5:76:1a:a0:
f9:54:d9:da:8a:74:5f:dd:99:b6:cc:33:7f:db:7f:8b:36:b6:
50:39:03:e7:b6:84:d8:74:31:d2:f3:2b:a8:db:76:33:25:dc:
7e:55:3a:4d:53:9e:f1:d0:6f:eb:a4:3b:d9:f9:65:85:29:57:
7c:ce:72:86:fc:26:7f:20:65:4a:37:51:32:35:24:04:40:d4:
2d:07:cc:5e:0e:a8:41:d8:34:c1:60:a8:da:2e:8a:f5:06:72:
10:4d:ef:5e:dc:44:04:f2:34:45:94:e2:53:ea:4d:e5:50:17:
ff:9f:56:b9:e9:42:07:17:e1:6d:b4:3c:bc:3c:77:9c:05:39:
93:2c:02:cb:39:6e:db:cd:0e:80:60:0a:9c:05:c2:9e:f1:17:
50:63:8d:93:b6:7f:e7:c0:62:1c:d3:1f:87:9b:eb:b0:f8:5c:
72:e4:10:94:c6:75:9e:85:a6:5e:9d:22:ec:67:0e:21:f7:d9:
20:64:df:70:ef:13:de:f1:b0:38:41:38:16:16:cf:52:82:5f:
36:5d:40:d7:a1:02:87:63:1e:33:69:4d:9c:c2:4c:51:61:e9:
74:9c:38:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2KftBUkUEP18a54Us3gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTA0M2E1NGU2MjMzZDIyZTU2ZGI3NGM5Zjc4ZTJkNmQx
Yzk3OTQwHhcNMjUwNjA5MDQwMDE5WhcNMjUwNjEwMDQwMDE5WjAzMTEwLwYDVQQD
EyhmYzZlNTJkZWMzZThjN2Y5MmMxMjI3MDRhZWZhNDllNjA3YmQ2MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGiiu2r5yL5C1u+mQlzCRiVKGjqv
9NGnQ3HaOXLo7Rp8djUwfHegJKUuIe++FEzALJMfz19bq/7tD+mU4sWVbvlWnosg
OQOp8vLOR9tQ1FL1x8QhdDVXClnK/QO5OoS6Jn1MUFdocLoAS6z+4ILE5aiBMrQR
B9MIQ5BrRIqFxVvKd2PQXo3VbHp3zqODxno8rTe/3d+97uYON3u+vLpisP1ILkXB
F2QuroRsM3EV/YIGszDBRudp7M+ZWb1HhreL6UgKGwwrJDP57W63fmDymgBkKbEy
4WbKQ+dtQW1EucPhbGm3QlSzvBJa+Lewtsxpvd6c7QNOpSUxhVjRElGf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxuUt7D6Mf5LBInBK76SeYHvWATMB8GA1UdIwQY
MBaAFBlQQ6VOYjPSLlbbdMn3ji1tHJeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTkt
M2I1MjdjYjk4Njg1LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTktM2I1MjdjYjk4Njg1
LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmxqkcFm
OrEFbr+99rr3R8E5rHEe3IVbq/ONgbpOSlGldhqg+VTZ2op0X92Ztswzf9t/iza2
UDkD57aE2HQx0vMrqNt2MyXcflU6TVOe8dBv66Q72fllhSlXfM5yhvwmfyBlSjdR
MjUkBEDULQfMXg6oQdg0wWCo2i6K9QZyEE3vXtxEBPI0RZTiU+pN5VAX/59WuelC
BxfhbbQ8vDx3nAU5kywCyzlu280OgGAKnAXCnvEXUGONk7Z/58BiHNMfh5vrsPhc
cuQQlMZ1noWmXp0i7GcOIffZIGTfcO8T3vGwOEE4FhbPUoJfNl1A16ECh2MeM2lN
nMJMUWHpdJw4rw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:48:39 2025 by rpki-client