Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
File: ggA1PrKBit3XElx4FCFDMUneb2I.mft (raw, json)
Hash identifier: wzWDuZx+WsId3Nl4CMZB8aLPzR0HNOOAiPJA14qK5Z0=
Subject key identifier: 98:ED:C7:64:27:09:FD:90:C2:B0:A0:53:66:D4:02:77:32:05:91:FB
Authority key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Certificate issuer: /CN=8200353eb2818addd7125c781421433149de6f62
Certificate serial: 0197488C21491E858783193AACDDE07EFE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
Manifest number: 04F2
Signing time: Sat 07 Jun 2025 04:00:32 +0000
Manifest this update: Sat 07 Jun 2025 04:00:32 +0000
Manifest next update: Sun 08 Jun 2025 04:00:32 +0000
Files and hashes: 1: ggA1PrKBit3XElx4FCFDMUneb2I.crl (hash: M1WXYMJLO7to7piL6FGDJsX0tkQ2DszO5P1EDO86X1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:21:49:1e:85:87:83:19:3a:ac:dd:e0:7e:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200353eb2818addd7125c781421433149de6f62
Validity
Not Before: Jun 7 04:00:32 2025 GMT
Not After : Jun 8 04:00:32 2025 GMT
Subject: CN=98edc7642709fd90c2b0a05366d40277320591fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:2e:38:ac:40:10:8b:3a:26:ec:c1:6f:08:
45:c5:d4:74:e3:88:63:c3:3a:14:bc:e7:07:5a:1f:
91:c1:c8:95:5f:c3:52:f7:56:04:e3:57:6f:2f:02:
93:30:7e:ee:4a:51:f1:68:0f:5a:ed:49:65:e7:a3:
be:af:dd:42:00:f9:71:a0:40:d2:91:3f:78:b0:e3:
49:57:37:87:41:9d:af:26:0a:2d:98:5c:86:b6:27:
1a:32:fa:36:7a:4c:84:0d:8d:76:f3:46:5c:71:b7:
c4:0f:07:36:7b:55:ee:1c:2f:4e:8a:8e:b5:9f:c5:
d6:81:cf:2a:43:df:94:93:51:be:3f:18:bd:c1:22:
55:c3:15:c6:48:88:87:45:59:18:e9:f3:8a:2a:d4:
15:c4:27:0f:9a:dd:7b:17:bb:fe:18:d2:e3:f7:9b:
78:30:b2:40:14:49:ff:25:f2:09:df:5f:c7:d6:79:
6c:46:55:d3:29:47:2b:69:8d:ea:9f:5f:63:a3:ef:
a4:c1:e1:59:86:6a:05:9b:00:99:2e:34:0a:91:b9:
96:46:a8:f1:6c:f7:de:e4:79:e1:3c:ae:22:c2:e1:
ba:9c:82:fb:e1:46:d8:64:4e:cd:91:c5:f4:0e:9f:
b7:05:57:de:18:82:86:79:ee:fd:0d:30:e4:9f:af:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:C7:64:27:09:FD:90:C2:B0:A0:53:66:D4:02:77:32:05:91:FB
X509v3 Authority Key Identifier:
keyid:82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:7f:f4:02:bd:bc:92:ff:22:34:a2:72:2b:08:36:cb:e3:
b4:39:61:b8:fd:3c:db:ce:9e:ef:89:92:7a:de:17:1c:95:7c:
cc:91:b6:37:11:39:91:af:32:b3:87:3e:ad:d1:01:ab:ba:38:
f3:62:95:d2:d2:a6:2c:c1:b4:e9:a5:81:89:0b:b0:34:af:34:
fe:2d:11:96:f0:2e:5a:5a:8a:a9:d1:fd:e8:31:1c:31:6a:56:
a9:7c:85:b6:fd:dd:1b:12:f0:bf:7e:2c:25:b4:f8:7d:28:f0:
fa:55:d3:dc:1b:25:3e:ab:9d:4f:56:45:65:42:80:53:86:e3:
90:87:ea:d2:31:c9:2d:65:41:49:2a:9a:39:21:81:9f:a9:8f:
5a:2a:ff:a5:37:91:42:b3:f6:f3:33:bb:96:96:cc:25:7d:2f:
d7:b7:26:fe:4b:78:c0:86:bf:8a:b4:5c:c8:97:5e:c4:cc:d0:
60:ff:78:58:5a:b8:e0:9c:af:cd:c8:ab:f9:ad:c2:c7:d4:8d:
a5:b4:6b:4f:30:53:0e:31:15:bc:d0:92:7e:db:97:d2:9b:93:
1d:1f:ca:df:ba:62:e0:55:22:5d:62:52:69:1c:35:b2:ce:e9:
97:0e:81:f6:98:2a:39:81:71:f8:d6:5b:06:76:a9:9e:4f:00:
76:8f:54:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjCFJHoWHgxk6rN3gfv48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMDAzNTNlYjI4MThhZGRkNzEyNWM3ODE0MjE0MzMxNDlk
ZTZmNjIwHhcNMjUwNjA3MDQwMDMyWhcNMjUwNjA4MDQwMDMyWjAzMTEwLwYDVQQD
Eyg5OGVkYzc2NDI3MDlmZDkwYzJiMGEwNTM2NmQ0MDI3NzMyMDU5MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEMuOKxAEIs6JuzBbwhFxdR044hj
wzoUvOcHWh+RwciVX8NS91YE41dvLwKTMH7uSlHxaA9a7Ull56O+r91CAPlxoEDS
kT94sONJVzeHQZ2vJgotmFyGticaMvo2ekyEDY1280ZccbfEDwc2e1XuHC9Oio61
n8XWgc8qQ9+Uk1G+Pxi9wSJVwxXGSIiHRVkY6fOKKtQVxCcPmt17F7v+GNLj95t4
MLJAFEn/JfIJ31/H1nlsRlXTKUcraY3qn19jo++kweFZhmoFmwCZLjQKkbmWRqjx
bPfe5HnhPK4iwuG6nIL74UbYZE7NkcX0Dp+3BVfeGIKGee79DTDkn69eIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjtx2QnCf2QwrCgU2bUAncyBZH7MB8GA1UdIwQY
MBaAFIIANT6ygYrd1xJceBQhQzFJ3m9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kMjMxMGYtMjQzOC00NzVhLWIzOTEt
N2NkNjEzYTUyN2QxLzEvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kMjMxMGYtMjQzOC00NzVhLWIzOTEtN2NkNjEzYTUyN2Qx
LzEvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6F/9AK9
vJL/IjSicisINsvjtDlhuP08286e74mSet4XHJV8zJG2NxE5ka8ys4c+rdEBq7o4
82KV0tKmLMG06aWBiQuwNK80/i0RlvAuWlqKqdH96DEcMWpWqXyFtv3dGxLwv34s
JbT4fSjw+lXT3BslPqudT1ZFZUKAU4bjkIfq0jHJLWVBSSqaOSGBn6mPWir/pTeR
QrP28zO7lpbMJX0v17cm/kt4wIa/irRcyJdexMzQYP94WFq44Jyvzcir+a3Cx9SN
pbRrTzBTDjEVvNCSftuX0puTHR/K37pi4FUiXWJSaRw1ss7plw6B9pgqOYFx+NZb
Bnapnk8Ado9UYw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:21 2025 by rpki-client