Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: 1Tt6fXUufB/w8/Ck/UB0Va8DerkrGJFi9ksgjBaWq9Q=
Subject key identifier: CC:C2:EE:67:81:7B:2B:D0:99:40:79:5D:C7:6E:5D:3C:14:C8:2E:F3
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 01974779D96817F2406A3A708A955CA72D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 23:00:57 +0000
Manifest this update: Fri 06 Jun 2025 23:00:57 +0000
Manifest next update: Sat 07 Jun 2025 23:00:57 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: Zqsx11FwQKWqcOJzdsRU/9OGOIoEcOwmoRsXApXDPtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d9:68:17:f2:40:6a:3a:70:8a:95:5c:a7:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Jun 6 23:00:57 2025 GMT
Not After : Jun 7 23:00:57 2025 GMT
Subject: CN=ccc2ee67817b2bd09940795dc76e5d3c14c82ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:f6:ab:02:b8:eb:4a:dc:e7:48:e0:05:2d:
17:2d:da:54:c2:3e:72:75:1e:07:b9:8b:91:a4:07:
2b:3e:bd:ff:9e:66:8d:2d:e9:cf:be:91:5b:02:eb:
3a:d8:6f:d2:ad:9c:99:eb:6f:e3:1d:e2:0d:ed:f4:
01:67:91:80:59:1e:d8:55:73:34:04:2e:f1:ce:10:
7a:23:c0:23:51:e0:73:4b:66:31:a3:35:4e:d6:2e:
50:ad:27:6d:26:56:3e:38:b1:6c:a8:28:dc:7c:46:
73:4b:d3:0a:a7:85:6e:85:b7:bb:2c:7c:8c:16:83:
a8:db:2f:63:8b:ad:69:ef:85:e5:1b:79:6c:dd:c5:
e0:14:4f:43:c0:34:e6:2a:52:c6:06:cf:c8:df:b6:
c1:40:d3:e5:bc:e2:54:34:2d:58:03:e0:01:e8:c1:
81:70:d7:08:92:75:a4:e5:76:d0:5f:a4:b5:47:4d:
d8:ab:d2:d2:6b:e0:3a:bb:b5:64:0d:94:2f:a9:a0:
62:e1:c8:04:21:13:dc:46:e6:56:47:fc:cf:e2:a6:
0f:01:0f:57:cb:44:5f:a7:e9:32:2b:66:2b:f2:94:
b9:ca:24:4f:40:70:ae:c8:66:cf:1f:a9:51:50:14:
11:d0:15:97:a6:d1:d9:ba:3e:10:0f:6f:76:d1:54:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:EE:67:81:7B:2B:D0:99:40:79:5D:C7:6E:5D:3C:14:C8:2E:F3
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:41:79:7c:8b:ec:71:d2:3b:35:14:a1:cd:d1:7b:d9:69:
65:c3:9e:3f:73:cc:45:f4:e3:1f:9f:07:81:f4:bf:24:44:e1:
7e:3a:c9:89:aa:ea:58:54:31:ff:5f:3e:1c:db:1c:19:6c:0d:
f9:9f:f1:90:9b:06:77:0d:c7:70:58:94:13:e6:fe:dd:53:c2:
0e:5e:82:f3:86:de:02:b9:ac:f1:49:42:5f:c0:26:91:28:9a:
26:b7:b1:80:2a:88:de:a3:9f:49:9d:21:a7:ba:c0:5f:9d:18:
1d:65:a2:14:1d:3f:8b:c6:c3:d8:c6:a6:e2:89:74:38:26:8c:
88:4f:e7:a3:31:b2:f8:07:cb:a0:d2:7b:25:0e:4c:09:ef:9f:
85:1d:94:de:c8:d2:30:a5:a4:f8:30:0a:21:17:25:de:68:14:
d1:52:0c:22:cb:63:da:91:38:26:e3:d3:20:e2:cc:25:c3:a3:
47:dd:3a:3e:3d:1b:be:03:e9:f1:b2:3f:fa:7b:d6:aa:cb:16:
ee:8d:ff:c4:2a:41:8f:bc:d6:18:ba:d7:2f:b0:06:62:c3:9a:
33:ca:c8:1e:75:ab:ef:ed:38:39:8d:98:5d:d1:07:07:e3:56:
34:74:13:2a:d7:f6:c6:30:30:cb:b4:ac:0c:78:5c:4b:8e:0c:
75:bb:b6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHedloF/JAajpwipVcpy2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTc2MjVjMzk1ZmI4NjdmNWQ4MDhkNTM1OTdhMTFjZTdm
M2M0Y2IwHhcNMjUwNjA2MjMwMDU3WhcNMjUwNjA3MjMwMDU3WjAzMTEwLwYDVQQD
EyhjY2MyZWU2NzgxN2IyYmQwOTk0MDc5NWRjNzZlNWQzYzE0YzgyZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonr2qwK460rc50jgBS0XLdpUwj5y
dR4HuYuRpAcrPr3/nmaNLenPvpFbAus62G/SrZyZ62/jHeIN7fQBZ5GAWR7YVXM0
BC7xzhB6I8AjUeBzS2YxozVO1i5QrSdtJlY+OLFsqCjcfEZzS9MKp4Vuhbe7LHyM
FoOo2y9ji61p74XlG3ls3cXgFE9DwDTmKlLGBs/I37bBQNPlvOJUNC1YA+AB6MGB
cNcIknWk5XbQX6S1R03Yq9LSa+A6u7VkDZQvqaBi4cgEIRPcRuZWR/zP4qYPAQ9X
y0Rfp+kyK2Yr8pS5yiRPQHCuyGbPH6lRUBQR0BWXptHZuj4QD2920VQ4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzC7meBeyvQmUB5XcduXTwUyC7zMB8GA1UdIwQY
MBaAFBmXYlw5X7hn9dgI1TWXoRzn88TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUt
YTdmN2I5ODA5MDA3LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUtYTdmN2I5ODA5MDA3
LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSRBeXyL
7HHSOzUUoc3Re9lpZcOeP3PMRfTjH58HgfS/JEThfjrJiarqWFQx/18+HNscGWwN
+Z/xkJsGdw3HcFiUE+b+3VPCDl6C84beArms8UlCX8AmkSiaJrexgCqI3qOfSZ0h
p7rAX50YHWWiFB0/i8bD2Mam4ol0OCaMiE/nozGy+AfLoNJ7JQ5MCe+fhR2U3sjS
MKWk+DAKIRcl3mgU0VIMIstj2pE4JuPTIOLMJcOjR906Pj0bvgPp8bI/+nvWqssW
7o3/xCpBj7zWGLrXL7AGYsOaM8rIHnWr7+04OY2YXdEHB+NWNHQTKtf2xjAwy7Ss
DHhcS44Mdbu2Eg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:45 2025 by rpki-client